Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File:                     8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier:          RDFWlRTJg/GNDMTvt+ooQUaCkAgUwZJIEaBC3kEQr0M=
Subject key identifier:   90:EE:37:57:A5:5D:D8:24:CF:BF:8C:28:B8:F8:EC:58:D4:76:0C:72
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer:       /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial:       2CEE7E463F9C145A970AAC73933B5ECC7236FDF0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number:          B9
Signing time:             Thu 24 Sep 2026 13:30:01 +0000
Manifest this update:     Thu 24 Sep 2026 13:25:01 +0000
Manifest next update:     Fri 25 Sep 2026 15:08:01 +0000
Files and hashes:         1: 3136332e3132382e3137322e302f32332d3234203d3e2037353338.roa (hash: 76RD3PmOiizKI22CSgQ9dTiLJ8WL3ONkwXT5okUfmeg=)
                          2: 3136332e3132382e3137332e302f32342d3234203d3e2037353338.roa (hash: lN0c+zrFUM9A+yATR6PI6urDIFbSXfGahlIg9B4NXNw=)
                          3: 3136332e3132382e3137322e302f32342d3234203d3e2037353338.roa (hash: A4fXLq8miS4G/8CbEaXF5/ip5/2biJF6BwCxn18qXtg=)
                          4: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: YpLJ32Lls6cE1lWRIjeRIE0gSokij7WcSZCg3KqyFjM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
                          rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 15:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:7e:46:3f:9c:14:5a:97:0a:ac:73:93:3b:5e:cc:72:36:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Validity
            Not Before: Sep 24 13:25:01 2026 GMT
            Not After : Sep 25 15:08:01 2026 GMT
        Subject: CN=90EE3757A55DD824CFBF8C28B8F8EC58D4760C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:1b:65:89:c4:b5:fb:0b:fa:d6:dd:74:30:
                    02:7d:b8:67:c7:1d:5c:fb:7a:70:e1:1c:c4:90:c8:
                    ad:78:d1:81:a2:d0:df:5d:27:82:6d:df:fd:68:54:
                    c6:c9:3f:dd:82:d7:08:59:ad:2d:dd:08:b0:52:87:
                    f9:53:96:ae:3c:51:2d:0e:68:1d:77:75:d5:38:a0:
                    a3:75:75:4d:70:56:3d:b7:2f:23:aa:82:ee:56:1b:
                    61:81:ce:87:5c:57:71:33:e5:3c:16:f2:4d:99:d9:
                    e2:b6:c6:ce:77:84:f8:0d:cb:96:28:ed:01:03:f0:
                    51:c2:53:64:8f:e8:d9:ba:1e:2b:24:ea:03:b6:5c:
                    27:ce:ab:60:87:3c:97:f8:f9:37:fc:70:03:98:2b:
                    90:1e:d0:f7:ee:03:8e:85:5b:f0:d3:a7:ab:c1:87:
                    bf:22:44:d7:1f:5f:73:e8:56:33:63:70:a9:62:f6:
                    6b:70:f5:d3:99:c7:40:77:43:99:66:6d:a5:44:18:
                    18:8e:76:67:26:ea:de:0d:a3:09:3a:ba:02:93:3a:
                    95:08:22:50:81:20:83:c9:be:55:e8:91:5a:e8:6a:
                    03:3f:ff:52:9b:71:16:fb:42:9a:ad:7a:76:4c:fd:
                    b5:50:74:5d:97:b9:d3:6c:d0:eb:38:7f:d6:27:d7:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EE:37:57:A5:5D:D8:24:CF:BF:8C:28:B8:F8:EC:58:D4:76:0C:72
            X509v3 Authority Key Identifier:
                keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:13:42:eb:ac:ad:f8:53:b4:80:35:59:b5:b4:68:40:80:
         4b:a2:5c:9c:31:01:0c:30:60:ab:11:71:43:da:2f:fc:89:1f:
         dc:87:78:88:69:60:1d:27:a4:e4:3e:cc:a4:f1:3a:a8:34:b0:
         88:79:fc:dc:b0:3a:f7:41:82:b6:03:c5:1b:bf:a2:3d:cd:78:
         d8:35:a1:6f:6e:17:d8:a6:de:65:88:49:c0:90:02:c4:0c:6c:
         71:da:73:10:86:47:a4:76:9e:43:65:a1:fb:ae:54:e1:ab:cc:
         75:26:02:2d:96:6d:e6:b9:cb:14:6a:1d:a7:f9:3f:de:f3:9d:
         a3:1e:c0:8b:90:fe:57:93:b1:31:92:bb:00:d3:0f:b9:4b:93:
         fb:a8:4d:f2:65:8d:1a:07:c2:bc:ce:5b:c5:be:c7:cb:aa:c7:
         8c:5b:b2:cf:e6:0d:7b:d6:2e:26:88:98:b8:66:11:6e:1a:f5:
         16:4d:bb:15:fe:27:a7:47:bb:37:20:fa:0a:1c:4f:45:7b:23:
         f3:b6:c6:8d:c1:9a:49:7d:19:e0:db:1f:60:d5:ea:12:7d:c6:
         cd:94:2c:e1:cb:07:b4:ee:2c:24:48:96:c0:59:77:e6:f1:22:
         9b:d4:c9:9b:c3:2b:16:f5:f8:cd:21:49:3a:fc:4a:fe:b0:34:
         61:c4:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:50 2026 by rpki-client