Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
File:                     0273304A820906A512D2F0D86CA293A77222962C.mft (raw, json)
Hash identifier:          yL7MZ7CHd/LSTFCIRDo8wiW2+mWFoV91K81IZBjQLto=
Subject key identifier:   82:97:E7:C5:87:A6:C5:53:82:1F:95:9E:89:2B:12:95:92:5F:3D:80
Authority key identifier: 02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
Certificate issuer:       /CN=0273304A820906A512D2F0D86CA293A77222962C
Certificate serial:       2916840EA49245A6B8D33C0826CDEEE88F005B03
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
Manifest number:          B9
Signing time:             Tue 22 Sep 2026 01:53:21 +0000
Manifest this update:     Tue 22 Sep 2026 01:48:21 +0000
Manifest next update:     Wed 23 Sep 2026 02:52:21 +0000
Files and hashes:         1: 323430323a333065303a3a2f34382d3438203d3e20313331363338.roa (hash: 5S/0+5kTJSCJtjY+G5g70pY/TEYg4PSwgmkuSXQz62g=)
                          2: 0273304A820906A512D2F0D86CA293A77222962C.crl (hash: hTX9/cchei7HKyhnRipLwHA/iW0iC7wPNn0QxOF5U4w=)
                          3: 323430323a333065303a3a2f33322d3438203d3e203633393030.roa (hash: M9ozTABbn9o/3o5HXGeGad6/WVPq5wFJDo/GvXVI9WA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl
                          rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 02:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:16:84:0e:a4:92:45:a6:b8:d3:3c:08:26:cd:ee:e8:8f:00:5b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0273304A820906A512D2F0D86CA293A77222962C
        Validity
            Not Before: Sep 22 01:48:21 2026 GMT
            Not After : Sep 23 02:52:21 2026 GMT
        Subject: CN=8297E7C587A6C553821F959E892B1295925F3D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:ed:0d:e3:eb:90:73:9e:95:57:4d:3b:d4:
                    a4:77:d2:91:63:9a:c7:80:48:8f:b1:9d:f9:62:cc:
                    26:3f:92:c9:ed:0c:46:b9:c5:37:55:6e:72:d3:34:
                    29:33:8c:e8:21:01:1b:84:0a:de:60:9b:ed:0a:60:
                    35:9a:5f:db:ea:cf:fa:bb:f2:e5:a2:6a:17:10:5c:
                    3f:86:66:44:31:cb:f5:34:0b:f4:bf:4b:98:be:2c:
                    75:9e:ef:80:83:4f:4a:08:e4:52:b5:f5:2b:e7:ab:
                    5f:ce:6c:8f:d0:29:c4:41:ed:a7:cc:d5:b8:ab:82:
                    23:66:1c:f0:90:42:e9:a4:ac:37:2d:4d:c0:c5:9c:
                    6a:19:ea:4b:a5:01:b8:e2:aa:63:6f:9b:e4:19:8e:
                    c3:b3:97:b4:11:8d:18:2a:b4:f4:68:25:6c:a3:76:
                    7a:bc:ec:ed:54:6b:b4:f9:6c:2a:ae:01:db:17:15:
                    0c:ba:71:17:64:55:4a:d8:89:84:1c:20:70:4c:4b:
                    57:46:51:a5:8f:26:0f:a4:55:1b:24:c0:72:66:8f:
                    5a:7e:20:4a:dd:6e:f1:b7:90:db:00:c6:bb:2f:fa:
                    a5:e8:d2:f0:d3:38:76:32:fa:17:1c:7c:d0:fe:b4:
                    15:e8:b0:b8:5b:65:e5:31:3e:d5:69:d2:2a:05:57:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:E7:C5:87:A6:C5:53:82:1F:95:9E:89:2B:12:95:92:5F:3D:80
            X509v3 Authority Key Identifier:
                keyid:02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:5e:0f:bd:e1:df:17:9b:af:f2:c2:0a:7f:b7:b7:fe:9f:
         ea:fa:62:01:4d:4a:6e:5c:0e:99:7d:b9:17:e1:70:3f:b6:94:
         58:47:8d:26:e1:8e:d5:1a:5c:58:6d:06:bd:b7:48:4c:ca:c4:
         1e:39:5f:63:5c:76:24:a9:cc:06:04:47:2c:16:1d:03:f0:e6:
         93:3c:fd:ac:ec:b6:5b:ce:ad:08:4f:49:7d:4c:fe:9d:02:02:
         55:68:01:cd:09:1e:cc:d6:47:fd:d6:2b:17:15:ef:36:9f:b4:
         60:72:ae:c6:54:45:7b:33:79:f9:13:db:85:83:dd:50:17:4c:
         cd:b8:ba:02:1e:8c:86:67:e1:40:c4:47:1e:4e:9b:ca:f7:88:
         8a:2c:8f:5c:3d:b3:1d:3e:08:d3:6d:8c:58:c2:56:f8:9d:ea:
         cc:57:1c:b8:36:cd:2d:93:aa:9b:ae:6f:f3:f0:7c:fa:58:20:
         f4:20:51:01:e9:40:a3:60:eb:fc:10:83:00:bc:c5:47:d8:b2:
         fe:61:d4:bb:ee:e0:c4:47:30:7b:ef:6b:82:a4:fd:a8:61:33:
         d0:bd:f1:bb:c5:26:44:7e:ba:f1:9a:42:b1:f9:18:d5:05:34:
         04:32:d2:6d:75:68:fc:a4:b4:1a:6d:5b:2a:79:2a:c4:b5:4f:
         e5:d3:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:53 2026 by rpki-client