Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
File:                     4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft (raw, json)
Hash identifier:          Pu4787dpigOmzZXY+nz+MiOnkLu20tYczPd+Qco5AHI=
Subject key identifier:   74:99:E1:EE:C7:F9:D8:5D:95:CD:49:48:83:11:FA:A4:27:8C:FD:DE
Authority key identifier: 4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A
Certificate issuer:       /CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
Certificate serial:       3FD8618B4352A94B642C96E0D11396B122B08578
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
Manifest number:          B5
Signing time:             Tue 22 Sep 2026 16:38:01 +0000
Manifest this update:     Tue 22 Sep 2026 16:33:01 +0000
Manifest next update:     Wed 23 Sep 2026 17:26:01 +0000
Files and hashes:         1: 3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa (hash: LmwwUpuv8Sdk8tENdd/b/+ib5Yq3yrtpL7doLISV6t0=)
                          2: 4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl (hash: O85UgcAwi+gkDJS886YPM8O7kmTo1Qmb/0gxloLOt48=)
                          3: 3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa (hash: TV/kkKGDNzLBj39V9Lo72jKALKU5eFiuvbJ+dNiiqVM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 17:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d8:61:8b:43:52:a9:4b:64:2c:96:e0:d1:13:96:b1:22:b0:85:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
        Validity
            Not Before: Sep 22 16:33:01 2026 GMT
            Not After : Sep 23 17:26:01 2026 GMT
        Subject: CN=7499E1EEC7F9D85D95CD49488311FAA4278CFDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:ff:56:6b:b4:37:4d:d2:9d:e2:d7:95:a2:
                    1b:78:fb:f2:e2:9d:78:92:d3:29:1f:ef:3e:40:09:
                    ed:9b:7a:53:44:81:75:4d:64:fc:98:8d:47:41:06:
                    21:55:5e:3a:4a:82:d3:f1:e9:f8:3b:27:97:5d:82:
                    b8:25:6f:a9:ab:bf:ff:73:bb:d9:56:92:e8:bb:51:
                    9d:79:a9:cf:41:e7:63:42:20:4f:4b:1b:92:43:a0:
                    a3:cf:50:bb:80:60:2a:a8:81:41:84:0f:4f:8f:cf:
                    a8:86:3d:d3:ed:2e:72:af:88:14:7c:57:2d:15:14:
                    1c:fb:1e:f2:0d:3f:bd:8a:7e:f5:cc:94:f4:f3:cf:
                    13:f0:33:92:13:60:98:5b:c0:88:05:5c:a8:44:ab:
                    4a:4a:fe:1f:40:fa:b4:b0:13:08:12:f2:22:46:aa:
                    41:61:e2:f5:74:cf:e8:7e:1e:3e:3a:91:47:fd:91:
                    06:b6:45:f4:44:92:ce:9c:72:dd:53:11:8b:30:23:
                    c5:e9:31:ba:aa:bf:db:2e:b7:e8:af:bf:f3:75:53:
                    62:78:39:0d:fe:8d:64:ae:e6:7a:e4:ac:fc:b9:b6:
                    ab:ff:78:bd:33:b4:43:29:c4:21:ca:68:53:28:46:
                    98:4f:ad:4e:0d:b4:49:6e:f8:24:fd:25:79:7c:e0:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:E1:EE:C7:F9:D8:5D:95:CD:49:48:83:11:FA:A4:27:8C:FD:DE
            X509v3 Authority Key Identifier:
                keyid:4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:71:ae:75:e7:5b:42:de:a6:80:72:a1:19:2f:de:b6:18:
         f6:d8:b2:26:23:55:c2:42:05:f9:b3:0e:e1:03:79:7d:dd:5f:
         ba:98:86:11:35:83:b5:bb:9e:7d:cf:28:c2:38:2f:e2:40:79:
         d1:d2:6f:f1:c0:38:80:7a:c1:e9:78:bb:a4:be:62:6f:5b:bf:
         36:08:3f:00:33:cb:65:fa:e6:21:93:4e:2e:68:13:94:3e:df:
         3d:14:7e:26:62:2c:0a:b4:c9:dd:43:3d:f1:0e:41:8e:03:b2:
         29:64:b6:31:13:fc:1c:1b:b0:1f:a1:0b:fd:81:c1:db:f3:c4:
         99:21:76:ff:36:2c:60:aa:7f:54:77:a8:cb:db:4e:f8:4c:68:
         8b:a3:20:95:b5:b8:42:df:a6:b9:a7:6f:e7:59:a0:68:0b:e2:
         ca:c7:99:3b:6c:d5:1d:9f:fa:d5:f5:0e:59:3e:b9:77:db:4a:
         7d:39:b9:ef:c6:09:1c:4d:2b:66:32:14:a5:57:d8:9b:2c:a8:
         00:aa:1a:34:50:94:92:82:17:0d:9d:a2:b7:a7:ea:2b:b3:b6:
         ad:92:4e:a3:8a:13:57:b1:70:c1:63:f6:b7:27:68:e8:96:df:
         c6:42:27:33:51:f7:31:90:37:d6:52:a7:91:69:6d:17:52:82:
         c9:1c:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:54:25 2026 by rpki-client