Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
File:                     B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft (raw, json)
Hash identifier:          VPqTT/468A2zMxYTRnWhLifnPaIi6Fbhi0wOwN70QcI=
Subject key identifier:   A3:55:73:22:E5:52:14:FD:97:1D:17:B6:4E:09:C1:ED:49:07:E6:3A
Authority key identifier: B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
Certificate issuer:       /CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Certificate serial:       4BE539099091938F344D8DB77EC78C01D296C3A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
Manifest number:          B7
Signing time:             Fri 25 Sep 2026 09:52:38 +0000
Manifest this update:     Fri 25 Sep 2026 09:47:38 +0000
Manifest next update:     Sat 26 Sep 2026 13:41:38 +0000
Files and hashes:         1: B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl (hash: UEx2GyH66jJWxjJ0NdNBazM+BMlLZM0TqkHMn20cyHQ=)
                          2: 3130332e3132362e3138302e302f32322d3234203d3e203138303436.roa (hash: a8xqBAe2caapH+ozlzEc+y43Zwh4KNtvwAmfNpRDkMo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl
                          rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e5:39:09:90:91:93:8f:34:4d:8d:b7:7e:c7:8c:01:d2:96:c3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
        Validity
            Not Before: Sep 25 09:47:38 2026 GMT
            Not After : Sep 26 13:41:38 2026 GMT
        Subject: CN=A3557322E55214FD971D17B64E09C1ED4907E63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:46:96:46:69:dc:73:2e:5c:ea:05:15:7d:
                    90:f5:32:0d:61:07:3a:38:a0:23:20:4e:5a:75:00:
                    26:8d:4f:55:51:8d:eb:12:40:2c:fe:4f:c5:42:96:
                    ba:83:56:a6:a2:8c:c8:f4:f7:0a:61:8a:ad:fa:61:
                    71:bf:cd:0a:9b:13:53:9b:4a:a7:c0:ec:b1:3d:e7:
                    44:af:c7:79:03:4e:ff:fa:2c:dc:40:ab:89:f4:a4:
                    c7:f1:1c:5b:46:d2:ad:4b:db:89:c5:df:eb:e3:aa:
                    98:c5:7d:39:85:e4:fc:fa:61:e8:dd:8b:1e:95:e7:
                    08:0b:0c:71:0a:9b:b7:fe:d3:41:d2:bd:4f:73:db:
                    3b:bf:bf:32:a5:51:e2:7b:96:99:f7:eb:bd:49:00:
                    e4:c8:c8:23:d4:0c:f8:39:91:a5:29:87:8d:86:60:
                    c7:17:b9:52:d2:16:35:de:8c:40:4f:cc:ea:15:d8:
                    c7:5d:3e:e4:28:81:56:f0:8d:aa:0a:b3:2e:ee:4e:
                    fa:8d:72:d5:8b:0b:f9:34:7c:17:84:aa:02:55:fe:
                    16:87:98:24:a5:84:51:0b:5f:9f:22:d1:18:6c:0b:
                    cc:6f:07:11:49:7c:66:9d:9c:a2:2d:12:cb:68:d5:
                    d7:e9:db:7a:0c:48:06:85:b7:3b:ae:74:cd:eb:6a:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:73:22:E5:52:14:FD:97:1D:17:B6:4E:09:C1:ED:49:07:E6:3A
            X509v3 Authority Key Identifier:
                keyid:B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f5:94:58:40:23:fd:1a:df:6e:97:97:51:84:e8:c5:ac:07:
         17:ce:f7:50:8c:2a:2a:fb:9e:95:72:84:fd:b9:04:86:df:8a:
         7a:9a:4d:6c:53:b0:93:74:58:37:d5:d4:6a:76:f4:6f:69:ef:
         04:d9:bd:a0:7e:4c:e8:0b:80:ed:53:32:84:ee:37:5e:77:8f:
         82:2f:a3:85:67:4a:b7:22:46:7b:42:a1:19:fb:55:a2:a6:af:
         b8:cd:b1:d1:44:46:91:ee:e1:56:ec:6d:f1:bb:2c:9c:7a:e3:
         b9:ff:58:91:59:5d:11:a1:b2:e4:ac:de:89:8c:35:41:4c:40:
         10:c4:53:d0:be:e0:19:69:80:90:57:ea:b7:ab:99:cc:5c:b0:
         32:15:44:e8:f5:74:0e:63:c2:08:13:b3:48:8e:3a:28:2b:fe:
         25:44:66:6b:12:92:bf:69:cb:fb:1e:04:8c:99:56:65:1c:01:
         20:92:aa:a3:36:f7:4b:f0:9d:c9:34:4b:97:cd:aa:bc:ee:d3:
         98:98:68:eb:d4:82:c8:1a:a9:99:d4:c5:6f:c4:59:ab:a3:66:
         f0:f2:01:85:d4:30:6f:21:d0:82:f4:0e:51:20:3b:3c:92:7c:
         c2:a5:61:49:69:90:73:35:d8:2e:ce:81:28:34:7b:1e:de:cc:
         97:f6:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:53:19 2026 by rpki-client