Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft
File:                     27E99028E687CF3D07E1A45E549685C8F7776153.mft (raw, json)
Hash identifier:          nPj9iXZWQ+TAqwwMkQ8mhQRJOyGae0xjl6an6nPHEoA=
Subject key identifier:   09:FA:CB:43:3B:80:B2:57:03:99:1F:F6:E5:85:3B:65:0C:C1:4B:00
Authority key identifier: 27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53
Certificate issuer:       /CN=27E99028E687CF3D07E1A45E549685C8F7776153
Certificate serial:       123B799D3DAD99702EB7BD41FBAF74CEEFC78F36
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft
Manifest number:          BE
Signing time:             Mon 28 Sep 2026 09:18:04 +0000
Manifest this update:     Mon 28 Sep 2026 09:13:04 +0000
Manifest next update:     Tue 29 Sep 2026 12:38:04 +0000
Files and hashes:         1: 323430313a663132303a3a2f33322d3332203d3e20313532363233.roa (hash: wjHlV5Tv8i9IzXptK84jE7gpZo88QjhSM7shS1dGz3o=)
                          2: 3136332e36312e3138342e302f32332d3234203d3e20313532363233.roa (hash: WjIaJOnCUaP7qXsHst6t6paHWdJyyQ9TflZd9JvijOE=)
                          3: 27E99028E687CF3D07E1A45E549685C8F7776153.crl (hash: jEf+W0sCFtTfExc6+2dGHDcRqQN6fa+upz6QEPxm9s4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl
                          rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 12:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3b:79:9d:3d:ad:99:70:2e:b7:bd:41:fb:af:74:ce:ef:c7:8f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E99028E687CF3D07E1A45E549685C8F7776153
        Validity
            Not Before: Sep 28 09:13:04 2026 GMT
            Not After : Sep 29 12:38:04 2026 GMT
        Subject: CN=09FACB433B80B25703991FF6E5853B650CC14B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:b8:d9:74:20:3b:51:cd:15:30:bb:ad:36:
                    92:15:5d:5e:c6:f3:d5:8f:c2:ad:4f:3e:b0:61:31:
                    08:61:8b:2e:db:5e:a4:f6:7d:4e:40:8f:f9:3e:3c:
                    e2:3a:70:45:cd:33:26:6b:13:7d:d6:ad:7f:df:72:
                    bd:b7:5d:73:f1:21:53:ef:9f:35:61:2c:83:13:6d:
                    75:f2:2b:d4:f2:d1:e0:52:56:01:05:05:91:45:2f:
                    cf:41:8a:2f:4e:ce:d0:3a:61:af:34:4f:80:92:25:
                    45:c7:41:c4:21:c6:59:a3:df:1a:ae:c0:f7:e6:3e:
                    f6:ce:71:d0:6c:ed:98:1c:30:86:46:b6:70:97:29:
                    98:0c:cc:1e:4a:3e:eb:6a:b2:15:cc:ac:36:91:c6:
                    1c:70:1a:e0:22:c1:79:bf:3b:03:d1:f8:6a:04:e8:
                    b4:e0:8e:dd:16:cd:72:4b:a0:05:0c:24:46:72:91:
                    eb:d4:be:5f:9d:14:17:14:a0:40:0c:ac:4d:87:43:
                    38:43:f6:f1:49:33:e9:1a:d9:23:9b:c8:49:9e:62:
                    38:75:fe:42:7c:6a:69:07:12:f9:19:7c:2a:8a:0d:
                    cb:21:24:32:3f:81:75:5d:36:d9:e8:d7:63:26:bc:
                    5c:5b:2b:05:11:8c:a0:cb:81:4c:27:97:3b:72:22:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:CB:43:3B:80:B2:57:03:99:1F:F6:E5:85:3B:65:0C:C1:4B:00
            X509v3 Authority Key Identifier:
                keyid:27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:fe:10:0b:2d:1d:bb:2e:e5:31:eb:02:16:df:4b:89:03:
         88:31:f3:51:be:0a:3b:90:91:66:40:c4:e8:19:47:06:1a:f4:
         07:16:04:bb:7c:63:66:46:8b:da:f2:45:50:c0:7d:39:16:ee:
         94:a5:85:92:06:21:de:ff:19:5d:97:ce:57:85:14:a4:0b:76:
         ec:52:7c:62:93:03:11:35:98:0b:8f:a7:4f:1d:e8:bc:12:17:
         df:f4:a0:65:c2:e8:a3:ee:6c:da:e5:59:32:69:94:27:95:d7:
         9f:72:c6:6f:ae:63:10:68:3b:77:53:2e:69:07:53:30:7e:1b:
         9d:61:ad:ce:eb:88:df:41:32:bd:95:5f:71:3f:62:9f:a0:46:
         59:eb:5c:27:bc:72:69:23:b4:55:56:c0:95:8b:50:1c:1f:70:
         58:6b:84:ac:67:4e:c0:3a:95:5a:c3:b6:62:e1:21:7b:f3:5e:
         6c:94:c2:4d:77:a6:6e:61:f8:fc:31:71:6e:bb:4e:18:32:1a:
         8d:6d:b5:34:bd:50:1b:ea:1c:f4:74:47:8b:3d:94:1a:e2:ba:
         a7:d2:77:2c:e1:59:4f:40:eb:ad:e2:6c:26:50:ab:ee:b5:26:
         e4:fc:be:64:c8:ca:5f:6e:1a:ba:a0:67:ab:ce:b0:98:6d:8b:
         ad:54:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:59:14 2026 by rpki-client