Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
File:                     AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json)
Hash identifier:          9FfH9p1df7+ui6f7XczB1k7wHtwq3AhKjW1x5br2S8U=
Subject key identifier:   21:B6:54:F4:DE:A3:08:9C:0C:85:77:60:C2:81:C9:21:C7:A8:2B:2E
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Certificate issuer:       /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial:       6DF2417B36D41DE2BFD0D63140800595787796DE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 17:38:28 +0000
Manifest this update:     Thu 24 Sep 2026 17:33:28 +0000
Manifest next update:     Fri 25 Sep 2026 18:29:28 +0000
Files and hashes:         1: 3230322e352e31302e302f32342d3234203d3e20323136313338.roa (hash: elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=)
                          2: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=)
                          3: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=)
                          4: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=)
                          5: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (hash: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8=)
                          6: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (hash: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4=)
                          7: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=)
                          8: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=)
                          9: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (hash: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA=)
                          10: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: XLQGgjA6At0ZiZpRJEeDMAFjMRdqrNmoburCGNlcMDk=)
                          11: 3230322e352e31312e302f32342d3234203d3e20323136313338.roa (hash: AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=)
                          12: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (hash: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE=)
                          13: 3230322e352e31302e302f32332d3233203d3e20313331363330.roa (hash: 0owoHP+vPpEdJ28e7p434+yQ6TztrvINieYa1Uziwec=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
                          rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 18:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f2:41:7b:36:d4:1d:e2:bf:d0:d6:31:40:80:05:95:78:77:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
        Validity
            Not Before: Sep 24 17:33:28 2026 GMT
            Not After : Sep 25 18:29:28 2026 GMT
        Subject: CN=21B654F4DEA3089C0C857760C281C921C7A82B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:ed:cd:79:26:f1:03:33:b4:fa:df:c4:5b:
                    1e:b3:3a:44:6d:6e:b5:75:59:49:1e:51:35:32:ad:
                    32:19:be:f9:ff:ec:5d:54:22:b5:28:37:b1:d5:7e:
                    84:b7:13:52:00:55:ad:9a:bc:9f:d7:49:b6:91:bb:
                    dd:1e:f0:6c:b9:88:d0:84:8f:b0:36:76:30:7e:d5:
                    de:96:ff:9e:ef:f2:19:6d:8a:08:dc:8f:4d:43:fa:
                    7f:85:92:33:61:9d:19:ae:d9:7a:e1:de:6a:39:e7:
                    aa:88:f3:8e:fa:27:48:40:b0:42:32:95:63:0a:5a:
                    14:f4:f8:e2:fa:e3:98:16:2d:33:0f:43:8a:85:e5:
                    32:1a:14:e8:4d:c3:10:2c:fb:0e:dc:0a:06:fd:58:
                    7c:72:56:e9:45:80:c2:87:c0:c4:8a:ae:bb:c4:ab:
                    ae:07:f7:c6:40:c6:20:c2:0e:13:44:08:f8:ac:3e:
                    ec:94:3f:27:db:e2:54:7d:7e:fc:db:43:27:3d:7b:
                    a2:45:8a:af:08:11:58:93:00:f4:0b:53:ef:4a:58:
                    e4:43:8c:30:b1:73:4d:21:cf:bc:5c:61:ac:cb:8f:
                    2c:63:bf:51:eb:c2:69:cb:50:a9:ce:52:6a:90:36:
                    38:86:02:4b:aa:00:17:ea:bd:75:0e:02:e1:f2:f7:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B6:54:F4:DE:A3:08:9C:0C:85:77:60:C2:81:C9:21:C7:A8:2B:2E
            X509v3 Authority Key Identifier:
                keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:90:39:f8:20:1b:53:2c:1c:73:92:28:34:67:05:4e:9a:
         7a:18:67:93:ae:54:93:72:96:7e:a7:6b:76:9e:89:fe:0f:7a:
         9e:fd:23:7f:64:bd:93:1f:1b:4b:76:47:36:fa:da:1f:7b:b8:
         52:e7:08:54:22:20:dd:4a:f3:4c:e2:7c:31:a0:ae:9a:fd:be:
         b0:56:cc:ea:1c:db:3f:56:9d:4c:f3:de:1e:d3:bc:fd:ae:7d:
         b9:88:f3:55:38:35:0d:e7:7a:65:19:21:2b:00:04:23:e9:46:
         8f:5f:5e:97:ec:5f:9f:08:88:48:62:dd:5f:0e:50:97:40:e0:
         62:5d:5d:de:39:c6:e7:57:9e:64:20:9b:25:f2:6b:d7:d1:ec:
         29:1f:70:0b:fe:55:06:8d:45:96:9a:f0:80:47:f3:1e:c4:69:
         6d:00:27:75:de:c7:fd:90:2a:d6:a2:42:f7:41:c0:eb:e4:23:
         ca:3f:02:8c:63:0e:71:a0:58:0e:53:b6:e4:af:7f:af:e8:ba:
         24:65:8d:c1:1d:44:14:2a:d6:1f:41:8e:71:1d:5d:3d:aa:dd:
         c5:18:d5:f6:c3:cd:0c:5e:ab:fd:39:5a:84:ef:a4:6c:1d:f8:
         00:de:e7:3b:70:d6:75:05:c3:c5:bc:24:b3:11:50:35:77:08:
         88:eb:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:38:52 2026 by rpki-client