Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File:                     809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier:          YRP7dkfcIWWGIFMECq/14piakrli/4YzBTSWHBvGTYQ=
Subject key identifier:   56:2C:C5:D3:CD:99:FF:44:99:D3:07:A8:C9:FA:0E:C5:5A:E7:CB:3B
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer:       /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial:       514CDA1D09926C74F7F48E4DB11DFD3EEF21CC74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number:          B5
Signing time:             Wed 23 Sep 2026 11:17:41 +0000
Manifest this update:     Wed 23 Sep 2026 11:12:41 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:41 +0000
Files and hashes:         1: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
                          2: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
                          3: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: /1OPOvZwuaOFWItjwtdyN+409lGE3QXuBhYI7XxqAd4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4c:da:1d:09:92:6c:74:f7:f4:8e:4d:b1:1d:fd:3e:ef:21:cc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
        Validity
            Not Before: Sep 23 11:12:41 2026 GMT
            Not After : Sep 24 14:01:41 2026 GMT
        Subject: CN=562CC5D3CD99FF4499D307A8C9FA0EC55AE7CB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:7d:d6:2d:22:01:e2:76:8f:e6:48:13:b7:
                    31:18:4e:56:e3:bf:cb:13:6d:a9:1c:6b:84:59:d0:
                    7a:01:a6:73:6c:59:51:2e:8f:10:cf:a0:5b:4b:2a:
                    59:8e:65:89:a5:2d:51:50:f4:b6:b7:db:47:8e:2c:
                    e3:dc:e9:ce:26:10:f3:ba:5f:31:3a:f6:9f:d8:58:
                    35:d2:8d:46:65:a5:73:b0:ee:29:61:d0:8a:82:f0:
                    08:b1:a8:53:42:6b:3d:d1:af:07:d9:da:c1:6e:20:
                    e7:86:13:a6:64:a5:03:c2:7f:1c:4f:ca:45:53:bf:
                    0d:bb:32:b6:7b:6a:44:e3:5f:9c:f1:5a:ac:3d:1e:
                    69:cd:60:e7:0f:14:5b:f9:55:bb:9f:1a:c9:6f:e1:
                    bf:c1:31:bb:84:f3:49:91:64:fc:39:7c:bc:5e:c3:
                    9c:11:de:92:8d:12:64:d0:38:55:f9:06:60:ca:59:
                    5a:d1:77:98:8e:b9:89:09:50:6b:e4:a6:66:74:c3:
                    d6:02:bf:c1:01:65:fd:85:b1:e6:6c:66:c0:4a:96:
                    50:4e:1e:d9:79:9b:22:c5:81:2c:02:80:94:da:37:
                    6b:dc:6d:4f:9f:6f:c4:39:dc:34:7f:f6:59:e4:e4:
                    8b:32:3f:47:9c:17:b7:b0:f2:68:4b:bb:f9:91:37:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:C5:D3:CD:99:FF:44:99:D3:07:A8:C9:FA:0E:C5:5A:E7:CB:3B
            X509v3 Authority Key Identifier:
                keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:54:6d:bb:af:8c:c8:5f:c8:2e:b0:bb:48:b8:d6:73:bb:
         1a:bf:13:23:79:12:75:25:b1:3c:cc:c1:e4:08:7a:e4:32:cd:
         3e:8c:5b:d1:0f:e9:88:08:93:d5:a3:43:6a:58:5a:18:b5:96:
         6b:49:1f:54:a3:c8:3a:2b:07:45:89:3e:07:05:d5:6c:a6:00:
         cb:4f:c0:06:94:9f:8f:46:8f:b5:27:35:5a:98:c1:36:bc:83:
         86:6a:af:02:2d:1c:ba:d7:88:4c:88:36:64:39:2e:74:42:31:
         5f:54:4d:17:bc:5d:70:5d:cc:31:b2:4d:a4:cb:93:4c:06:6e:
         a3:0e:6f:58:70:25:98:02:39:b8:d3:b2:c6:0c:64:83:38:09:
         7b:23:a5:f2:45:2c:4b:26:6a:f9:e9:aa:72:3e:f0:2d:f4:ed:
         e0:fb:e0:94:2a:d8:42:18:6b:28:fe:0e:0e:a9:5f:a1:ef:ac:
         65:54:77:93:52:64:19:cb:d5:60:80:9d:fb:8d:05:81:d1:5b:
         dd:1c:77:9e:36:fe:5b:8d:fa:c0:20:b9:4a:49:03:7f:fe:82:
         8b:81:77:fc:91:d5:8d:d4:51:53:b2:53:86:c5:2b:22:af:12:
         1b:c0:90:11:0f:e7:cc:65:e2:20:b7:54:c7:26:32:3d:47:c8:
         53:5b:86:5f
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUUUzaHQmSbHT39I5NsR39Pu8hzHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5NDAwRUFBNTBBN0VCM0JBQzc4RUVEMkI5OENENDBC
ODA5RkU5RTAeFw0yNjA5MjMxMTEyNDFaFw0yNjA5MjQxNDAxNDFaMDMxMTAvBgNV
BAMTKDU2MkNDNUQzQ0Q5OUZGNDQ5OUQzMDdBOEM5RkEwRUM1NUFFN0NCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bX3WLSIB4naP5kgTtzEYTlbj
v8sTbakca4RZ0HoBpnNsWVEujxDPoFtLKlmOZYmlLVFQ9La320eOLOPc6c4mEPO6
XzE69p/YWDXSjUZlpXOw7ilh0IqC8AixqFNCaz3RrwfZ2sFuIOeGE6ZkpQPCfxxP
ykVTvw27MrZ7akTjX5zxWqw9HmnNYOcPFFv5VbufGslv4b/BMbuE80mRZPw5fLxe
w5wR3pKNEmTQOFX5BmDKWVrRd5iOuYkJUGvkpmZ0w9YCv8EBZf2FseZsZsBKllBO
Htl5myLFgSwCgJTaN2vcbU+fb8Q53DR/9lnk5IsyP0ecF7ew8mhLu/mRN4k3AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUVizF082Z/0SZ0weoyfoOxVrnyzswHwYDVR0j
BBgwFoAUgJQA6qUKfrO6x47tK5jNQLgJ/p4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0pNRS8x
LzgwOTQwMEVBQTUwQTdFQjNCQUM3OEVFRDJCOThDRDQwQjgwOUZFOUUuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvODA5NDAwRUFBNTBBN0VCM0JBQzc4RUVEMkI5OENE
NDBCODA5RkU5RS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NKTUUvMS84MDk0MDBFQUE1MEE3RUIz
QkFDNzhFRUQyQjk4Q0Q0MEI4MDlGRTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdh9UbbuvjMhfyC6w
u0i41nO7Gr8TI3kSdSWxPMzB5Ah65DLNPoxb0Q/piAiT1aNDalhaGLWWa0kfVKPI
OisHRYk+BwXVbKYAy0/ABpSfj0aPtSc1WpjBNryDhmqvAi0cuteITIg2ZDkudEIx
X1RNF7xdcF3MMbJNpMuTTAZuow5vWHAlmAI5uNOyxgxkgzgJeyOl8kUsSyZq+emq
cj7wLfTt4PvglCrYQhhrKP4ODqlfoe+sZVR3k1JkGcvVYICd+40FgdFb3Rx3njb+
W436wCC5SkkDf/6Ci4F3/JHVjdRRU7JThsUrIq8SG8CQEQ/nzGXiILdUxyYyPUfI
U1uGXw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:37:35 2026 by rpki-client