Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File:                     E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier:          dPCRZ5Xyeo8jUKzB53PCOJ2wpDrcSVY9fGW47NybxL0=
Subject key identifier:   5C:C0:B1:D0:0D:81:2C:C5:83:08:7D:B2:12:1D:DB:95:0F:61:0E:3D
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer:       /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial:       63B64110E949A9006ABE0E65B5F04B4D7055394E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number:          BB
Signing time:             Thu 24 Sep 2026 05:32:39 +0000
Manifest this update:     Thu 24 Sep 2026 05:27:39 +0000
Manifest next update:     Fri 25 Sep 2026 05:53:39 +0000
Files and hashes:         1: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
                          2: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: IHHHbBNQ9N0W8/yw8yiO118XcwKstNueZ0WJyG2BsSk=)
                          3: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b6:41:10:e9:49:a9:00:6a:be:0e:65:b5:f0:4b:4d:70:55:39:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
        Validity
            Not Before: Sep 24 05:27:39 2026 GMT
            Not After : Sep 25 05:53:39 2026 GMT
        Subject: CN=5CC0B1D00D812CC583087DB2121DDB950F610E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:40:66:68:7e:f0:4a:9a:15:09:11:fc:d9:
                    9c:d3:05:83:5c:9a:6e:74:f0:0b:56:54:d8:f7:f0:
                    ff:14:01:c5:90:4f:2e:75:48:6d:76:7a:10:86:67:
                    1e:cc:ea:dc:03:42:20:f6:41:92:32:a9:0b:dd:58:
                    33:d9:d6:ac:4d:d9:b0:d6:fd:03:29:28:15:ab:c5:
                    42:d2:ec:e8:02:7d:f3:b9:69:2b:4b:4d:c8:96:e4:
                    24:55:74:12:26:25:6c:89:a9:07:f0:d1:f4:11:aa:
                    fd:25:64:7b:6c:fa:50:9f:9a:c6:5a:a9:17:ce:48:
                    6d:85:34:94:44:6a:a9:95:b1:0c:c3:7e:80:08:85:
                    94:99:e4:5e:04:2e:17:9a:27:94:a8:d6:cd:0f:a8:
                    a4:d5:34:e6:0f:de:bb:a1:d8:31:d0:7d:78:4d:09:
                    14:f1:e7:18:83:07:5a:3f:40:59:7a:2c:5b:82:09:
                    11:e2:aa:ee:7d:24:ad:b2:63:f6:f6:21:28:7d:11:
                    4e:46:c0:16:09:d3:62:fd:da:40:1d:6f:94:08:df:
                    73:f3:97:07:bd:81:38:b4:65:6f:dd:f1:b9:14:36:
                    a4:95:b3:c6:f6:97:3c:dc:64:1d:03:68:10:19:2c:
                    76:07:54:20:eb:d5:d0:45:ca:27:1c:91:24:91:3a:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:B1:D0:0D:81:2C:C5:83:08:7D:B2:12:1D:DB:95:0F:61:0E:3D
            X509v3 Authority Key Identifier:
                keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:98:98:b4:05:c7:cb:68:ad:38:a1:10:2d:58:49:2f:f8:
         a8:20:55:84:f4:e3:25:ba:be:c6:86:05:b6:78:ff:29:11:06:
         cf:8e:5a:56:8b:0b:45:cb:4f:55:a3:c9:3d:1c:9d:c1:a0:33:
         3b:ec:72:bd:03:03:ae:82:8c:b0:04:89:ba:c0:9d:7a:df:ab:
         9e:25:e6:fb:93:a1:a8:6a:71:a4:9c:5f:f4:64:35:3a:c2:32:
         bb:99:5e:24:1c:69:ea:2c:59:27:6f:c3:05:20:f3:a4:58:56:
         dd:d1:46:cc:81:36:8f:17:d1:9c:74:56:f8:d4:81:ba:b4:52:
         25:8e:fb:65:75:aa:a5:fa:af:98:bd:2d:39:67:dd:35:91:c3:
         af:ad:f2:4e:df:f1:ed:e9:2a:54:ef:34:cd:4d:62:ca:10:5c:
         29:8f:9c:8a:e4:46:22:04:f1:71:ec:b9:f4:c7:85:f9:6d:01:
         8e:6d:88:ad:4d:58:0c:39:d1:73:0a:e5:a5:83:b9:d9:0e:d2:
         eb:c7:4d:86:1f:3a:88:6f:cc:14:e2:02:06:ab:02:79:87:ac:
         31:db:71:f8:c4:83:2e:5b:28:1c:5f:fd:29:52:03:ec:23:59:
         c7:9d:49:4f:2e:37:55:52:c1:46:b5:5f:f8:4b:13:07:52:80:
         f5:79:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:41:32 2026 by rpki-client