Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File:                     8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier:          iBL2MfS87TtFrIrTcQPODNNpvwy7wxeadovmzW8Rs9g=
Subject key identifier:   2E:47:01:A2:0C:44:1B:91:8B:CF:BF:62:A4:D3:2E:8F:08:D4:C9:3B
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer:       /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial:       1AE6B970DB9067E3A00D1C7BDC9BF3E21D6E4FBF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number:          FE
Signing time:             Sun 15 Nov 2026 15:03:20 +0000
Manifest this update:     Sun 15 Nov 2026 14:58:20 +0000
Manifest next update:     Mon 16 Nov 2026 15:14:20 +0000
Files and hashes:         1: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: tRlt2LYb7MsGG534jm/FN5Rq9/XPTA9+iIpmBR62xH0=)
                          2: 3136332e3132382e3137332e302f32342d3234203d3e2037353338.roa (hash: lN0c+zrFUM9A+yATR6PI6urDIFbSXfGahlIg9B4NXNw=)
                          3: 3136332e3132382e3137322e302f32332d3234203d3e2037353338.roa (hash: 76RD3PmOiizKI22CSgQ9dTiLJ8WL3ONkwXT5okUfmeg=)
                          4: 3136332e3132382e3137322e302f32342d3234203d3e2037353338.roa (hash: A4fXLq8miS4G/8CbEaXF5/ip5/2biJF6BwCxn18qXtg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
                          rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:b9:70:db:90:67:e3:a0:0d:1c:7b:dc:9b:f3:e2:1d:6e:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Validity
            Not Before: Nov 15 14:58:20 2026 GMT
            Not After : Nov 16 15:14:20 2026 GMT
        Subject: CN=2E4701A20C441B918BCFBF62A4D32E8F08D4C93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:39:a3:62:25:68:56:ae:23:d7:36:fa:12:
                    93:48:e9:80:16:2f:88:7d:44:44:da:d8:2a:01:4e:
                    5a:84:82:30:db:dc:4c:a6:36:d9:88:d0:8d:18:51:
                    fb:ea:68:2a:56:9d:28:76:f4:4d:dd:12:55:13:da:
                    47:1e:a7:22:f8:87:05:70:3d:e2:be:3f:85:c3:1c:
                    d5:17:bd:29:55:97:fc:5a:2a:10:d6:fa:e3:79:33:
                    57:57:0b:a5:13:42:20:9d:eb:fc:11:a1:a3:20:05:
                    0c:e7:52:fc:2e:c1:83:46:50:c6:66:10:6e:0d:9c:
                    1c:02:6d:0a:73:05:fa:76:51:19:f0:ab:fe:58:c5:
                    ff:50:8e:a4:51:97:72:84:e8:33:64:a9:b6:10:b0:
                    ab:6a:27:af:7e:cf:71:2c:07:f4:2e:fd:8f:0c:c5:
                    67:a4:2d:5f:bb:4a:96:aa:0f:11:00:fe:e6:93:21:
                    55:75:99:9e:b7:9f:01:7e:83:b0:76:62:f2:6e:99:
                    d0:ff:43:32:8f:29:de:14:b6:8b:dc:c2:7f:a7:1e:
                    b5:ef:36:d9:b8:87:95:61:18:aa:67:3e:31:db:da:
                    0d:e9:34:84:72:92:ae:b3:81:3d:58:17:69:e2:b1:
                    de:07:b1:46:7b:bd:f9:0a:d9:2a:91:85:ab:c4:9f:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:47:01:A2:0C:44:1B:91:8B:CF:BF:62:A4:D3:2E:8F:08:D4:C9:3B
            X509v3 Authority Key Identifier:
                keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:55:4d:39:3d:4e:70:f8:22:be:98:0e:63:69:f6:f0:e8:77:
         4e:31:c8:3e:be:14:ee:d2:cd:9c:8e:a2:a6:dc:4a:9e:86:cc:
         ad:53:7f:34:23:bd:67:d7:a9:ee:8f:8f:fb:2a:a3:be:9a:80:
         6c:b4:c2:15:5b:fa:d0:8a:73:70:13:04:ff:3a:df:fa:49:bf:
         3b:66:51:ed:c5:53:3e:8a:c2:0f:a1:d6:2f:e1:89:6b:a3:a2:
         f4:0f:dd:5e:6f:8c:b7:f7:ec:a1:d8:bc:64:75:3b:9c:63:a8:
         16:cb:2c:33:79:37:07:6f:be:2d:65:99:bd:ed:2d:8f:5e:32:
         85:d2:8c:fc:87:80:6d:5c:7c:fb:e7:29:fc:ec:99:b9:a1:f7:
         7a:e0:b1:a8:06:52:47:b4:bb:32:76:9d:5a:84:67:81:df:22:
         9c:04:a1:0f:f2:a6:42:d1:cd:01:e3:1f:6d:43:0f:20:9a:82:
         0a:14:a5:aa:a2:55:99:58:e6:b6:95:e5:d3:d1:2f:22:bd:0e:
         57:67:26:bd:75:fa:3e:64:6e:ea:9e:8c:76:ea:fe:87:4d:3b:
         2d:9c:f6:7c:9a:d7:12:fa:d0:48:a3:f1:9c:17:0f:d8:22:9c:
         7d:de:6e:b6:e6:35:1b:dc:7c:45:21:21:05:a1:01:ff:5f:eb:
         43:f8:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:10:54 2026 by rpki-client