Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft
File:                     694D566B900CA748266EF03C5A70F9F846AC9E9D.mft (raw, json)
Hash identifier:          BpifWjLf0AISImPS+95Cep1WjqzNuYdpNwy11UrXXyU=
Subject key identifier:   99:92:17:EC:8B:8E:97:FE:EE:59:C1:41:27:47:5A:EF:71:D8:C4:3F
Authority key identifier: 69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D
Certificate issuer:       /CN=694D566B900CA748266EF03C5A70F9F846AC9E9D
Certificate serial:       3B041890A0137C6E36CAD82F32ECFBEF4B75EC7E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft
Manifest number:          B9
Signing time:             Sat 26 Sep 2026 03:40:10 +0000
Manifest this update:     Sat 26 Sep 2026 03:35:10 +0000
Manifest next update:     Sun 27 Sep 2026 04:55:10 +0000
Files and hashes:         1: 3130332e3133312e3235322e302f32322d3234203d3e20313331363539.roa (hash: Ppc60+bUC3jHoIb/YKg+BjxMbGsU0hJNh7cule9AHd0=)
                          2: 694D566B900CA748266EF03C5A70F9F846AC9E9D.crl (hash: vbAreGGqfOspXAUo3kvDLjvGZPelD8g9GmcJpG3lGpA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.crl
                          rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:04:18:90:a0:13:7c:6e:36:ca:d8:2f:32:ec:fb:ef:4b:75:ec:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694D566B900CA748266EF03C5A70F9F846AC9E9D
        Validity
            Not Before: Sep 26 03:35:10 2026 GMT
            Not After : Sep 27 04:55:10 2026 GMT
        Subject: CN=999217EC8B8E97FEEE59C14127475AEF71D8C43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:a6:1d:c6:10:f0:ed:cb:99:66:d9:fc:e5:
                    30:fc:38:e2:9d:ae:4c:d8:4a:42:92:74:ca:00:fa:
                    e2:e5:aa:ad:92:2c:95:eb:16:b5:ed:45:bc:04:3a:
                    81:b5:18:99:94:21:fe:02:a9:1b:02:69:ae:98:cf:
                    4a:5f:a0:f3:05:55:79:fe:05:c0:1f:3c:65:7b:50:
                    41:dc:6f:a9:04:ad:2f:8a:07:23:3b:9f:28:0f:3a:
                    a7:30:6a:fd:85:17:9b:53:f5:6a:c6:76:83:0e:75:
                    b7:8e:08:4f:ab:af:ec:a0:1d:4e:82:b5:88:57:c7:
                    f8:7c:3c:85:47:2e:06:d7:40:6b:32:89:eb:1c:8d:
                    da:29:d6:31:9c:28:3b:aa:84:fb:19:b7:7b:9f:64:
                    30:bf:52:1c:73:c4:f2:cc:9f:95:60:ca:e7:c2:c3:
                    69:e9:41:93:68:5e:c1:b1:bb:40:ad:94:19:93:ed:
                    97:30:f1:7a:86:a2:36:06:74:d0:1a:30:b1:70:35:
                    bd:18:f8:89:94:45:c7:90:98:21:07:7d:30:9c:83:
                    b4:ad:85:6c:60:11:c6:90:c3:bb:3c:57:07:d4:ea:
                    8b:4e:d8:43:d9:b4:33:28:ad:93:c4:60:d5:f4:b6:
                    7b:ad:94:b0:4a:02:d7:9d:47:cd:f6:1b:0d:f5:79:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:17:EC:8B:8E:97:FE:EE:59:C1:41:27:47:5A:EF:71:D8:C4:3F
