Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
File:                     881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft (raw, json)
Hash identifier:          9WPRyKqS/MwJW2F6uwsvPOAj+ft7a0f+nn7J2I19Kro=
Subject key identifier:   C9:CE:C2:EB:F0:55:F6:A6:21:B8:95:53:E0:34:56:33:12:52:1D:0D
Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
Certificate issuer:       /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Certificate serial:       445ED9BD68000C7DC6CFA516266C704839AB57E4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 16:30:37 +0000
Manifest this update:     Thu 24 Sep 2026 16:25:37 +0000
Manifest next update:     Fri 25 Sep 2026 18:50:37 +0000
Files and hashes:         1: 323430333a383634303a3a2f33322d3634203d3e20333936393832.roa (hash: Jm1SzTARAHpPF8XgcCqrOsbDyqd1bedbKKWEeTdyjNA=)
                          2: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl (hash: iDiBrFZxG34FOc6NvGnREjSIntgtkH0FPQBaYCqtcN4=)
                          3: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (hash: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
                          rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 18:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5e:d9:bd:68:00:0c:7d:c6:cf:a5:16:26:6c:70:48:39:ab:57:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
        Validity
            Not Before: Sep 24 16:25:37 2026 GMT
            Not After : Sep 25 18:50:37 2026 GMT
        Subject: CN=C9CEC2EBF055F6A621B89553E034563312521D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:9e:4c:84:e8:8f:97:6d:a3:99:dc:a7:a2:
                    f1:20:ee:10:e3:e5:9b:ae:52:8c:4c:42:a4:51:af:
                    a9:de:9e:7f:3e:ed:70:ca:1c:e8:4f:b6:c5:4a:92:
                    f7:ae:0f:04:ff:46:e8:54:4a:de:b5:23:c3:1a:df:
                    5d:4f:91:e7:2a:a1:23:2e:54:c2:2c:15:53:a9:2c:
                    6b:3b:6e:f8:d4:28:e5:65:3c:af:a5:fe:c8:53:6d:
                    40:88:d5:e6:14:6b:d8:5f:98:f7:e5:78:1f:c2:78:
                    52:9f:ca:64:57:25:1a:d1:f9:f3:54:0b:b2:63:f5:
                    29:0f:35:65:07:96:71:d1:40:89:52:c6:07:f3:a6:
                    51:ff:85:60:1c:10:e3:4e:8d:5b:8e:04:f1:8c:16:
                    96:b5:48:4f:76:09:af:3b:55:7a:b5:87:19:57:14:
                    6d:80:ea:fa:65:85:2d:a9:ee:7f:4c:f1:8c:da:ea:
                    46:b3:c0:a3:a3:74:dd:0a:71:99:a6:c4:93:50:3e:
                    5d:51:2b:d1:d4:be:59:17:88:7c:95:9f:a9:de:41:
                    41:58:af:3f:59:e2:c7:d1:39:97:1f:a9:9d:32:9d:
                    87:24:58:45:43:39:fc:d1:51:71:fa:02:13:34:8b:
                    79:c0:64:14:d4:61:02:4c:a7:92:68:ef:09:ae:53:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CE:C2:EB:F0:55:F6:A6:21:B8:95:53:E0:34:56:33:12:52:1D:0D
            X509v3 Authority Key Identifier:
                keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:09:09:10:99:ae:69:98:f8:a0:86:f1:be:62:2c:40:a0:5a:
         63:2e:a7:06:df:eb:17:7d:28:3c:a6:c9:d9:15:3a:cf:5d:cd:
         09:01:0c:c4:75:f1:50:2e:dc:03:1e:cd:d1:53:4b:5c:3e:42:
         1d:a8:71:cb:a8:95:77:e1:ae:5b:bc:9e:a5:d2:b1:88:0a:73:
         f7:fd:89:94:08:d1:bc:a5:10:aa:3f:48:b9:83:47:84:70:71:
         35:0d:c1:c3:ad:63:e0:57:59:cf:0f:ef:9d:eb:a3:95:b9:c3:
         01:4c:74:1c:7e:bf:2c:d8:45:ad:42:00:63:b6:ea:3b:cd:de:
         50:c8:68:fd:61:32:66:eb:be:da:bf:62:94:d6:7f:50:21:4a:
         b5:ed:05:84:a7:8a:de:1b:3d:29:7e:53:3e:5a:4f:8c:e4:b4:
         84:02:95:38:8a:70:45:18:ce:bc:e1:5b:58:f5:b6:cb:88:73:
         53:e7:96:26:44:a4:70:04:16:99:5b:ff:6e:4b:87:95:71:59:
         ca:9a:bf:00:9e:fd:49:8f:64:2b:49:2c:11:6a:02:22:f7:37:
         dc:06:d0:2e:5b:2b:30:42:07:53:6a:94:64:1e:0f:e3:0e:75:
         22:b5:c8:9a:0f:26:38:84:0d:22:76:84:f5:bb:e6:dc:63:84:
         cb:53:e7:de
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIURF7ZvWgADH3Gz6UWJmxwSDmrV+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAz
Q0M1OUM3ODAeFw0yNjA5MjQxNjI1MzdaFw0yNjA5MjUxODUwMzdaMDMxMTAvBgNV
BAMTKEM5Q0VDMkVCRjA1NUY2QTYyMUI4OTU1M0UwMzQ1NjMzMTI1MjFEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5755MhOiPl22jmdynovEg7hDj
5ZuuUoxMQqRRr6nenn8+7XDKHOhPtsVKkveuDwT/RuhUSt61I8Ma311PkecqoSMu
VMIsFVOpLGs7bvjUKOVlPK+l/shTbUCI1eYUa9hfmPfleB/CeFKfymRXJRrR+fNU
C7Jj9SkPNWUHlnHRQIlSxgfzplH/hWAcEONOjVuOBPGMFpa1SE92Ca87VXq1hxlX
FG2A6vplhS2p7n9M8Yza6kazwKOjdN0KcZmmxJNQPl1RK9HUvlkXiHyVn6neQUFY
rz9Z4sfROZcfqZ0ynYckWEVDOfzRUXH6AhM0i3nAZBTUYQJMp5Jo7wmuU2/nAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUyc7C6/BV9qYhuJVT4DRWMxJSHQ0wHwYDVR0j
BBgwFoAUiBvuH5PVi67frJlLZ3qq0DzFnHgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVS
LzAvODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS84ODFCRUUxRjkzRDU4QkFFREZBQzk5NEI2NzdB
QUFEMDNDQzU5Qzc4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVSLzAvODgxQkVFMUY5M0Q1
OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALYJCRCZrmmY
+KCG8b5iLECgWmMupwbf6xd9KDymydkVOs9dzQkBDMR18VAu3AMezdFTS1w+Qh2o
ccuolXfhrlu8nqXSsYgKc/f9iZQI0bylEKo/SLmDR4RwcTUNwcOtY+BXWc8P753r
o5W5wwFMdBx+vyzYRa1CAGO26jvN3lDIaP1hMmbrvtq/YpTWf1AhSrXtBYSnit4b
PSl+Uz5aT4zktIQClTiKcEUYzrzhW1j1tsuIc1PnliZEpHAEFplb/25Lh5VxWcqa
vwCe/UmPZCtJLBFqAiL3N9wG0C5bKzBCB1NqlGQeD+MOdSK1yJoPJjiEDSJ2hPW7
5txjhMtT594=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:16:32 2026 by rpki-client