Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft
File:                     F382B7314BE5F96FAB63C6934F221809499142AF.mft (raw, json)
Hash identifier:          NaKZ/GLTB6rNfczJ6aVdi1gackgLDvOQ/g/i2oaidXY=
Subject key identifier:   B0:06:2D:6D:45:49:D4:88:8F:1C:F4:40:95:C5:40:8B:1E:E6:E1:B8
Authority key identifier: F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF
Certificate issuer:       /CN=F382B7314BE5F96FAB63C6934F221809499142AF
Certificate serial:       180DBF92838742722FBF1CA7B2BA6F404F1F9A33
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 06:07:43 +0000
Manifest this update:     Thu 24 Sep 2026 06:02:43 +0000
Manifest next update:     Fri 25 Sep 2026 06:58:43 +0000
Files and hashes:         1: F382B7314BE5F96FAB63C6934F221809499142AF.crl (hash: Ed337DhkIaVXcpdYCaJoCoBOqjJ7n4MmpU6ptVFlw5M=)
                          2: 323430323a336365303a3a2f33322d3438203d3e203138303433.roa (hash: kou5TkjScUT8me0v1XqzHwgdWT9m4lkBG9XROC9VU+0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl
                          rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 06:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0d:bf:92:83:87:42:72:2f:bf:1c:a7:b2:ba:6f:40:4f:1f:9a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F382B7314BE5F96FAB63C6934F221809499142AF
        Validity
            Not Before: Sep 24 06:02:43 2026 GMT
            Not After : Sep 25 06:58:43 2026 GMT
        Subject: CN=B0062D6D4549D4888F1CF44095C5408B1EE6E1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:47:e9:d0:6c:61:25:ca:23:07:ef:0f:f0:
                    62:46:a0:84:82:c8:a9:e8:1f:55:3c:d2:b3:75:5c:
                    32:16:6f:9f:07:41:15:45:37:29:99:f0:d0:9f:18:
                    b0:f7:fc:5d:0f:44:39:d6:dc:8c:15:be:94:3b:dd:
                    2b:02:20:3d:fa:fe:c2:d6:75:7b:8e:65:fa:e5:e5:
                    c1:67:cd:f9:6e:52:c5:f9:60:cf:b9:8b:21:7b:80:
                    19:a4:93:b0:22:ec:3a:1e:48:61:ae:4c:06:21:08:
                    0a:84:23:0a:d1:47:11:3a:62:92:24:2c:51:1c:90:
                    1c:94:92:d1:00:6b:6c:30:d5:da:61:dc:5d:d6:e8:
                    40:37:93:0e:b0:fe:2e:c0:24:6e:7a:07:62:26:91:
                    1b:da:3a:eb:fc:6d:4d:58:bd:66:e4:83:44:14:d5:
                    33:12:85:83:a1:ff:c0:d0:fe:c5:44:fc:89:2d:3d:
                    84:83:1b:a1:ff:4b:28:f7:c2:40:60:90:05:7d:e6:
                    fb:1e:e9:b5:db:e5:8a:7f:ac:e6:fb:8a:a6:f3:b6:
                    fd:ad:eb:ac:ab:2f:54:c7:71:6a:10:84:4c:37:97:
                    09:0c:a2:fd:ba:c1:8b:05:2f:5e:67:a6:3f:21:d9:
                    99:c6:35:17:b1:a8:dd:13:ac:68:57:2a:75:54:73:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:2D:6D:45:49:D4:88:8F:1C:F4:40:95:C5:40:8B:1E:E6:E1:B8
