Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft
File:                     9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json)
Hash identifier:          j+h4uzXFU3gTvqJJlMA7DsLroA49u0y1+8Hi7VrOMBw=
Subject key identifier:   9C:FC:06:7F:43:CE:1B:FB:FB:56:90:A9:A4:E9:08:31:DB:04:0B:43
Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
Certificate issuer:       /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Certificate serial:       5CC8601811311FB4CAA3E49D0244D0C81BA3AB87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft
Manifest number:          31
Signing time:             Sat 13 Jun 2026 01:18:37 +0000
Manifest this update:     Sat 13 Jun 2026 01:13:37 +0000
Manifest next update:     Sun 14 Jun 2026 04:36:37 +0000
Files and hashes:         1: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: DrIn5LP7DNEjOlo72sPdSXPTHuhcLKe/MZIkg/q2PH4=)
                          2: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=)
                          3: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=)
                          4: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl
                          rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 04:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:60:18:11:31:1f:b4:ca:a3:e4:9d:02:44:d0:c8:1b:a3:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
        Validity
            Not Before: Jun 13 01:13:37 2026 GMT
            Not After : Jun 14 04:36:37 2026 GMT
        Subject: CN=9CFC067F43CE1BFBFB5690A9A4E90831DB040B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:a2:fc:47:c1:12:22:ed:bb:43:33:dc:b2:
                    5e:aa:1d:a9:77:f5:9f:6e:32:aa:33:ff:f3:ce:05:
                    04:8d:b7:1c:7b:d9:a8:2b:cd:fc:b6:01:ad:d9:4c:
                    fd:fb:3f:ed:1d:c4:28:98:e2:40:ef:8c:cf:ab:c3:
                    e3:0c:00:b5:0e:c8:d9:b3:8a:47:6b:36:a9:62:4b:
                    ac:fe:27:70:a3:c6:83:40:2b:0e:be:72:2b:af:fd:
                    c9:c1:e0:98:a4:32:6f:bf:c7:2b:a2:33:2e:d2:aa:
                    ed:ed:61:7e:a2:47:26:c6:23:f1:3a:2e:48:f2:cc:
                    2c:e1:95:51:3d:d1:86:e5:8f:26:8a:dd:3a:71:17:
                    ab:1c:0b:97:a3:76:27:bd:ae:25:53:7c:fb:31:02:
                    b5:f3:d3:66:3b:e3:35:52:df:77:ba:f4:5e:44:6d:
                    26:95:7e:27:47:06:4b:b5:44:03:4e:73:5b:6d:9e:
                    d9:05:b1:ef:27:d8:50:40:c4:ac:e7:07:3e:05:05:
                    73:3b:9e:28:e6:3e:f9:b9:bc:75:09:56:92:74:ad:
                    90:8a:32:14:f2:19:49:14:35:4c:52:c1:81:d9:c1:
                    3f:3f:60:93:7d:92:ed:0a:51:61:f5:e5:be:6d:27:
                    c6:98:7b:a5:5a:57:d4:65:89:34:d5:fc:2d:8d:85:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:06:7F:43:CE:1B:FB:FB:56:90:A9:A4:E9:08:31:DB:04:0B:43
            X509v3 Authority Key Identifier:
                keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:37:01:de:7f:ac:8c:02:50:9d:e6:b2:13:63:b9:5f:bf:
         54:e0:6b:42:bf:51:12:7e:25:cc:3c:f2:3e:5a:05:35:d8:c8:
         54:28:61:4e:09:00:c5:56:2e:fd:ba:7e:64:d2:ea:5c:80:f5:
         da:c5:70:b5:19:6e:54:86:58:1e:04:d8:52:1c:f6:e3:09:74:
         33:45:5c:fe:57:b7:e8:d8:1e:81:a2:32:a2:38:49:ba:7d:34:
         50:fe:0c:28:2b:2a:de:38:61:ae:db:9d:24:05:73:b2:6c:b7:
         3f:69:71:d8:d4:9d:13:fd:a0:d0:87:82:ee:7a:29:69:d0:d0:
         7d:79:32:33:90:1f:5e:1c:02:55:1f:a1:6e:dd:b0:64:12:02:
         e8:b6:2b:cd:9f:47:13:d0:75:61:10:a6:ab:a5:77:09:51:20:
         37:5a:7f:16:f8:ca:5c:95:a4:c8:69:c9:fb:01:7c:d5:bb:b4:
         75:56:7f:32:2f:ff:9a:e0:24:e3:72:81:f1:39:29:52:61:23:
         2d:44:b6:bb:89:dc:07:9a:32:f1:9c:8c:0b:90:42:37:5a:a6:
         07:c5:70:ff:51:99:b1:ba:94:29:53:c0:af:56:e9:f5:e5:ca:
         84:06:3e:7c:21:07:b9:b6:5b:11:29:28:c1:00:68:39:ad:44:
         85:99:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:46 2026 by rpki-client