Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File:                     F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier:          pXQp3Rei9PgDDqQUOCE2o1jC5OVewXVhqmQoVQl+lFQ=
Subject key identifier:   5A:4C:1B:77:4F:4B:D0:7D:EB:08:23:5E:8C:82:3D:12:B2:15:43:60
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer:       /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial:       4FA9B18C53EA98F46195E59087A3F1A37E35EC0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number:          BC
Signing time:             Fri 25 Sep 2026 17:43:45 +0000
Manifest this update:     Fri 25 Sep 2026 17:38:45 +0000
Manifest next update:     Sat 26 Sep 2026 18:31:45 +0000
Files and hashes:         1: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
                          2: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
                          3: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
                          4: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
                          5: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: 1c+Wvee13ypXJwlE4bC0xzld1JxjzG9C7DYrFWOwG00=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
                          rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a9:b1:8c:53:ea:98:f4:61:95:e5:90:87:a3:f1:a3:7e:35:ec:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
        Validity
            Not Before: Sep 25 17:38:45 2026 GMT
            Not After : Sep 26 18:31:45 2026 GMT
        Subject: CN=5A4C1B774F4BD07DEB08235E8C823D12B2154360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:f1:85:62:44:0e:ab:63:47:e3:ac:e1:40:
                    f9:1d:1a:1e:ab:6c:44:1a:33:71:bb:8b:8d:6f:e4:
                    56:3f:c7:20:ae:05:fe:7e:dc:7f:f1:a6:45:09:a6:
                    fa:5f:44:84:39:eb:79:9c:06:f5:7a:15:48:43:ee:
                    ec:a6:9f:93:e5:bc:86:00:bd:7c:db:6c:12:1b:a7:
                    ac:32:0f:37:35:c6:ba:44:e0:04:99:a9:07:3f:a2:
                    fd:31:5a:7e:70:5c:c3:eb:ad:c9:85:76:83:83:0c:
                    cd:8a:fe:cc:8c:e7:e5:40:40:b4:db:84:09:39:bb:
                    14:a3:6f:d8:d7:c5:f2:10:a3:cf:00:5f:a9:c9:c9:
                    12:59:2c:86:5d:3d:8a:7f:6b:7e:61:38:5d:19:6c:
                    2e:bc:94:9d:81:d6:e1:ce:5a:73:62:bc:0c:1e:4c:
                    f8:89:38:2e:6e:4d:c6:b9:21:af:fd:e3:ea:cb:9f:
                    08:69:cd:2d:fa:d4:10:b2:d4:06:0b:66:63:64:ef:
                    c7:6d:3a:c0:06:61:1a:0f:8d:1a:42:11:fe:95:b4:
                    7b:10:79:fb:31:37:fa:9c:2e:77:55:4f:97:05:af:
                    76:24:98:15:95:e7:90:af:75:ec:a7:6e:3f:82:d8:
                    7e:56:eb:39:7c:88:d3:0e:0b:e4:ad:db:43:80:7d:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:1B:77:4F:4B:D0:7D:EB:08:23:5E:8C:82:3D:12:B2:15:43:60
            X509v3 Authority Key Identifier:
                keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:9c:c5:e5:7a:e7:d7:81:33:5b:39:f1:d4:21:15:66:33:
         c6:13:a8:2d:b1:0b:60:e1:1c:59:a4:f2:29:a1:2d:01:e6:eb:
         c6:86:ad:ee:db:59:df:ed:8c:5b:08:9d:80:6d:72:54:41:d7:
         40:52:5e:c8:61:ff:46:eb:5c:d8:b8:dd:eb:5c:34:e7:f0:67:
         30:d5:24:f8:e9:af:36:ef:f4:4b:52:67:49:a2:1b:88:b9:db:
         83:95:75:fe:d8:34:32:1b:ad:4d:d4:a0:9a:32:9f:d5:19:58:
         7b:c8:c0:a1:5c:19:16:51:34:3d:8d:fd:6d:84:a3:ec:42:a2:
         52:1b:84:8d:11:8f:c9:37:c3:b9:bf:c3:01:6e:fe:68:75:fa:
         ca:9a:ec:25:8b:50:87:76:7a:44:52:75:93:59:0b:b7:33:20:
         53:ee:7d:a0:be:b6:9c:62:ba:5a:24:2e:b0:1f:53:eb:ce:d5:
         25:5f:59:06:e6:53:46:2e:ea:a7:b0:20:cd:52:0a:36:69:4f:
         f6:76:c2:17:ce:99:7a:04:92:33:83:b5:1b:f0:38:39:36:0c:
         d3:69:34:f7:ae:6d:b1:2e:85:11:6e:df:11:47:b6:85:39:9e:
         2d:bd:25:ef:8c:07:a8:9a:e7:d2:6f:44:d3:5d:92:fb:ec:32:
         d5:ef:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:55:49 2026 by rpki-client