Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File:                     034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier:          lAdRAcT81kmffvaf5Mk8r0tQ0v61TwzW2GrOOK0O694=
Subject key identifier:   D7:F2:7B:76:28:96:6F:CC:AC:6B:39:5F:6C:D8:F8:9C:69:33:74:C6
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer:       /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial:       4A51CC907B485A76E47C4406B78D996B50145F41
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number:          B6
Signing time:             Wed 23 Sep 2026 19:02:02 +0000
Manifest this update:     Wed 23 Sep 2026 18:57:02 +0000
Manifest next update:     Thu 24 Sep 2026 21:19:02 +0000
Files and hashes:         1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: nL1q/Na9IGqwSE7n5QlgQ6Isx8cH4uVedFcfIer41PE=)
                          2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
                          rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 21:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:cc:90:7b:48:5a:76:e4:7c:44:06:b7:8d:99:6b:50:14:5f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
        Validity
            Not Before: Sep 23 18:57:02 2026 GMT
            Not After : Sep 24 21:19:02 2026 GMT
        Subject: CN=D7F27B7628966FCCAC6B395F6CD8F89C693374C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:cd:07:6e:b5:54:e6:dd:b1:e5:c9:de:13:
                    ea:ab:e8:04:85:f4:96:62:98:73:6e:f7:f8:6e:00:
                    da:c6:39:b0:5e:75:61:da:03:0d:b0:80:8a:21:92:
                    45:6b:1b:0c:70:3b:1e:fd:6e:7b:42:a7:59:b1:a0:
                    49:90:ec:2c:a0:9b:0e:fa:5d:a1:ae:59:70:f3:f2:
                    d5:53:91:62:ff:42:f7:20:0a:c6:09:97:89:65:53:
                    02:51:be:13:b5:3c:ef:9c:14:7b:17:22:31:97:6b:
                    ef:a2:1f:8c:56:02:29:c6:e5:37:df:c3:30:fa:c2:
                    73:3e:ba:16:4e:1a:5b:13:f4:a0:5a:16:0b:5f:bb:
                    ff:84:00:d7:9c:f9:36:13:35:cf:e7:dd:13:68:b1:
                    c2:e4:06:49:2e:a8:85:15:00:4d:61:46:7a:e0:81:
                    d7:7a:46:32:64:b9:17:06:28:8d:4d:31:98:b5:b1:
                    11:14:36:24:79:87:27:f4:01:f3:bb:e2:e8:35:3d:
                    b0:cb:bb:53:e7:08:5c:df:fe:ac:3d:f1:cc:d1:81:
                    2d:83:dd:9b:9f:35:71:3d:3d:27:47:df:46:09:a8:
                    f1:3d:d0:09:e1:30:cf:ce:79:60:4e:a1:65:9e:46:
                    fd:51:44:13:14:72:ad:3b:3e:55:be:f2:ef:47:c8:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:7B:76:28:96:6F:CC:AC:6B:39:5F:6C:D8:F8:9C:69:33:74:C6
            X509v3 Authority Key Identifier:
                keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:09:c2:36:db:99:03:67:a2:73:7c:d5:1e:29:d5:2a:2c:19:
         16:10:85:3f:d3:95:bc:ff:bf:ce:08:a3:01:1c:78:8a:29:69:
         25:e5:88:57:d4:37:4b:0a:70:4e:73:22:74:7a:77:a3:2b:b7:
         54:5a:6c:b1:d8:c0:95:71:b3:38:83:68:fe:ef:ba:89:2c:6a:
         91:87:7d:3a:46:4d:70:70:ce:d2:22:18:ed:cf:9e:aa:ce:7e:
         bd:4b:f9:0c:71:49:7a:2b:d9:86:ee:8f:af:16:7a:10:b8:21:
         e7:5c:1c:57:3d:6f:b6:92:38:23:26:55:7c:ee:58:b7:43:9c:
         c3:0d:bc:f8:ff:98:b5:3c:87:a5:60:56:2c:0e:d6:29:3f:10:
         7b:a8:aa:cb:90:c5:34:c7:43:a1:56:c3:49:6b:0c:71:97:b3:
         a6:c6:c9:c3:e1:29:a5:e5:e5:41:a8:74:c6:f9:00:90:36:0d:
         3f:fb:8a:2c:e2:e7:52:6c:17:e1:ff:f9:2a:51:e2:87:7e:d0:
         98:d2:15:1d:90:0c:42:85:4c:88:50:69:4f:71:2e:82:3f:42:
         fb:96:31:13:91:50:00:43:3e:30:ac:39:66:fc:b1:8c:8a:54:
         c3:77:5e:91:33:83:69:3b:2e:13:26:60:30:68:65:21:bd:e0:
         ee:a0:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:05:04 2026 by rpki-client