Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
File:                     2730CF9F132716F178F88FB1F268CE51CA264C9F.mft (raw, json)
Hash identifier:          OLT/6Pt/msQ4tcI2RyWN3eQBq+QiBibuqbeMA3BrQbA=
Subject key identifier:   43:60:22:58:19:B4:68:E6:C5:D4:59:62:34:F1:6B:EB:95:C7:95:00
Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
Certificate issuer:       /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Certificate serial:       5B34777D690470944C372269C67D23B0281C9AAF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
Manifest number:          B8
Signing time:             Fri 25 Sep 2026 18:33:50 +0000
Manifest this update:     Fri 25 Sep 2026 18:28:50 +0000
Manifest next update:     Sat 26 Sep 2026 19:25:50 +0000
Files and hashes:         1: 2730CF9F132716F178F88FB1F268CE51CA264C9F.crl (hash: Lgv30eE/xd3GINkBcytZtQOQILvf5LYC3KMG7d6vRPw=)
                          2: 3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (hash: 9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
                          rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:34:77:7d:69:04:70:94:4c:37:22:69:c6:7d:23:b0:28:1c:9a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
        Validity
            Not Before: Sep 25 18:28:50 2026 GMT
            Not After : Sep 26 19:25:50 2026 GMT
        Subject: CN=4360225819B468E6C5D4596234F16BEB95C79500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:66:41:63:2f:be:0a:6c:1c:85:07:a8:7b:
                    ee:34:e1:06:35:1d:df:f1:f3:9a:6b:5a:96:94:a0:
                    28:1c:2e:af:46:68:be:ed:46:9e:74:4a:2b:75:03:
                    49:41:99:bf:d2:7b:72:be:49:ac:99:f0:01:1a:a4:
                    77:f0:26:6f:f5:d7:21:1f:7f:10:67:7b:81:f7:1c:
                    e8:85:af:83:e3:37:57:4d:26:b3:e0:33:b0:e8:25:
                    81:59:96:a7:06:c2:9d:83:d4:13:55:2d:e3:bd:41:
                    e2:62:c3:8e:e3:09:79:aa:57:5a:8c:68:0a:7b:da:
                    ba:48:a0:46:b4:9d:31:4d:fe:4f:e5:c1:b3:89:65:
                    e5:d0:65:e0:3d:9d:c1:7d:36:3c:cc:fe:c4:38:03:
                    85:5a:96:d7:fb:86:b2:36:60:51:3b:8f:a1:b8:1c:
                    2c:19:c0:6d:00:ca:8b:a7:02:09:c5:76:e1:d8:7d:
                    af:0d:c2:03:81:cd:16:9d:2e:f1:41:26:1a:83:ab:
                    18:77:87:93:f6:98:41:c6:6c:25:f9:82:66:9f:ec:
                    92:04:d5:5b:32:90:d9:ef:bd:10:f6:c7:14:3c:88:
                    06:17:0c:a4:4b:5b:48:27:4e:74:4d:5f:81:b0:9e:
                    58:23:b0:1e:b0:77:f9:54:c1:6f:fa:7d:80:c7:2c:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:22:58:19:B4:68:E6:C5:D4:59:62:34:F1:6B:EB:95:C7:95:00
            X509v3 Authority Key Identifier:
                keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:39:c3:77:92:1b:cb:95:fa:2e:87:c5:60:10:a3:d3:2d:8e:
         fe:da:fc:1c:cf:95:85:25:15:21:09:a4:2f:69:62:eb:d6:54:
         8f:aa:a8:c9:04:bb:8b:bc:db:3b:17:66:8c:3b:35:e7:30:d9:
         e2:df:48:dc:eb:69:ee:56:b9:46:8d:20:b6:e5:55:6e:90:57:
         71:ee:c2:76:09:e3:99:ef:c0:60:d8:73:f2:38:33:61:6c:4d:
         e9:13:48:4b:1e:ed:f2:39:6e:00:e4:dc:69:42:2e:e1:2b:76:
         6e:b7:66:44:cc:78:30:c5:84:f6:ad:23:ba:f5:98:ce:ca:15:
         c7:ef:a0:8e:7c:f4:f0:28:56:a7:6b:8b:5f:f1:6f:d2:77:45:
         0a:51:2d:30:b7:00:48:04:b6:db:12:e8:0a:7a:e0:e8:fd:ec:
         2c:66:78:22:98:cf:6e:91:ee:d3:41:09:98:41:a0:fb:62:52:
         27:f4:a1:41:71:69:e9:17:78:bf:fd:03:63:f6:fc:73:ec:89:
         ab:a3:b5:96:7b:be:60:4c:8a:c1:b1:9a:3c:ba:89:f8:bc:4c:
         d7:f2:9d:c1:1e:ca:6a:2a:ec:99:0d:0e:78:77:e9:f7:d1:b7:
         7a:ae:5e:7c:71:31:28:e1:cd:b9:72:5a:a7:f6:62:66:56:37:
         da:de:e0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:03:29 2026 by rpki-client