Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft
File:                     A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft (raw, json)
Hash identifier:          QeR9WEnQPgQj88Em+AG4+7u/Jm9ORorgupGExTYIo34=
Subject key identifier:   2C:52:5D:A7:37:FD:F9:95:EE:E1:6E:1F:EC:8A:38:F0:91:EF:CB:6E
Authority key identifier: A8:27:6A:EE:C8:7F:13:CA:DA:9A:33:3A:BA:2A:18:94:00:80:AA:0E
Certificate issuer:       /CN=A8276AEEC87F13CADA9A333ABA2A18940080AA0E
Certificate serial:       431486E73EF3C702622E375440498D7803B99B95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 16:30:37 +0000
Manifest this update:     Thu 24 Sep 2026 16:25:37 +0000
Manifest next update:     Fri 25 Sep 2026 18:00:37 +0000
Files and hashes:         1: A8276AEEC87F13CADA9A333ABA2A18940080AA0E.crl (hash: 7CNk9iEAxGo45kTDfS7KgSi2WpdZcptJE1nftR6rrT4=)
                          2: 3133382e3235322e35322e302f32342d3234203d3e20333936393832.roa (hash: +wNXmjOjpLX88xeyxgZcSM9qbzxjqpN7lhbcZ9zSAQo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.crl
                          rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:86:e7:3e:f3:c7:02:62:2e:37:54:40:49:8d:78:03:b9:9b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8276AEEC87F13CADA9A333ABA2A18940080AA0E
        Validity
            Not Before: Sep 24 16:25:37 2026 GMT
            Not After : Sep 25 18:00:37 2026 GMT
        Subject: CN=2C525DA737FDF995EEE16E1FEC8A38F091EFCB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:bd:78:3c:10:af:53:ed:3a:ae:40:71:6b:
                    71:6a:8f:80:2e:98:a1:2e:33:52:41:38:06:a0:5e:
                    54:77:32:99:20:5d:ba:b6:f4:f4:18:2a:97:fc:c1:
                    1e:d4:08:cb:ff:3a:ff:83:07:73:52:fa:05:b3:57:
                    cc:c6:bf:ea:5f:3d:d0:03:75:24:0c:ae:6a:9b:7b:
                    02:d9:3a:cb:55:79:f6:58:d0:5c:27:da:73:35:18:
                    37:c4:9c:21:09:c3:07:98:93:ae:44:a3:3d:0d:b0:
                    85:28:4a:c9:c6:60:c5:cd:36:cd:07:7b:a7:b7:98:
                    1e:90:d9:de:8d:ac:5a:07:24:25:d4:83:54:32:63:
                    6e:b7:24:5c:ab:47:c4:d1:57:38:e2:59:98:55:58:
                    41:4a:61:7d:fd:35:a8:f8:75:42:4f:97:a3:a9:97:
                    e6:8e:83:96:8c:07:0c:28:2f:0f:75:ac:99:2c:0c:
                    e9:9f:3f:32:ca:ee:a6:4b:6f:ed:93:a5:c5:c6:04:
                    6d:ee:f4:b6:2c:15:1d:d0:ea:73:ad:95:b1:6e:16:
                    ee:89:c6:5b:fc:f9:b5:08:70:25:b3:3d:7b:34:3a:
                    b3:20:ac:f0:a5:f6:81:21:35:e9:52:29:ca:fb:32:
                    f7:76:77:fb:b8:d5:59:02:b4:2c:52:6b:4e:11:90:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:52:5D:A7:37:FD:F9:95:EE:E1:6E:1F:EC:8A:38:F0:91:EF:CB:6E
            X509v3 Authority Key Identifier:
                keyid:A8:27:6A:EE:C8:7F:13:CA:DA:9A:33:3A:BA:2A:18:94:00:80:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:2e:96:46:d6:56:d7:c0:69:aa:41:03:e2:c8:7f:db:9b:
         58:22:f6:f8:9f:2b:2a:97:b4:b8:4f:6e:5a:5c:f2:cf:26:54:
         b4:28:94:07:d5:30:a3:d6:9a:d9:4b:87:6f:5a:1f:98:03:b5:
         81:41:9d:5d:7e:87:f3:4c:59:b6:d0:51:67:4a:87:25:1c:ef:
         75:a7:b3:54:0e:6c:29:a2:ce:27:4a:cb:b8:88:49:a6:20:08:
         ef:d9:87:7f:16:96:29:e5:e8:50:5a:0f:47:dc:b8:13:22:c4:
         46:12:38:27:8d:ff:60:b5:eb:5b:66:9b:a5:9b:f6:19:12:5f:
         c2:de:43:47:f6:bb:d6:b5:98:0f:50:0b:9c:64:68:a1:10:98:
         ca:aa:51:b9:95:1c:23:bf:5f:3e:cd:27:5d:01:06:0f:33:d8:
         04:3d:e6:b7:4b:2d:ec:a2:7d:f6:3e:88:ec:4b:65:21:bf:d9:
         c2:87:3a:11:f2:58:ab:13:9a:53:0b:e8:5a:18:c0:68:83:b8:
         f7:cd:e7:dc:15:4d:11:7c:5f:75:12:8c:7b:6b:aa:da:fb:67:
         95:be:de:0d:10:ad:f2:7d:35:d3:20:18:9d:50:3a:68:d8:44:
         dd:c4:8f:eb:6a:c3:e7:2f:6f:26:50:a1:b2:5d:7e:74:a9:dc:
         19:49:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:33:15 2026 by rpki-client