Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
File:                     E5067314CFC65098386A97E8110F787E073CA51E.mft (raw, json)
Hash identifier:          iMZaLBcHeephXJMMWl0FczRz4yth6WSdBWIv3gNpQeI=
Subject key identifier:   A9:CE:7B:E2:43:AB:A1:FB:07:BD:55:2B:02:C1:5E:81:D0:52:FF:31
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       1B6B72C77BBB7EB877B9FF7BC1775998B2511ED8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
Manifest number:          BE
Signing time:             Fri 25 Sep 2026 01:35:31 +0000
Manifest this update:     Fri 25 Sep 2026 01:30:31 +0000
Manifest next update:     Sat 26 Sep 2026 03:44:31 +0000
Files and hashes:         1: 3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa (hash: uSpjdhqYU2AVviwfm2aaPmn4kfZ1rmuQUL2shYvXM4Q=)
                          2: E5067314CFC65098386A97E8110F787E073CA51E.crl (hash: XbV60R3CVSVXxcWbMM66fIgxD4p+b0rjtvKjS4cNEMs=)
                          3: 3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa (hash: gzX0arRtCBcka2v1mOO4ayrFbmUFgs9F0NtG28kYri0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6b:72:c7:7b:bb:7e:b8:77:b9:ff:7b:c1:77:59:98:b2:51:1e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Sep 25 01:30:31 2026 GMT
            Not After : Sep 26 03:44:31 2026 GMT
        Subject: CN=A9CE7BE243ABA1FB07BD552B02C15E81D052FF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:5c:f5:a3:43:d2:d0:28:d1:e8:39:a7:96:
                    b2:b8:5d:f5:22:ef:1c:3d:cf:a4:89:9c:b3:d1:9a:
                    f2:29:b1:a7:20:9a:25:37:90:9a:e0:a5:44:2b:64:
                    12:f1:51:59:79:5a:41:28:1e:01:8c:5e:a4:9c:78:
                    24:4e:e8:4a:b6:96:0b:30:b1:a2:ef:10:3a:6f:ae:
                    7e:b5:c0:c7:56:41:0b:16:d9:c2:ad:13:f3:ff:bd:
                    d6:61:99:35:0e:36:f0:16:42:51:c8:50:8f:85:5e:
                    3a:a8:f7:cb:a4:60:bd:38:06:0a:56:04:58:a9:11:
                    74:dc:74:92:34:68:73:db:54:b1:d8:8c:cc:b3:df:
                    ee:df:45:c4:f6:18:96:2c:a3:53:59:47:43:eb:30:
                    46:4a:9d:c0:98:fc:02:06:fe:c6:2b:72:8a:f6:2a:
                    9a:73:97:95:e8:9c:af:cd:82:99:e4:17:d0:44:80:
                    ce:fe:70:b0:b8:03:3c:04:2a:6a:8f:27:53:ff:53:
                    48:d7:f4:72:ba:4b:af:a4:fe:45:0a:be:2e:61:7d:
                    fb:d1:6b:7c:b7:35:53:a9:c8:d7:68:73:b6:6e:38:
                    49:f6:bb:39:ae:91:76:43:19:35:19:ba:17:1a:0a:
                    7e:97:43:21:82:18:dd:60:10:f1:40:fb:6a:18:e5:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:7B:E2:43:AB:A1:FB:07:BD:55:2B:02:C1:5E:81:D0:52:FF:31
