Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File:                     FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier:          DdAv8qXd3M0IUCrvsAp3C/J4yCH3snm/PoGaxzT+sf8=
Subject key identifier:   19:97:E1:9D:A0:D8:A2:5B:C6:F5:D0:BA:00:6B:84:33:E4:D5:4A:E7
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer:       /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial:       1AFC36AA2CF78A02710327E388458C9F7EB34052
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 05:37:39 +0000
Manifest this update:     Thu 24 Sep 2026 05:32:39 +0000
Manifest next update:     Fri 25 Sep 2026 07:15:39 +0000
Files and hashes:         1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: dHOtzqo7hoDiqm0jGndhAa8WQJIel2REwNxe8DS6lBo=)
                          2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
                          rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:36:aa:2c:f7:8a:02:71:03:27:e3:88:45:8c:9f:7e:b3:40:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
        Validity
            Not Before: Sep 24 05:32:39 2026 GMT
            Not After : Sep 25 07:15:39 2026 GMT
        Subject: CN=1997E19DA0D8A25BC6F5D0BA006B8433E4D54AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:27:1e:51:15:01:31:c8:96:de:79:41:91:
                    08:30:cc:33:1c:de:cd:8c:46:bc:19:1c:dd:7c:2a:
                    af:0f:93:c9:58:bb:b2:87:72:0c:55:8a:e7:ad:f6:
                    58:c8:88:44:d7:45:3b:1d:fb:b2:66:7e:d9:32:e2:
                    33:de:90:22:01:3d:a8:70:dc:bb:78:95:81:31:96:
                    e2:31:9d:b4:a5:b2:64:84:c8:d9:45:40:6c:b5:46:
                    bd:63:b0:e0:95:f9:63:b2:12:ab:22:df:05:ba:8d:
                    dc:ea:29:66:3e:59:40:86:39:97:b5:0b:d8:1c:63:
                    e0:b3:7c:df:f6:eb:9e:79:ea:f9:b7:21:a4:6f:ab:
                    d0:ec:18:f8:47:73:b0:87:98:fe:28:c7:8f:06:5b:
                    18:85:5d:6c:57:6b:23:dd:d9:16:7c:86:ee:6a:31:
                    71:76:cf:46:e7:4f:98:d7:3d:c7:89:7e:72:8c:d9:
                    fd:d2:da:93:41:84:58:46:ea:75:8e:5d:4a:68:fe:
                    74:ba:73:19:61:3f:a7:93:b5:b2:74:0e:a4:47:2f:
                    cf:4e:0e:53:16:b7:d2:16:9f:b6:46:aa:3a:69:c8:
                    da:26:12:40:2b:8f:4b:07:a8:b3:da:ee:7b:9b:c7:
                    7f:81:8b:ea:65:98:15:73:01:d8:dc:74:89:b5:c7:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:E1:9D:A0:D8:A2:5B:C6:F5:D0:BA:00:6B:84:33:E4:D5:4A:E7
            X509v3 Authority Key Identifier:
                keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:02:1c:21:05:d3:bf:9f:7f:44:f6:e4:d7:19:f5:d0:73:
         fa:ee:60:f2:b8:28:8e:1f:a4:5d:3d:19:ee:3c:76:7c:f5:8f:
         80:19:d5:14:a7:c0:0d:6b:8c:4e:46:d9:08:10:39:8f:93:68:
         af:d0:ed:21:60:8f:51:69:8f:96:b7:45:ac:9e:73:d4:ae:91:
         95:a4:a2:a1:82:ab:94:0f:db:65:0d:1d:30:b1:fc:dc:5d:ec:
         6d:f1:d1:ba:07:38:e4:ac:99:cd:08:b8:f9:9f:a5:91:5e:ec:
         0a:54:72:2a:0f:5c:e1:ef:c1:19:69:12:8b:e1:8f:26:d0:5f:
         a2:da:5b:4f:ed:e7:94:20:6a:73:05:65:8a:51:9a:16:de:b2:
         78:10:8b:e4:86:24:cb:26:f6:0d:cc:a1:7f:f0:e7:31:a0:89:
         6b:e9:36:ad:8e:31:cb:ac:cb:12:e8:a8:6a:bf:d7:7d:4c:b0:
         ad:e0:8c:dd:b6:44:0c:3d:81:71:e6:96:80:16:32:01:13:c4:
         1b:57:45:bb:38:e7:7e:1f:17:b3:f0:6d:cc:c5:60:c2:00:b1:
         da:b1:fe:6d:82:47:19:3f:5a:4b:b9:65:e0:d6:07:b7:a2:75:
         e0:84:2d:8e:c9:50:4a:85:16:29:e2:94:ea:8d:66:43:15:ae:
         1d:46:55:2f
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUGvw2qiz3igJxAyfjiEWMn36zQFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw
MUVEMTg1QjAeFw0yNjA5MjQwNTMyMzlaFw0yNjA5MjUwNzE1MzlaMDMxMTAvBgNV
BAMTKDE5OTdFMTlEQTBEOEEyNUJDNkY1RDBCQTAwNkI4NDMzRTRENTRBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfyceURUBMciW3nlBkQgwzDMc
3s2MRrwZHN18Kq8Pk8lYu7KHcgxViuet9ljIiETXRTsd+7Jmftky4jPekCIBPahw
3Lt4lYExluIxnbSlsmSEyNlFQGy1Rr1jsOCV+WOyEqsi3wW6jdzqKWY+WUCGOZe1
C9gcY+CzfN/265556vm3IaRvq9DsGPhHc7CHmP4ox48GWxiFXWxXayPd2RZ8hu5q
MXF2z0bnT5jXPceJfnKM2f3S2pNBhFhG6nWOXUpo/nS6cxlhP6eTtbJ0DqRHL89O
DlMWt9IWn7ZGqjppyNomEkArj0sHqLPa7nubx3+Bi+plmBVzAdjcdIm1x2P3AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUGZfhnaDYolvG9dC6AGuEM+TVSucwHwYDVR0j
BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv
RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1
RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF
NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKxQAhwhBdO/n39E9uTX
GfXQc/ruYPK4KI4fpF09Ge48dnz1j4AZ1RSnwA1rjE5G2QgQOY+TaK/Q7SFgj1Fp
j5a3Rayec9SukZWkoqGCq5QP22UNHTCx/Nxd7G3x0boHOOSsmc0IuPmfpZFe7ApU
cioPXOHvwRlpEovhjybQX6LaW0/t55QganMFZYpRmhbesngQi+SGJMsm9g3MoX/w
5zGgiWvpNq2OMcusyxLoqGq/131MsK3gjN22RAw9gXHmloAWMgETxBtXRbs4534f
F7PwbczFYMIAsdqx/m2CRxk/Wku5ZeDWB7eideCELY7JUEqFFinilOqNZkMVrh1G
VS8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:45:02 2026 by rpki-client