Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
File:                     E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft (raw, json)
Hash identifier:          VxS43DD7E38bCKA29ngJWE9R39s9BlQfrIvy02E6vs8=
Subject key identifier:   AF:E3:B9:79:82:DE:44:F3:84:55:C1:E3:98:3C:71:69:FA:36:6E:E8
Authority key identifier: E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Certificate issuer:       /CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Certificate serial:       102CE4D9247050DF4865142094F2316CD0D0F6A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
Manifest number:          BF
Signing time:             Tue 29 Sep 2026 22:47:57 +0000
Manifest this update:     Tue 29 Sep 2026 22:42:57 +0000
Manifest next update:     Thu 01 Oct 2026 00:06:57 +0000
Files and hashes:         1: 3130332e3235352e3231302e302f32332d3332203d3e20313331363432.roa (hash: FaPlqa1DeUZTg3kaDmHEbki3z5vF9i3TucSszJSHI3U=)
                          2: E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl (hash: 6MOxeE6wD6sk6nmUEf88NAOTdLxRxtfXEbZaGOsRwg8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
                          rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 00:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2c:e4:d9:24:70:50:df:48:65:14:20:94:f2:31:6c:d0:d0:f6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
        Validity
            Not Before: Sep 29 22:42:57 2026 GMT
            Not After : Oct  1 00:06:57 2026 GMT
        Subject: CN=AFE3B97982DE44F38455C1E3983C7169FA366EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:18:fd:2f:f1:fd:5a:fe:70:0f:9e:8e:f4:
                    1b:a0:ff:4c:fc:22:5e:3e:95:d6:60:0c:62:c2:35:
                    5e:fe:f6:8d:ee:9c:0b:9c:a6:d3:25:9f:85:da:ef:
                    e8:a7:16:85:47:71:3e:56:e7:97:09:95:61:75:52:
                    72:3c:94:15:08:bd:02:9b:b4:88:4f:ca:f4:2e:8f:
                    5d:f1:55:4a:35:d7:01:3f:76:74:88:5b:bb:9b:ca:
                    ea:24:62:3a:25:3a:7d:68:af:d3:9c:bd:0f:98:31:
                    4f:cf:08:6c:8c:60:29:8c:ef:cc:11:ff:fa:89:94:
                    18:99:7f:2d:5f:3d:eb:18:d5:f8:17:2b:89:e7:68:
                    94:f4:da:2d:c8:0b:fe:ef:19:de:e4:86:eb:aa:5d:
                    b4:7e:5a:f8:04:df:72:58:49:b3:77:49:f6:0d:84:
                    8e:72:f8:c9:5f:1b:ba:2d:91:86:28:fc:50:84:48:
                    92:c1:97:fa:9a:b0:f3:e8:e7:a1:b0:cd:d5:02:12:
                    81:c5:90:6d:db:c5:94:7b:e8:6a:81:9c:be:c0:7c:
                    81:5e:72:57:c4:cf:9a:06:d1:43:f4:11:ea:4d:07:
                    5f:ec:75:04:49:5b:9e:21:49:99:3b:23:4a:f2:52:
                    a3:fa:07:bf:0f:58:0b:11:ed:2a:05:f8:8a:fa:05:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E3:B9:79:82:DE:44:F3:84:55:C1:E3:98:3C:71:69:FA:36:6E:E8
            X509v3 Authority Key Identifier:
                keyid:E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:71:81:41:9c:11:02:77:6e:8d:a3:67:6d:5d:8e:d4:75:
         cc:75:39:46:3f:da:96:c0:dc:04:e5:db:50:32:44:cc:75:8d:
         21:ca:fb:98:3e:4c:ac:33:bd:06:33:7c:d2:9a:d3:e6:86:5b:
         a2:03:fa:d9:02:69:4d:e2:6b:cb:37:e3:4c:c6:43:99:2b:50:
         88:9f:6f:d4:ac:74:11:9b:0b:cc:52:2e:f8:03:79:08:94:1c:
         25:fd:12:43:af:1e:03:a7:df:21:e6:74:df:1d:e3:a5:be:10:
         58:8b:ba:c9:09:41:24:be:29:05:8f:12:68:21:3b:dc:24:45:
         4d:c0:b2:66:ba:0a:85:70:99:37:78:2b:4d:60:76:fe:80:de:
         43:6b:e4:ae:99:ed:2a:2b:a8:6e:18:41:fa:ca:0f:e2:d6:cd:
         0d:c6:7e:d7:0e:17:1e:29:65:86:c4:58:68:5d:52:b3:c7:a3:
         a0:ee:b0:3b:4f:31:73:b2:4c:52:37:cd:45:db:90:d0:6f:fc:
         92:2e:83:8a:13:69:d2:eb:70:e2:39:13:60:8c:d8:83:c7:b3:
         b5:5a:76:dc:49:69:4f:8f:d8:6d:a7:1d:55:06:25:41:06:23:
         3d:f5:f1:c3:c6:a9:90:08:c4:e7:ea:44:cb:63:8d:19:3a:81:
         aa:b5:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:20 2026 by rpki-client