Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File:                     19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier:          x2Afk06RYVaFc8wcbg5LuHf/ZvZP2HniWiDA1G0S7R4=
Subject key identifier:   BA:6C:76:19:C9:20:63:21:88:6E:7A:58:93:7F:34:2B:64:DB:28:E3
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer:       /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial:       1215B6814076447E3A553883A8EC5BCA85545E0B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number:          B6
Signing time:             Thu 24 Sep 2026 20:09:19 +0000
Manifest this update:     Thu 24 Sep 2026 20:04:19 +0000
Manifest next update:     Fri 25 Sep 2026 23:59:19 +0000
Files and hashes:         1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: eyHveisi2ms5CJ2gDrBgJLnmIqQefTSX5xNZTtXwpn8=)
                          2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
                          rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:15:b6:81:40:76:44:7e:3a:55:38:83:a8:ec:5b:ca:85:54:5e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
        Validity
            Not Before: Sep 24 20:04:19 2026 GMT
            Not After : Sep 25 23:59:19 2026 GMT
        Subject: CN=BA6C7619C9206321886E7A58937F342B64DB28E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:1a:7f:44:4b:ef:67:72:a1:b0:45:e8:02:
                    c2:f9:42:82:bf:45:3f:a5:50:be:41:62:fc:c1:a3:
                    f4:38:4b:18:40:e4:1d:1d:2e:ea:88:2a:a4:7a:f7:
                    40:39:9e:24:e8:04:57:f9:a8:3a:c0:ea:5a:75:a7:
                    24:25:94:73:c6:31:82:bb:03:2d:8b:f6:ec:49:a9:
                    a3:f7:db:d0:ea:60:33:f9:f4:37:f4:b3:06:58:1e:
                    12:41:52:c2:74:b9:bc:44:c5:76:c7:f5:60:06:7f:
                    af:b1:28:90:15:53:23:c7:12:91:9f:db:d7:b8:75:
                    60:67:c5:cb:8f:bf:43:28:ff:66:17:ff:cf:d8:31:
                    e2:a7:b1:6d:1a:fa:e6:7e:91:a2:d9:62:e7:eb:d5:
                    d7:70:e1:af:76:cb:33:7e:ed:5c:2a:93:7f:4a:24:
                    02:29:03:ea:64:31:27:8c:a2:92:3b:08:75:0c:a5:
                    7b:6f:8c:3d:2f:1e:9b:ac:2b:a4:61:37:3b:b5:ef:
                    06:64:37:3c:52:dc:43:9b:1b:ee:b0:f8:96:b7:f1:
                    cf:93:d4:b7:53:e1:2c:d1:08:ff:99:0f:14:d5:d1:
                    75:7e:3c:6e:df:5f:c0:f1:c7:30:9d:d0:e7:f7:5c:
                    c4:93:e3:73:69:47:c7:5f:39:10:7b:ba:16:e3:6d:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:76:19:C9:20:63:21:88:6E:7A:58:93:7F:34:2B:64:DB:28:E3
            X509v3 Authority Key Identifier:
                keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:78:5a:86:f2:9e:b5:97:39:c2:0b:2e:a1:b3:b6:e1:8d:
         67:34:e5:1e:ff:43:19:1e:f6:78:ac:f3:c3:e8:cb:bb:6c:a8:
         84:13:cb:43:d9:da:58:13:39:ab:8f:37:ac:b9:cb:09:d8:48:
         da:4d:19:19:7e:1e:3e:4b:54:16:4d:66:84:c1:fc:d0:fd:dd:
         a9:fc:01:b2:82:a0:fa:0b:a2:1d:d9:ef:5a:f4:a5:31:36:33:
         f6:e4:91:1f:f8:5c:d9:7a:f2:84:bc:cb:f5:6c:2a:f7:60:7b:
         d8:6b:b6:6f:24:d0:1d:8f:7a:1f:8a:06:db:6f:1f:20:37:0d:
         c1:c0:8b:df:35:be:bd:61:fc:40:9b:60:26:0b:7c:93:7b:44:
         dd:51:69:21:fb:53:17:3d:70:97:5a:ab:50:5b:11:0d:af:69:
         06:df:2d:8a:79:4f:c2:66:38:41:04:60:a7:10:12:20:01:f6:
         ca:12:04:3d:18:ef:50:d4:59:3f:0e:e1:80:b8:da:70:58:4c:
         30:e8:ce:cb:e2:72:b1:6e:fc:41:ba:7d:91:b4:d1:8b:22:28:
         93:5c:3a:e8:47:b9:eb:bf:2e:65:f7:c1:cb:a5:f5:4d:2f:3d:
         5c:1f:27:88:6a:78:0a:8f:c7:a8:17:95:7d:26:13:69:bc:8b:
         62:10:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:51 2026 by rpki-client