            X509v3 Authority Key Identifier:
                keyid:F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:f2:1e:be:d7:8a:62:90:28:98:5b:95:7b:20:a9:3c:1c:
         82:03:45:e0:e7:89:a9:bb:2a:62:cc:ae:84:bd:7e:2b:59:31:
         13:30:3d:38:b7:4a:d3:2d:4e:0c:ce:2b:10:4c:f0:10:dc:cb:
         ba:c3:c2:46:61:b4:37:98:48:ae:8a:af:da:cd:b5:d1:e2:3a:
         75:14:ca:3f:ae:9c:01:0c:a5:b7:da:4d:06:64:af:45:af:d5:
         09:b5:ef:9d:18:6c:71:91:8d:61:a3:0a:e5:ba:1d:d8:f6:bd:
         b4:1c:ad:56:46:20:8c:93:a4:b6:04:87:cd:40:ea:a6:a1:5f:
         28:c9:8a:34:23:1e:e3:d2:46:24:b5:0e:78:a3:2c:23:c6:b0:
         f9:b0:f6:a6:53:03:6b:35:6c:0e:0f:f9:7c:bf:08:7c:67:9e:
         40:50:c4:8f:71:bd:b3:5f:8a:d0:41:33:c8:28:20:a5:0a:17:
         9b:f5:b5:51:a7:d3:74:98:b1:b7:e6:73:ef:08:02:0a:f9:c2:
         c4:6b:98:e1:a7:14:04:92:ed:fd:a9:9e:d0:c5:b1:ab:fc:50:
         96:43:ea:9b:4b:50:38:cf:c0:27:c9:0f:ea:74:42:38:89:89:
         99:5e:51:42:89:41:e6:35:c6:15:31:91:6f:3a:f6:0b:48:58:
         d7:e7:7f:5b
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUGA2/koOHQnIvvxynsrpvQE8fmjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MkI3MzE0QkU1Rjk2RkFCNjNDNjkzNEYyMjE4MDk0
OTkxNDJBRjAeFw0yNjA5MjQwNjAyNDNaFw0yNjA5MjUwNjU4NDNaMDMxMTAvBgNV
BAMTKEIwMDYyRDZENDU0OUQ0ODg4RjFDRjQ0MDk1QzU0MDhCMUVFNkUxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKy0fp0GxhJcojB+8P8GJGoISC
yKnoH1U80rN1XDIWb58HQRVFNymZ8NCfGLD3/F0PRDnW3IwVvpQ73SsCID36/sLW
dXuOZfrl5cFnzfluUsX5YM+5iyF7gBmkk7Ai7DoeSGGuTAYhCAqEIwrRRxE6YpIk
LFEckByUktEAa2ww1dph3F3W6EA3kw6w/i7AJG56B2ImkRvaOuv8bU1YvWbkg0QU
1TMShYOh/8DQ/sVE/IktPYSDG6H/Syj3wkBgkAV95vse6bXb5Yp/rOb7iqbztv2t
66yrL1THcWoQhEw3lwkMov26wYsFL15npj8h2ZnGNRexqN0TrGhXKnVUcyRDAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUsAYtbUVJ1IiPHPRAlcVAix7m4bgwHwYDVR0j
BBgwFoAU84K3MUvl+W+rY8aTTyIYCUmRQq8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19I
Q0VCLzAvRjM4MkI3MzE0QkU1Rjk2RkFCNjNDNjkzNEYyMjE4MDk0OTkxNDJBRi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMzgyQjczMTRCRTVGOTZGQUI2M0M2OTM0
RjIyMTgwOTQ5OTE0MkFGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19IQ0VCLzAvRjM4MkI3
MzE0QkU1Rjk2RkFCNjNDNjkzNEYyMjE4MDk0OTkxNDJBRi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB8S
8h6+14pikCiYW5V7IKk8HIIDReDniam7KmLMroS9fitZMRMwPTi3StMtTgzOKxBM
8BDcy7rDwkZhtDeYSK6Kr9rNtdHiOnUUyj+unAEMpbfaTQZkr0Wv1Qm1750YbHGR
jWGjCuW6Hdj2vbQcrVZGIIyTpLYEh81A6qahXyjJijQjHuPSRiS1DnijLCPGsPmw
9qZTA2s1bA4P+Xy/CHxnnkBQxI9xvbNfitBBM8goIKUKF5v1tVGn03SYsbfmc+8I
Agr5wsRrmOGnFASS7f2pntDFsav8UJZD6ptLUDjPwCfJD+p0QjiJiZleUUKJQeY1
xhUxkW869gtIWNfnf1s=
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:15 2026 by rpki-client