Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File:                     95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier:          g+kPDGxadFZX+TMGeEt9LBQkI3yj+DwEbon4AtnG8o0=
Subject key identifier:   5E:EC:BC:62:8C:60:26:18:C3:A6:7A:E2:7C:53:B1:DE:8D:B3:FA:FA
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer:       /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial:       5485F415BE45408E96BA1859826918F63DC8CB8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number:          C8
Signing time:             Tue 29 Sep 2026 01:50:22 +0000
Manifest this update:     Tue 29 Sep 2026 01:45:22 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:22 +0000
Files and hashes:         1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
                          2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: 2Vf83umYKPP8r3xCJzlZJjND2LvvHe9sFeECMaFniVQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:85:f4:15:be:45:40:8e:96:ba:18:59:82:69:18:f6:3d:c8:cb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
        Validity
            Not Before: Sep 29 01:45:22 2026 GMT
            Not After : Sep 30 05:01:22 2026 GMT
        Subject: CN=5EECBC628C602618C3A67AE27C53B1DE8DB3FAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:bd:6b:ee:3a:59:8a:5d:85:1f:55:b4:e9:
                    71:71:55:58:46:1f:59:cf:3e:b8:07:df:b4:a4:16:
                    e7:b9:b1:db:9c:25:37:3e:53:d2:c6:0e:4e:d9:a3:
                    98:e3:80:0e:67:95:09:ef:65:07:7d:da:fa:1d:25:
                    f4:aa:88:33:8f:19:d0:87:d9:51:53:a2:c6:d5:07:
                    2d:c8:ff:d2:4b:c7:f4:b7:d4:cb:bc:fc:45:97:cd:
                    ac:b4:83:28:2f:2a:ed:8e:3c:de:02:38:5a:c6:48:
                    44:a4:50:54:77:31:15:69:13:e5:35:84:c1:5e:c6:
                    01:a2:ad:18:34:c1:f2:0a:38:bd:c4:38:96:54:da:
                    f2:9a:95:99:99:90:78:16:ab:5c:6e:93:49:43:4c:
                    21:55:24:e6:82:a8:69:90:91:69:b6:03:a7:f8:60:
                    fd:13:45:49:c0:53:31:05:f5:e2:15:e6:54:d3:66:
                    20:f2:98:a5:3a:f8:01:77:85:12:29:41:45:db:28:
                    ff:df:60:10:8e:b9:22:0e:75:d5:a6:49:a3:6a:80:
                    f3:e1:6d:65:07:e7:a5:85:26:4f:da:07:d6:9d:d8:
                    45:9b:35:b6:9d:52:08:2f:10:2d:ef:1f:c0:3d:9e:
                    91:b1:4f:02:67:15:0f:4c:26:35:3c:ef:97:f7:28:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EC:BC:62:8C:60:26:18:C3:A6:7A:E2:7C:53:B1:DE:8D:B3:FA:FA
            X509v3 Authority Key Identifier:
                keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:d5:b5:7b:f4:cf:ac:e1:f6:cd:47:e5:6f:c8:36:5b:01:
         9d:cb:e1:cc:ff:e4:12:c2:a6:e7:c2:b6:c4:56:12:90:9b:7b:
         c5:1b:a9:23:d3:90:8a:03:7f:21:91:97:a6:a2:78:90:d3:e0:
         0e:dd:bf:35:6a:f7:96:1c:ee:b5:96:c9:7b:17:49:bd:d5:96:
         c3:bd:b5:62:31:83:e7:b6:6a:77:83:42:bb:62:8b:d2:ce:47:
         b6:aa:9b:83:a8:18:fb:3e:15:fc:3d:56:ac:b5:ff:d3:ef:c3:
         3c:c1:73:35:21:40:b8:4b:d4:68:84:3b:6e:ef:9b:c9:3a:ab:
         88:39:11:12:03:de:72:84:e1:76:85:a5:ba:eb:23:b6:16:13:
         53:d2:a1:4d:b5:44:d9:31:bc:08:fd:93:85:ee:d4:9d:92:2a:
         dd:9f:e8:bf:86:3a:a5:f7:58:38:05:9d:a6:6b:f1:7a:91:5c:
         c6:93:dc:5b:92:bb:50:47:18:0b:a4:81:85:27:f2:34:40:3b:
         65:72:98:6b:83:7b:51:2c:b4:04:2a:be:59:bc:7f:7f:ec:9a:
         c9:2d:92:78:9a:a5:52:56:b5:1e:35:4c:fc:58:e7:ed:09:3e:
         c8:78:de:d8:a9:96:c3:99:fa:02:72:07:02:63:84:32:92:93:
         79:49:51:47
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUVIX0Fb5FQI6WuhhZgmkY9j3Iy44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NFNzU5RjQ1RTJF
N0U0MjFBMzAeFw0yNjA5MjkwMTQ1MjJaFw0yNjA5MzAwNTAxMjJaMDMxMTAvBgNV
BAMTKDVFRUNCQzYyOEM2MDI2MThDM0E2N0FFMjdDNTNCMURFOERCM0ZBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbML1r7jpZil2FH1W06XFxVVhG
H1nPPrgH37SkFue5sducJTc+U9LGDk7Zo5jjgA5nlQnvZQd92vodJfSqiDOPGdCH
2VFTosbVBy3I/9JLx/S31Mu8/EWXzay0gygvKu2OPN4COFrGSESkUFR3MRVpE+U1
hMFexgGirRg0wfIKOL3EOJZU2vKalZmZkHgWq1xuk0lDTCFVJOaCqGmQkWm2A6f4
YP0TRUnAUzEF9eIV5lTTZiDymKU6+AF3hRIpQUXbKP/fYBCOuSIOddWmSaNqgPPh
bWUH56WFJk/aB9ad2EWbNbadUggvEC3vH8A9npGxTwJnFQ9MJjU875f3KOnLAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUXuy8YoxgJhjDpnrifFOx3o2z+vowHwYDVR0j
BBgwFoAUlbGmJHmzbBQU/xfOdZ9F4ufkIaMwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8xLzk1QjFBNjI0NzlCMzZDMTQxNEZGMTdDRTc1OUY0NUUyRTdFNDIxQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzIvOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NF
NzU5RjQ1RTJFN0U0MjFBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMS85NUIx
QTYyNDc5QjM2QzE0MTRGRjE3Q0U3NTlGNDVFMkU3RTQyMUEzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
bkzVtXv0z6zh9s1H5W/INlsBncvhzP/kEsKm58K2xFYSkJt7xRupI9OQigN/IZGX
pqJ4kNPgDt2/NWr3lhzutZbJexdJvdWWw721YjGD57Zqd4NCu2KL0s5Htqqbg6gY
+z4V/D1WrLX/0+/DPMFzNSFAuEvUaIQ7bu+byTqriDkREgPecoThdoWluusjthYT
U9KhTbVE2TG8CP2The7UnZIq3Z/ov4Y6pfdYOAWdpmvxepFcxpPcW5K7UEcYC6SB
hSfyNEA7ZXKYa4N7USy0BCq+Wbx/f+yayS2SeJqlUla1HjVM/Fjn7Qk+yHje2KmW
w5n6AnIHAmOEMpKTeUlRRw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:33:10 2026 by rpki-client