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:38:2a:78:05:40:b4:d0:ca:5b:1c:05:ef:30:64:3a:1b:76:
         b0:13:e8:89:88:9e:6b:e7:d3:1e:0c:f7:0d:d6:33:89:be:02:
         b5:18:b5:79:35:a0:5f:89:5b:c8:6a:96:62:b2:59:34:46:32:
         13:5a:68:43:10:6d:83:82:a6:96:eb:af:13:70:3d:5f:da:bd:
         ed:94:4e:78:69:fa:31:a2:5d:8e:89:9f:b2:15:a9:39:5c:53:
         6b:ee:16:0d:a2:7d:cc:93:77:1f:ab:90:03:54:4b:95:cd:91:
         82:b2:f3:d2:17:b5:96:6a:f1:cf:f6:c8:e8:73:0e:73:d4:25:
         92:e2:88:51:80:f9:5c:f9:a9:5b:c1:13:9f:b1:6b:6a:e6:a0:
         99:e5:d9:e5:b0:df:9f:19:4d:e5:86:fc:35:9c:01:46:ad:01:
         00:0d:f9:eb:9e:ed:92:5f:18:9f:2b:68:69:52:bd:de:cd:c4:
         f6:3e:98:1a:22:2b:3d:a9:7b:fd:ff:a4:17:a2:84:10:90:8a:
         b2:d3:34:f9:b7:6c:3d:02:74:cf:dc:31:30:63:1a:e4:6f:04:
         43:69:30:8a:ef:84:e2:37:a5:98:a1:de:7d:fd:63:c8:53:91:
         21:b2:a5:66:6a:21:b7:dc:9b:e1:94:3e:40:29:90:d8:67:16:
         d8:7c:77:79
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUG2tyx3u7frh3uf97wXdZmLJRHtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0Uw
NzNDQTUxRTAeFw0yNjA5MjUwMTMwMzFaFw0yNjA5MjYwMzQ0MzFaMDMxMTAvBgNV
BAMTKEE5Q0U3QkUyNDNBQkExRkIwN0JENTUyQjAyQzE1RTgxRDA1MkZGMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvFz1o0PS0CjR6DmnlrK4XfUi
7xw9z6SJnLPRmvIpsacgmiU3kJrgpUQrZBLxUVl5WkEoHgGMXqSceCRO6Eq2lgsw
saLvEDpvrn61wMdWQQsW2cKtE/P/vdZhmTUONvAWQlHIUI+FXjqo98ukYL04BgpW
BFipEXTcdJI0aHPbVLHYjMyz3+7fRcT2GJYso1NZR0PrMEZKncCY/AIG/sYrcor2
Kppzl5XonK/NgpnkF9BEgM7+cLC4AzwEKmqPJ1P/U0jX9HK6S6+k/kUKvi5hffvR
a3y3NVOpyNdoc7ZuOEn2uzmukXZDGTUZuhcaCn6XQyGCGN1gEPFA+2oY5WlxAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUqc574kOrofsHvVUrAsFegdBS/zEwHwYDVR0j
BBgwFoAU5QZzFM/GUJg4apfoEQ94fgc8pR4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VS
LzAvRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0UwNzNDQTUxRS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FNTA2NzMxNENGQzY1MDk4Mzg2QTk3RTgxMTBG
Nzg3RTA3M0NBNTFFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VSLzAvRTUwNjczMTRDRkM2
NTA5ODM4NkE5N0U4MTEwRjc4N0UwNzNDQTUxRS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADY4KngFQLTQ
ylscBe8wZDobdrAT6ImInmvn0x4M9w3WM4m+ArUYtXk1oF+JW8hqlmKyWTRGMhNa
aEMQbYOCppbrrxNwPV/ave2UTnhp+jGiXY6Jn7IVqTlcU2vuFg2ifcyTdx+rkANU
S5XNkYKy89IXtZZq8c/2yOhzDnPUJZLiiFGA+Vz5qVvBE5+xa2rmoJnl2eWw358Z
TeWG/DWcAUatAQAN+eue7ZJfGJ8raGlSvd7NxPY+mBoiKz2pe/3/pBeihBCQirLT
NPm3bD0CdM/cMTBjGuRvBENpMIrvhOI3pZih3n39Y8hTkSGypWZqIbfcm+GUPkAp
kNhnFth8d3k=
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:12 2026 by rpki-client