Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft
File:                     46A39033600C06F3DE67312DA7FF15D05D5552A2.mft (raw, json)
Hash identifier:          +j8vxrN1n/wNi1u6O9R08N2NYVSiDKCP4N8IwiApBHA=
Subject key identifier:   54:FF:9E:E2:B6:5C:7B:98:B7:60:CA:49:E6:03:CF:84:2E:BF:6D:09
Authority key identifier: 46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2
Certificate issuer:       /CN=46A39033600C06F3DE67312DA7FF15D05D5552A2
Certificate serial:       06F456F9B48B28A529DE21FB3C0F83DF945530F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 18:59:10 +0000
Manifest this update:     Thu 24 Sep 2026 18:54:10 +0000
Manifest next update:     Fri 25 Sep 2026 19:56:10 +0000
Files and hashes:         1: 3130332e3134382e3134362e302f32332d3234203d3e2037343833.roa (hash: X/zn7c/SE34fBO4pYYczduuzZSaJBoRy1EGAiuyQ3m8=)
                          2: 3130332e3134382e3134362e302f32332d3234203d3e2037353336.roa (hash: mctWeOsWYbt3qvVjKSVdhyoHazDOUitkMfyf1eWK4Cg=)
                          3: 46A39033600C06F3DE67312DA7FF15D05D5552A2.crl (hash: 39RJICpDljhI+/QBsNQhm069c1k++9MifITm5k8ZoAA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.crl
                          rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 19:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:56:f9:b4:8b:28:a5:29:de:21:fb:3c:0f:83:df:94:55:30:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A39033600C06F3DE67312DA7FF15D05D5552A2
        Validity
            Not Before: Sep 24 18:54:10 2026 GMT
            Not After : Sep 25 19:56:10 2026 GMT
        Subject: CN=54FF9EE2B65C7B98B760CA49E603CF842EBF6D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:e6:1a:bb:8f:a2:41:d2:e6:be:0e:cc:57:
                    a6:8c:af:1d:cd:7e:70:ff:99:ff:d4:51:7e:cc:bd:
                    11:4e:a7:39:af:34:eb:b6:f6:8b:b2:fb:18:e4:53:
                    9f:4f:ca:57:6d:9d:c3:9f:5b:75:b7:ac:c5:15:29:
                    08:e4:c3:05:bd:31:e0:ba:06:83:f0:af:8d:d4:e8:
                    c0:f2:99:51:0d:25:1c:37:79:12:e7:f1:3b:54:b9:
                    b9:54:23:a4:94:dd:31:ec:28:da:f4:d5:6b:5e:b2:
                    ac:3c:f6:72:08:e8:7b:2d:0a:d4:41:a6:0b:9a:fc:
                    c0:bc:78:05:91:77:30:75:5e:b3:89:c6:27:00:5b:
                    58:13:b9:a1:1c:30:37:94:3e:28:93:ac:49:da:e7:
                    72:32:3d:f7:f6:53:ac:fb:38:26:ad:8c:17:a4:61:
                    2e:47:12:26:da:1a:9b:1f:6e:14:29:b6:09:86:79:
                    54:1e:d4:59:96:f5:0e:27:75:43:7f:67:f4:de:38:
                    43:97:5b:d9:90:0b:ab:65:d4:17:18:91:ee:7a:5a:
                    09:66:12:31:e1:73:24:12:8e:39:ae:9b:9d:f7:44:
                    ee:3d:70:de:99:22:db:1c:e3:68:9a:75:c4:16:bc:
                    36:4e:52:dc:a1:bc:c1:77:ec:05:27:3a:a4:a5:bc:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:9E:E2:B6:5C:7B:98:B7:60:CA:49:E6:03:CF:84:2E:BF:6D:09
            X509v3 Authority Key Identifier:
                keyid:46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:ec:45:12:bd:0a:4a:76:51:2e:dd:57:51:98:8a:ff:f8:
         96:4c:4c:92:5d:85:14:a2:b1:47:44:15:94:62:d4:1a:14:87:
         3a:2f:db:04:c5:26:aa:34:92:a6:d5:18:fd:97:c5:e1:e2:5e:
         a6:df:f2:da:4a:6c:7c:a9:1e:34:f6:36:a2:89:81:fe:24:38:
         e6:ae:78:7f:d7:0c:d4:30:f5:0c:6b:ab:69:10:f2:8e:e9:21:
         28:84:9d:56:e0:31:6c:e3:64:01:43:c3:bd:9f:6a:3c:da:2c:
         50:2a:7c:1d:8e:96:aa:49:1e:f3:05:4c:22:b4:41:d6:db:b7:
         54:fc:ce:fd:d8:56:19:65:c6:d5:d9:b6:96:a4:75:e9:16:11:
         42:d4:10:1a:4c:56:2d:87:4e:9a:b1:49:6f:25:52:63:de:6e:
         9d:b1:d4:4b:fd:0c:1a:81:6c:ab:91:c7:b2:a9:49:29:cb:af:
         de:bd:d4:32:c7:8e:fb:56:91:12:eb:7f:0d:75:1d:17:1d:d8:
         04:5a:80:34:66:67:1b:32:6e:28:05:e2:8b:0a:b5:3b:d3:55:
         fc:8e:7a:b5:f0:d2:01:9d:ea:06:f0:be:10:32:37:e9:8d:3a:
         c5:b3:ca:a8:49:0b:6f:71:45:46:3f:ed:2c:51:fb:96:60:08:
         3f:3c:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:01:05 2026 by rpki-client