            X509v3 Authority Key Identifier:
                keyid:69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:00:7e:61:d8:23:7e:d0:cd:bf:2e:ec:40:f1:17:75:f7:
         ee:7b:c6:ae:75:25:63:43:d4:f9:fc:fb:5c:11:84:70:a0:b6:
         b3:26:01:47:50:7d:2f:8a:b0:90:1f:ee:4b:15:54:96:e0:9f:
         95:34:da:d5:f0:2c:ad:d2:4f:e8:a4:ac:a1:3a:b7:79:7c:02:
         66:ff:12:36:5a:a7:a8:58:01:58:0e:4c:98:29:c1:49:2c:d3:
         66:3e:bb:14:82:6c:10:98:f5:62:74:20:c3:c9:f3:1d:48:48:
         c3:f9:f9:bb:48:40:d7:4e:a3:19:0e:08:8e:5e:69:6f:3f:26:
         3e:f1:6d:19:7d:1b:c0:cb:78:3e:a4:0a:e4:56:e6:c0:26:3f:
         80:08:4a:23:6a:a2:8d:12:35:27:3b:c8:cc:fb:37:e1:50:ee:
         bc:63:60:fa:8d:20:55:5c:41:8c:7a:36:5e:a6:f4:2e:14:c6:
         0c:06:26:ba:28:10:96:82:22:0c:93:20:42:a4:b1:6c:08:a1:
         74:c7:bd:02:94:b5:29:4f:26:f3:b8:8a:38:ee:bd:dc:50:5c:
         b9:ff:cf:00:cf:0a:98:9e:17:96:0a:43:3c:c8:26:ee:01:69:
         70:0f:16:e3:28:ef:5e:e5:06:c2:06:59:59:a0:ff:ee:48:c7:
         dc:cf:54:2f
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUOwQYkKATfG42ytgvMuz770t17H4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0RDU2NkI5MDBDQTc0ODI2NkVGMDNDNUE3MEY5Rjg0
NkFDOUU5RDAeFw0yNjA5MjYwMzM1MTBaFw0yNjA5MjcwNDU1MTBaMDMxMTAvBgNV
BAMTKDk5OTIxN0VDOEI4RTk3RkVFRTU5QzE0MTI3NDc1QUVGNzFEOEM0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuaYdxhDw7cuZZtn85TD8OOKd
rkzYSkKSdMoA+uLlqq2SLJXrFrXtRbwEOoG1GJmUIf4CqRsCaa6Yz0pfoPMFVXn+
BcAfPGV7UEHcb6kErS+KByM7nygPOqcwav2FF5tT9WrGdoMOdbeOCE+rr+ygHU6C
tYhXx/h8PIVHLgbXQGsyiescjdop1jGcKDuqhPsZt3ufZDC/UhxzxPLMn5VgyufC
w2npQZNoXsGxu0CtlBmT7Zcw8XqGojYGdNAaMLFwNb0Y+ImURceQmCEHfTCcg7St
hWxgEcaQw7s8VwfU6otO2EPZtDMorZPEYNX0tnutlLBKAtedR832Gw31eX8/AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUmZIX7IuOl/7uWcFBJ0da73HYxD8wHwYDVR0j
BBgwFoAUaU1Wa5AMp0gmbvA8WnD5+Easnp0wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVURUFT
RS8wLzY5NEQ1NjZCOTAwQ0E3NDgyNjZFRjAzQzVBNzBGOUY4NDZBQzlFOUQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNjk0RDU2NkI5MDBDQTc0ODI2NkVGMDNDNUE3
MEY5Rjg0NkFDOUU5RC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FVEVBU0UvMC82OTRENTY2Qjkw
MENBNzQ4MjY2RUYwM0M1QTcwRjlGODQ2QUM5RTlELm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUAAfmHY
I37Qzb8u7EDxF3X37nvGrnUlY0PU+fz7XBGEcKC2syYBR1B9L4qwkB/uSxVUluCf
lTTa1fAsrdJP6KSsoTq3eXwCZv8SNlqnqFgBWA5MmCnBSSzTZj67FIJsEJj1YnQg
w8nzHUhIw/n5u0hA106jGQ4Ijl5pbz8mPvFtGX0bwMt4PqQK5FbmwCY/gAhKI2qi
jRI1JzvIzPs34VDuvGNg+o0gVVxBjHo2Xqb0LhTGDAYmuigQloIiDJMgQqSxbAih
dMe9ApS1KU8m87iKOO693FBcuf/PAM8KmJ4XlgpDPMgm7gFpcA8W4yjvXuUGwgZZ
WaD/7kjH3M9ULw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:43:06 2026 by rpki-client