Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
File:                     F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft (raw, json)
Hash identifier:          OSXu2uLt5AYCQT1HgVTaP2e1HAjLZ6MZ1P70yEgGc80=
Subject key identifier:   55:B4:38:48:7C:32:1A:8E:79:4B:D7:CC:33:75:14:31:CE:46:50:96
Authority key identifier: F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5
Certificate issuer:       /CN=F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5
Certificate serial:       19305D98C071E6FAE8A4B83F8C285E09FCC14B65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
Manifest number:          B4
Signing time:             Tue 22 Sep 2026 23:10:53 +0000
Manifest this update:     Tue 22 Sep 2026 23:05:53 +0000
Manifest next update:     Thu 24 Sep 2026 01:25:53 +0000
Files and hashes:         1: F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl (hash: dXRvhoqkfLbplVweD5/g1aHZOOyY9BPAD7xrviB56Yk=)
                          2: 3136302e3139312e3136382e302f32332d3332203d3e20313331363432.roa (hash: olCALbpISVNB6I6rPsYYYq/ycNKUieDPKL/Ptpbu7Fc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl
                          rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 01:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:5d:98:c0:71:e6:fa:e8:a4:b8:3f:8c:28:5e:09:fc:c1:4b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5
        Validity
            Not Before: Sep 22 23:05:53 2026 GMT
            Not After : Sep 24 01:25:53 2026 GMT
        Subject: CN=55B438487C321A8E794BD7CC33751431CE465096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:33:09:b3:15:79:9b:a6:3c:e1:74:bb:9d:
                    35:01:65:15:3f:8b:ae:16:fb:c6:07:d2:0b:f2:ee:
                    21:9d:b5:7a:99:32:38:84:5a:d0:0d:5c:de:a3:8a:
                    57:fa:34:de:3f:86:05:34:e0:5c:68:b9:9a:45:e3:
                    f5:fd:e1:98:5c:a3:32:5d:22:42:15:84:be:16:cd:
                    c3:40:71:44:1a:1b:23:ac:04:af:8c:c6:0b:25:61:
                    2c:6b:22:4d:73:f9:40:96:df:76:50:96:a7:fb:50:
                    82:84:2e:e5:62:76:ec:4d:07:2c:95:13:c9:63:a3:
                    76:a2:4a:ba:54:14:fa:6d:3d:57:02:98:9c:8b:b7:
                    6f:55:1c:6c:a9:c8:e5:f9:46:fc:91:bc:d6:7d:d5:
                    50:7a:1d:ce:f1:d1:05:bd:f1:a3:93:ec:2e:5a:1d:
                    29:1c:77:75:25:74:dd:c7:09:8e:3e:b2:81:59:fd:
                    d6:89:5c:45:1f:7b:c3:0f:3d:60:3c:4b:3d:c4:7d:
                    7e:bc:85:37:3b:70:e3:1e:ec:df:9c:e4:fd:6a:a5:
                    1a:29:b8:11:cf:ab:ec:a8:62:63:ed:73:97:62:9c:
                    78:e5:d4:d3:d0:42:6d:d0:d6:e6:9e:c9:73:7f:8d:
                    cf:58:8a:79:63:93:90:2c:19:0d:fb:dd:83:82:88:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B4:38:48:7C:32:1A:8E:79:4B:D7:CC:33:75:14:31:CE:46:50:96
            X509v3 Authority Key Identifier:
                keyid:F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:8a:6a:fb:9f:a5:6b:2d:61:a0:1b:f0:6c:f4:12:07:76:
         da:75:33:84:11:ba:67:a2:3b:c2:a8:0d:fe:1f:da:47:1d:35:
         37:33:8e:19:22:d3:3b:ac:25:f4:d4:1e:74:2d:3c:58:e7:78:
         d4:4b:69:05:be:2a:dc:63:ca:dc:70:e3:cc:e7:3e:5a:26:0a:
         aa:c5:09:50:b1:60:eb:f3:03:6b:fa:32:76:09:7f:67:50:5c:
         dc:be:f3:17:19:1e:68:77:f7:79:0e:da:cb:84:df:0d:38:95:
         b5:86:0e:77:c5:7d:66:da:ec:2d:24:ed:22:e4:c4:2f:77:b6:
         b9:eb:2e:ae:b7:49:59:bb:d6:e3:a0:98:6f:51:c4:2c:10:ad:
         73:65:80:2d:cc:d3:28:97:40:c7:80:b4:3d:33:27:70:69:e0:
         bb:9e:48:9a:22:dc:52:b9:ed:06:24:f4:ea:41:09:cb:56:bf:
         74:c3:25:8a:31:68:3f:d0:f7:5d:64:f4:58:53:53:3d:c2:68:
         97:f1:b1:0c:9b:a1:fe:65:94:23:b1:d2:69:e8:5a:08:23:3f:
         b9:99:ab:84:f9:62:b4:3e:a9:fa:9c:bc:9b:a2:f1:81:fa:58:
         f8:e2:d2:17:a9:82:8b:44:e2:18:56:76:10:ff:01:fb:9c:3a:
         42:af:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:22:13 2026 by rpki-client