Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
File:                     E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft (raw, json)
Hash identifier:          jRfveiuTjeNzE00UwlZCldF2OiWUYzRWzAf6Zi/bdQk=
Subject key identifier:   89:7E:80:45:5A:53:8C:94:91:F0:C9:6F:E1:64:A0:B8:96:73:F6:96
Authority key identifier: E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8
Certificate issuer:       /CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8
Certificate serial:       7F5FB382432F2EF54B0A42B980D06CA2C7670C2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 08:22:28 +0000
Manifest this update:     Fri 25 Sep 2026 08:17:28 +0000
Manifest next update:     Sat 26 Sep 2026 12:21:28 +0000
Files and hashes:         1: 323430313a636161303a3a2f33322d3438203d3e20313532363135.roa (hash: P28MxJti37VJz6VYqUkBb8iwJMFlwOgG9cGDLBFqQ5o=)
                          2: E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl (hash: mk9KAwQYZh288vL4SF+tD+YN/My+4L6RL4ywBZ31DwM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl
                          rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 12:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5f:b3:82:43:2f:2e:f5:4b:0a:42:b9:80:d0:6c:a2:c7:67:0c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8
        Validity
            Not Before: Sep 25 08:17:28 2026 GMT
            Not After : Sep 26 12:21:28 2026 GMT
        Subject: CN=897E80455A538C9491F0C96FE164A0B89673F696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:09:65:e3:fd:e4:d9:40:4a:fe:62:d8:8d:
                    7c:bf:1e:39:9f:12:18:c4:bb:e1:86:76:37:3c:1b:
                    70:2a:23:06:dd:6a:e2:d0:eb:9c:62:96:39:6b:3c:
                    8c:16:69:08:2e:2f:19:e0:fc:39:6d:4f:52:72:a7:
                    4f:07:85:2b:b6:c3:91:f7:c3:0e:2d:55:f1:c9:96:
                    30:a0:60:11:61:55:05:36:da:c9:10:39:f4:e9:9d:
                    63:90:53:ab:1e:d5:64:5d:d2:f2:1f:1e:6b:31:78:
                    b7:ab:d9:92:11:3f:06:84:88:03:e1:45:d7:55:00:
                    21:39:cd:ae:11:57:5b:51:a6:d8:11:fb:27:1c:5d:
                    eb:e5:c2:16:23:b3:b4:66:b0:46:24:eb:47:7a:00:
                    43:fe:f9:c8:4e:b9:1c:81:9f:dc:a7:81:a9:5a:bb:
                    90:ef:5a:67:41:af:d0:0b:1a:63:57:aa:52:8d:f6:
                    d4:9b:c5:ec:4b:a4:f1:72:a5:f8:9d:d0:2f:66:62:
                    ef:2e:38:23:1c:b5:f0:69:8b:0c:71:0e:8a:27:04:
                    ca:d1:38:1b:ec:47:af:20:28:1a:76:5f:ec:2c:a1:
                    70:13:94:f2:3e:7b:39:86:99:92:29:6e:f4:c6:cb:
                    ea:b5:9d:1f:0b:f7:1a:f4:f6:4d:50:c4:05:c3:7a:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7E:80:45:5A:53:8C:94:91:F0:C9:6F:E1:64:A0:B8:96:73:F6:96
            X509v3 Authority Key Identifier:
                keyid:E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:09:97:f0:c0:e8:82:bb:a6:24:4e:41:d8:98:39:24:1e:
         f6:09:ff:f8:1e:ac:38:3f:e1:a4:82:02:c7:d1:35:83:e5:a1:
         92:34:86:40:a7:35:23:fd:31:60:6a:55:6f:10:6d:f5:f4:bf:
         4d:e7:de:be:f4:fe:a2:fe:66:d4:6d:e2:f5:3f:da:87:4f:ea:
         a1:23:41:2f:12:a9:d2:45:5e:d1:db:40:0d:73:4c:06:97:7a:
         f4:62:d3:f2:26:d3:5f:bc:5d:e6:d3:a5:19:f4:98:40:92:d5:
         02:a4:be:74:b8:9d:73:e7:77:5e:ac:f6:f8:1a:d3:14:a4:d6:
         f5:15:47:e1:c2:dc:28:80:76:66:12:fa:3f:ff:ef:02:b5:56:
         22:f0:3e:fd:33:a2:e4:39:83:a1:2c:35:55:e5:e2:65:5e:0d:
         87:99:0f:c6:d5:d0:d0:30:14:93:72:d8:df:55:bb:84:9e:04:
         98:0c:9a:f5:dc:cd:49:cf:9b:6a:95:04:7f:2d:2f:be:12:2c:
         c9:50:a7:ff:7a:81:3d:54:e6:eb:a2:72:3c:5b:63:0a:ed:df:
         61:cd:ec:5a:0d:b7:39:e2:9a:ff:53:c8:9b:28:d9:47:06:cd:
         45:54:73:a4:49:9a:be:86:0b:4e:b9:98:ef:90:37:d6:33:cb:
         42:9f:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:27 2026 by rpki-client