Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File:                     E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier:          BCP5k0qRAAliSxIIbjuE27069mqrTwHV7hNOoxRV1mk=
Subject key identifier:   ED:FF:08:67:4A:1A:21:4D:E2:60:86:9C:40:9E:30:4C:32:7D:94:64
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       6D25E5DCFB3EAA212334697F01213862F4206DFF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number:          B9
Signing time:             Thu 24 Sep 2026 14:35:23 +0000
Manifest this update:     Thu 24 Sep 2026 14:30:23 +0000
Manifest next update:     Fri 25 Sep 2026 18:31:23 +0000
Files and hashes:         1: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: ws5vyEzxbWoG1oDw8k1k4dNbTa5VROgowol6hnTE8gg=)
                          2: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 18:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:e5:dc:fb:3e:aa:21:23:34:69:7f:01:21:38:62:f4:20:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: Sep 24 14:30:23 2026 GMT
            Not After : Sep 25 18:31:23 2026 GMT
        Subject: CN=EDFF08674A1A214DE260869C409E304C327D9464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:0a:de:86:44:52:42:93:36:d0:78:ed:d1:
                    9d:59:38:59:ea:82:29:29:a9:5a:94:77:52:54:a0:
                    50:76:a6:bc:f8:60:1c:17:36:18:b9:70:85:5c:3e:
                    12:6d:84:90:84:28:7d:8a:73:fa:8b:33:02:1d:4f:
                    73:37:f2:16:73:3b:b1:f6:15:67:66:b9:7d:d9:a8:
                    3a:28:e9:70:d3:0b:e5:5a:04:8c:fb:b8:e9:1a:2e:
                    56:c6:43:f6:24:46:38:39:c5:1d:82:ba:9d:7b:9e:
                    f3:98:fd:cb:4c:ed:0e:7d:73:9a:49:24:05:f2:07:
                    14:94:89:17:cc:10:8b:f9:53:7a:4d:d6:55:6d:43:
                    40:a3:6e:62:28:68:0d:76:97:19:43:e2:5a:25:86:
                    ab:be:ed:3c:e2:4f:30:26:b8:c9:e5:46:fc:6d:5c:
                    e7:fc:27:0d:23:e1:46:bd:9a:64:ca:48:51:7a:f8:
                    07:8e:e1:e3:88:9d:3f:a6:b0:db:8a:76:cc:96:4e:
                    70:21:e1:06:00:96:ff:c5:1f:d8:d6:92:6a:34:2a:
                    ed:dd:ab:76:27:ec:f1:92:2c:33:c8:95:1b:7e:b7:
                    fa:4e:4b:7d:ba:45:8a:6c:82:b0:a5:e2:80:6c:cb:
                    86:8d:0a:bc:86:b8:11:b1:76:23:2a:95:20:fd:1b:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:08:67:4A:1A:21:4D:E2:60:86:9C:40:9E:30:4C:32:7D:94:64
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:fe:aa:70:de:11:cc:f4:10:35:c3:a5:8a:68:c8:65:37:
         b9:10:b5:c0:0e:c8:ed:ec:3a:97:c3:ca:10:43:ce:71:a7:ee:
         c0:0d:60:ab:96:4a:d9:56:2b:58:c0:34:b0:72:6a:f7:03:4d:
         72:94:65:6b:4e:15:c9:0f:7c:0b:80:68:69:b3:5e:b0:46:dc:
         2e:0b:d0:9e:30:61:1c:23:4d:b2:0e:fb:78:5d:08:64:1c:d6:
         cc:e4:57:2b:55:36:09:b6:c3:ad:3e:2d:e1:f0:a6:ae:2f:22:
         dd:82:b2:ac:64:52:ff:74:35:6a:fd:5c:c3:e8:65:c6:73:d3:
         0d:86:a1:3d:a7:9c:31:e5:8f:62:e0:66:3d:75:85:e4:63:a0:
         bc:72:96:4f:f2:2f:38:58:00:03:88:e9:66:32:7a:1a:cf:dd:
         00:6d:e4:e6:fb:d9:f1:a5:a8:48:13:21:29:5a:89:a9:10:42:
         76:cf:29:59:78:87:ff:cd:1b:65:cd:6b:f9:b6:a8:a3:44:4d:
         11:f0:3f:fd:e1:20:15:1d:62:ed:6b:a0:bd:91:cf:56:bd:a5:
         74:ef:26:a8:a7:f5:f4:35:f2:67:7d:b9:f0:73:bf:88:33:f5:
         80:ab:b5:f7:85:21:76:30:87:2c:24:12:73:56:ec:a2:f9:53:
         8e:b9:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:24 2026 by rpki-client