Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File:                     59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier:          11KqrJ55NrwIxcip//N7NIPtZacKcShI9koL9QrpGHM=
Subject key identifier:   AC:17:88:12:E3:F5:71:4C:3F:D4:B4:1A:FC:A9:5F:26:16:D4:CC:86
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer:       /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial:       2073EA63AC2CFA78B47EF76CABB5C482127AEE8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number:          FC
Signing time:             Sat 14 Nov 2026 19:09:06 +0000
Manifest this update:     Sat 14 Nov 2026 19:04:06 +0000
Manifest next update:     Sun 15 Nov 2026 19:36:06 +0000
Files and hashes:         1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: QvHV+wlgQg77cBUw7Nzgk9TZDghnr2O69u44p+nc+nE=)
                          2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
                          rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 15:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:73:ea:63:ac:2c:fa:78:b4:7e:f7:6c:ab:b5:c4:82:12:7a:ee:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
        Validity
            Not Before: Nov 14 19:04:06 2026 GMT
            Not After : Nov 15 19:36:06 2026 GMT
        Subject: CN=AC178812E3F5714C3FD4B41AFCA95F2616D4CC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:86:1c:64:18:48:cf:11:11:10:96:d4:18:
                    0f:b3:97:3f:ac:ea:63:0c:ae:f7:41:57:bb:04:6d:
                    c3:68:ac:27:b1:1d:c9:a6:8d:0e:e1:29:ef:74:c6:
                    90:7a:2d:93:35:52:8c:e7:bc:bb:85:69:57:30:78:
                    89:e9:46:12:13:16:10:94:ef:33:17:2e:dd:5d:25:
                    c8:b4:ad:9f:43:ce:59:7a:b4:13:b9:99:c1:3d:73:
                    1a:d6:f7:de:f5:e1:dc:8a:73:65:29:06:83:90:bc:
                    10:d7:35:71:8b:1e:e0:f0:03:19:02:02:da:9c:ca:
                    bc:c5:c1:0e:1d:19:e2:4b:cc:57:eb:31:1b:46:f6:
                    b7:1e:ac:19:56:4b:63:86:e7:ca:6b:6c:a2:d4:85:
                    20:ea:b3:64:9f:4f:d5:2b:a3:c4:5e:4a:f8:e0:b3:
                    1c:f0:93:bb:97:93:8c:bc:8f:cd:07:5e:e3:d2:46:
                    36:55:be:81:3e:20:55:81:73:e5:0b:db:94:53:47:
                    d9:b6:7a:2a:62:86:0d:7a:d8:70:bb:95:16:77:93:
                    60:ec:2e:43:72:16:f9:0d:9f:83:4f:84:c0:66:fb:
                    a7:39:a6:a2:7f:e3:d4:61:46:7d:39:50:b4:93:9f:
                    68:7e:cc:27:30:e5:d8:fb:e2:4d:6d:a3:fe:33:43:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:88:12:E3:F5:71:4C:3F:D4:B4:1A:FC:A9:5F:26:16:D4:CC:86
            X509v3 Authority Key Identifier:
                keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:19:fb:e5:06:a2:cf:91:8b:da:3a:fa:89:39:20:97:7a:
         2e:97:91:79:55:c8:f6:37:2e:fd:9e:26:b6:57:c9:d5:74:22:
         02:62:d9:21:7c:b5:2d:09:55:3e:f7:c7:c2:41:c1:b5:c3:40:
         53:b3:1e:8e:e7:63:ed:c4:50:19:80:b8:2f:d2:7f:db:b7:57:
         cc:45:6d:63:e2:3c:91:5d:46:03:65:1b:d4:e6:ae:46:6f:ac:
         60:0e:70:d4:d0:35:a5:2a:c6:11:3f:34:32:55:87:ae:18:ef:
         c0:73:6c:29:c1:20:0a:09:6b:1e:92:b8:2f:f3:ae:28:df:d7:
         76:24:e8:6a:c4:36:6e:f6:fe:ed:cb:b8:d1:f1:8a:59:ad:4a:
         8f:d0:b4:e4:de:bc:48:3f:7e:3b:bb:1f:8e:a1:51:90:59:6b:
         7d:1a:9f:01:15:54:bd:1e:a5:73:46:3c:18:19:59:b4:f3:7c:
         9a:1d:c1:5c:84:97:15:97:67:ca:67:78:ad:b0:fe:b4:a8:7f:
         8d:81:f9:f9:55:a9:b4:a7:c3:c6:f2:9f:bb:c6:06:40:48:49:
         17:b7:c5:ee:a7:b9:63:d0:13:fd:9f:bf:11:50:c2:63:c9:71:
         52:b2:0b:e9:41:6f:ff:5f:72:c8:d3:20:ef:af:f7:f1:48:04:
         69:4b:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:00:07 2026 by rpki-client