Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          Qq7r8flmbjkGSDf+rSG4C/cc7hcFykMAM3HDTekGEi4=
Subject key identifier:   67:64:7F:99:7A:B5:38:5D:CA:28:FB:3B:80:8C:12:5C:5B:C9:BC:84
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       46D513B6428DDB56F92E49152EB880F2EB73FF4E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          B8
Signing time:             Fri 25 Sep 2026 22:09:27 +0000
Manifest this update:     Fri 25 Sep 2026 22:04:27 +0000
Manifest next update:     Sun 27 Sep 2026 01:47:27 +0000
Files and hashes:         1: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: y7yrYyb/6L9GUBr2t8edZPOsEQ7V7QAll/gfzRqMmTg=)
                          2: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:13:b6:42:8d:db:56:f9:2e:49:15:2e:b8:80:f2:eb:73:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: Sep 25 22:04:27 2026 GMT
            Not After : Sep 27 01:47:27 2026 GMT
        Subject: CN=67647F997AB5385DCA28FB3B808C125C5BC9BC84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5c:3f:36:da:ba:dd:59:19:92:09:8e:db:4e:
                    7f:15:23:fc:31:c6:83:f7:8c:64:ee:ac:52:49:52:
                    e1:6d:1b:c6:06:9b:22:40:b3:ae:fb:d1:00:67:43:
                    93:9b:91:df:50:48:59:9f:15:4f:de:e2:39:67:1b:
                    12:2a:33:9f:d1:72:e9:e0:f2:e5:94:ea:9e:0a:23:
                    85:89:9b:f3:2d:c6:40:b1:0f:bd:5e:82:b9:d8:7e:
                    09:f4:56:3d:21:12:86:c0:46:57:93:a5:cd:b8:76:
                    8c:b9:99:ed:cf:b8:2a:3c:16:17:f8:20:a0:3d:5c:
                    47:4f:f3:27:95:1e:7b:4f:6b:19:df:97:00:cc:09:
                    00:93:e9:dc:1a:8e:a9:0b:69:c0:43:cb:a5:2c:46:
                    9d:ac:00:f6:c5:f5:3a:36:d7:cb:f2:c3:5e:0d:d6:
                    f8:18:59:06:3b:b0:71:91:15:8c:14:fc:ba:51:79:
                    24:a3:23:3f:78:7e:da:ea:2d:53:68:b9:03:57:1c:
                    21:0f:f8:18:49:2d:de:dc:86:a5:11:3c:33:1a:8a:
                    99:74:cc:48:6c:c0:8e:4a:79:99:87:4f:8f:53:30:
                    af:39:d3:32:ce:62:2a:b9:5b:7c:92:68:63:78:fd:
                    52:cb:85:e7:fc:61:6a:db:52:06:90:18:cf:f9:09:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:64:7F:99:7A:B5:38:5D:CA:28:FB:3B:80:8C:12:5C:5B:C9:BC:84
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:a2:e3:8f:37:43:b6:60:71:71:01:90:8c:d7:13:7f:48:
         a2:06:c4:e6:78:0f:24:8e:49:fc:d4:9c:aa:b0:e4:8b:5f:8f:
         3a:0c:9c:b6:d5:1f:fe:0d:74:a1:88:44:81:5a:aa:6a:d0:ba:
         4e:46:a9:65:71:dd:31:6c:1b:94:e9:9a:99:8e:b3:bd:80:54:
         56:13:42:c8:ea:20:74:d4:8c:c8:4d:9a:e5:c2:19:f4:a7:19:
         e0:eb:a6:04:0d:d1:01:5c:ef:48:5d:2d:2e:e3:c7:b8:47:c2:
         30:00:47:2b:4b:76:ea:c6:99:42:70:bd:46:4b:aa:40:35:a0:
         e6:02:7e:8b:32:4d:52:da:45:d2:ef:90:85:1c:d1:a6:d0:ae:
         12:4f:de:49:48:a9:b8:36:4e:af:93:42:f6:8f:32:04:08:d7:
         c3:10:ee:b0:3d:b3:c9:f9:df:99:90:6a:c4:14:3d:ed:3b:d8:
         51:10:4b:23:64:34:59:9b:28:b7:57:6d:64:1a:d4:6b:6f:19:
         e6:40:0a:6f:df:3f:a9:af:ec:0a:a1:6f:ab:8a:8c:78:f9:b3:
         b9:7d:b4:ef:d8:d3:28:ca:55:4f:d1:db:03:17:3e:2c:2c:88:
         b0:6b:20:d8:91:88:84:c5:98:b2:05:d1:cc:b9:15:e2:77:82:
         52:79:06:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:31 2026 by rpki-client