Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File:                     4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier:          IIewqAE3lQolBZeuwhexEIwxyQb337xaSGJlH7HUjuc=
Subject key identifier:   9D:96:BC:EA:1E:51:0F:B7:05:D6:6E:68:9D:BB:02:25:61:6B:2B:E7
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer:       /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial:       0EC18C72B7C776BCDEAEE2948578AF0848EFF47B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number:          B6
Signing time:             Thu 24 Sep 2026 16:55:39 +0000
Manifest this update:     Thu 24 Sep 2026 16:50:39 +0000
Manifest next update:     Fri 25 Sep 2026 20:54:39 +0000
Files and hashes:         1: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: ccQJDUz7ZvZNnRFk/IxZ6ix789CduOUQXKyHCSuZ/aY=)
                          2: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
                          rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 20:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c1:8c:72:b7:c7:76:bc:de:ae:e2:94:85:78:af:08:48:ef:f4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
        Validity
            Not Before: Sep 24 16:50:39 2026 GMT
            Not After : Sep 25 20:54:39 2026 GMT
        Subject: CN=9D96BCEA1E510FB705D66E689DBB0225616B2BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:ad:67:bc:ce:07:7e:ff:d5:48:1c:bb:25:
                    77:a7:ac:fb:24:22:5c:f4:6d:ad:77:92:68:30:5a:
                    cb:f9:c7:88:ee:2e:8d:ba:c0:08:de:4c:c8:21:37:
                    1e:a0:09:fd:bf:ef:92:8a:50:c4:b3:84:f5:b8:20:
                    9e:b1:e9:7b:7f:13:13:a1:97:d8:66:74:e7:49:9c:
                    08:42:36:f1:3e:98:2e:b1:85:62:3f:cb:3c:b6:c0:
                    06:1b:85:84:4f:49:cd:f1:c0:b7:04:40:8f:4e:86:
                    ee:be:e0:83:2c:c8:b7:a6:d1:da:ce:8f:f1:a4:b0:
                    a4:97:7b:76:ad:89:6e:c8:a5:af:26:b4:34:ad:ea:
                    b9:da:0e:81:ae:e4:05:78:ea:c0:19:22:a1:08:dc:
                    19:4e:b5:f9:24:64:c2:bf:7b:6b:7f:df:bc:72:77:
                    99:75:35:ec:a2:e7:58:f4:db:12:30:4f:1d:bc:f5:
                    8f:aa:71:37:ff:4c:e2:df:d0:6b:e7:7c:8f:07:92:
                    57:86:53:62:66:8b:a4:5f:a1:32:8b:8f:5e:20:02:
                    31:38:6a:ee:9d:e8:0c:85:84:c8:a3:aa:52:8a:53:
                    0f:a9:1d:cd:c2:c4:d3:16:a3:b7:1b:65:7f:0e:c1:
                    39:c6:89:34:73:d6:45:63:a6:1a:21:87:e4:48:7a:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:BC:EA:1E:51:0F:B7:05:D6:6E:68:9D:BB:02:25:61:6B:2B:E7
            X509v3 Authority Key Identifier:
                keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:8a:97:44:2a:83:b3:b0:2c:cd:02:3b:54:39:76:3e:08:
         16:5f:b7:07:82:3d:90:05:47:52:fb:45:b0:b6:d5:47:79:ee:
         28:fe:39:de:84:f0:c2:8c:16:2c:34:23:29:cc:03:b2:fd:d1:
         21:d4:1b:88:93:31:2b:be:3d:c2:29:69:b3:82:0a:c6:d7:fd:
         a2:eb:f7:cd:22:c3:df:99:4c:73:cd:4a:04:1f:88:14:bb:a9:
         02:9f:43:31:7d:a1:4d:24:d7:17:84:2b:b9:fe:80:9f:b8:b2:
         04:f5:59:04:f7:fa:bf:82:90:77:1c:1d:09:70:47:5d:93:97:
         67:cf:0a:b6:fd:d6:fd:51:31:41:d0:6b:1d:66:1f:dc:c6:48:
         99:8c:ce:4a:57:b3:2f:35:e0:ae:fc:f5:99:2d:4a:92:45:96:
         f4:0a:b5:38:05:de:9a:15:c2:7a:36:06:71:26:b5:31:2d:3f:
         76:6a:72:a5:67:34:e9:9f:fb:83:15:bb:ea:58:54:da:67:7c:
         31:e6:a6:df:e3:d7:a6:8b:bc:21:41:07:87:e6:73:b3:5b:f4:
         bc:64:63:6a:4a:e6:5e:64:7b:cf:ca:bc:e1:e6:d0:29:33:22:
         27:f7:19:0f:b4:31:9f:f2:e9:28:09:27:0a:62:0f:61:40:80:
         eb:97:1c:5f
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUDsGMcrfHdrzeruKUhXivCEjv9HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0U0NDU5NkRGQjRBOTNGNDAwQTdCNTcxMjZCMzFE
NUVDNENEQTAeFw0yNjA5MjQxNjUwMzlaFw0yNjA5MjUyMDU0MzlaMDMxMTAvBgNV
BAMTKDlEOTZCQ0VBMUU1MTBGQjcwNUQ2NkU2ODlEQkIwMjI1NjE2QjJCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu561nvM4Hfv/VSBy7JXenrPsk
Ilz0ba13kmgwWsv5x4juLo26wAjeTMghNx6gCf2/75KKUMSzhPW4IJ6x6Xt/ExOh
l9hmdOdJnAhCNvE+mC6xhWI/yzy2wAYbhYRPSc3xwLcEQI9Ohu6+4IMsyLem0drO
j/GksKSXe3atiW7Ipa8mtDSt6rnaDoGu5AV46sAZIqEI3BlOtfkkZMK/e2t/37xy
d5l1Neyi51j02xIwTx289Y+qcTf/TOLf0GvnfI8HkleGU2Jmi6RfoTKLj14gAjE4
au6d6AyFhMijqlKKUw+pHc3CxNMWo7cbZX8OwTnGiTRz1kVjphohh+RIeqJFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUnZa86h5RD7cF1m5onbsCJWFrK+cwHwYDVR0j
BBgwFoAURwPkRZbftKk/QAp7VxJrMdXsTNowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1RDRkUv
MC80NzAzRTQ0NTk2REZCNEE5M0Y0MDBBN0I1NzEyNkIzMUQ1RUM0Q0RBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzQ3MDNFNDQ1OTZERkI0QTkzRjQwMEE3QjU3MTI2
QjMxRDVFQzRDREEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LVENGRS8wLzQ3MDNFNDQ1OTZERkI0
QTkzRjQwMEE3QjU3MTI2QjMxRDVFQzRDREEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG84qXRCqDs7As
zQI7VDl2PggWX7cHgj2QBUdS+0WwttVHee4o/jnehPDCjBYsNCMpzAOy/dEh1BuI
kzErvj3CKWmzggrG1/2i6/fNIsPfmUxzzUoEH4gUu6kCn0MxfaFNJNcXhCu5/oCf
uLIE9VkE9/q/gpB3HB0JcEddk5dnzwq2/db9UTFB0GsdZh/cxkiZjM5KV7MvNeCu
/PWZLUqSRZb0CrU4Bd6aFcJ6NgZxJrUxLT92anKlZzTpn/uDFbvqWFTaZ3wx5qbf
49emi7whQQeH5nOzW/S8ZGNqSuZeZHvPyrzh5tApMyIn9xkPtDGf8ukoCScKYg9h
QIDrlxxf
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:36 2026 by rpki-client