Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
File:                     AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft (raw, json)
Hash identifier:          KQQfw0N+Y6DsmK+AGPdQ8qXamLd6j9KLpMO27rzoq2I=
Subject key identifier:   89:2D:F0:ED:40:7C:4E:E3:35:1D:13:9F:11:91:53:A9:D0:0D:4F:B2
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Certificate issuer:       /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial:       4FA5995800F099B6484127AAE766D95FBFD53B17
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
Manifest number:          B4
Signing time:             Tue 22 Sep 2026 01:58:24 +0000
Manifest this update:     Tue 22 Sep 2026 01:53:24 +0000
Manifest next update:     Wed 23 Sep 2026 03:48:24 +0000
Files and hashes:         1: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl (hash: 71B72t1mwk0/22efFWQq7tnXdS0xpfL44Gep4AStmhs=)
                          2: 3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (hash: 1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
                          rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a5:99:58:00:f0:99:b6:48:41:27:aa:e7:66:d9:5f:bf:d5:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
        Validity
            Not Before: Sep 22 01:53:24 2026 GMT
            Not After : Sep 23 03:48:24 2026 GMT
        Subject: CN=892DF0ED407C4EE3351D139F119153A9D00D4FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:f4:05:db:f2:fd:02:04:a1:36:ef:a8:86:
                    cf:77:f8:8f:35:4b:77:1a:a4:78:b4:cb:2a:0d:1e:
                    d6:08:2f:fd:93:80:c3:b6:ed:23:7a:a9:35:a0:85:
                    13:41:3d:b3:1f:e2:ea:86:1e:58:52:cf:b6:30:bc:
                    cb:70:37:95:b2:91:0f:17:85:35:d6:21:8f:e1:8f:
                    d2:3f:bd:64:49:52:cc:ca:29:a4:d0:48:41:87:0e:
                    0a:cf:25:18:7e:aa:9c:f1:39:43:08:3a:db:7e:ce:
                    51:0e:cf:64:85:a2:76:02:27:6d:8f:5c:f4:4c:c8:
                    55:6a:b2:cb:58:55:b5:36:c9:28:ea:5f:9a:aa:fb:
                    de:48:e3:3a:87:37:dd:8f:84:93:8f:02:bc:23:ec:
                    4d:31:10:58:2d:4b:f0:4c:fa:a3:7c:29:3a:31:49:
                    70:73:bd:bf:cd:6b:fb:87:a0:00:22:2e:0f:e3:3f:
                    62:70:93:3a:c3:94:38:e4:b5:08:e6:f8:ad:27:98:
                    1c:fe:d3:2f:a9:f6:e1:ce:f5:be:aa:02:72:cd:c8:
                    17:8b:d8:c7:d3:4a:3a:44:51:9a:a7:ad:9e:95:81:
                    2d:e4:c8:80:19:56:18:a0:b8:85:5c:13:36:8d:c2:
                    57:71:76:1d:be:80:f2:79:94:a4:df:24:e9:21:66:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:F0:ED:40:7C:4E:E3:35:1D:13:9F:11:91:53:A9:D0:0D:4F:B2
            X509v3 Authority Key Identifier:
                keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:44:52:4b:80:89:38:5a:02:c1:75:45:b7:e5:85:a1:36:90:
         85:82:75:d8:79:8c:84:e8:79:0e:b3:9a:59:09:c7:9f:be:0d:
         bc:9c:6e:45:1b:08:d9:a8:d4:7b:f8:56:7f:78:3e:67:4b:33:
         6e:b8:f7:b6:74:7e:af:7e:af:74:3d:f4:0a:a6:ee:bb:3b:f5:
         42:81:94:2a:c4:d2:89:56:83:01:90:04:55:eb:3a:0e:51:b3:
         a1:1c:8f:63:ed:23:9d:3a:60:41:10:4a:d3:f8:8d:89:7c:92:
         99:65:13:87:02:e2:dc:c9:40:16:a4:15:f0:23:a6:d0:4a:7b:
         b2:5f:7f:f7:c7:f8:be:22:1c:e0:9e:d5:bc:65:3c:64:54:ef:
         43:bf:2f:bd:a4:35:6b:a1:a1:52:9e:8f:ee:de:a0:5a:f7:eb:
         54:62:63:00:f3:3e:04:77:74:7c:e2:2f:4c:e9:b2:38:d1:b4:
         75:f0:08:1f:b7:04:3d:1b:d8:c1:a4:0c:52:0b:94:bc:be:94:
         e0:1b:7e:75:a5:25:94:97:cd:11:05:4b:32:bf:d4:b1:f2:c3:
         7d:d3:a1:e5:08:3d:b0:3c:b4:55:37:63:60:f6:ce:cd:d2:bb:
         29:9d:56:2a:c5:ea:fc:0c:b6:fe:e0:3b:a8:b5:fb:07:d3:70:
         be:89:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:03 2026 by rpki-client