Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
File:                     1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft (raw, json)
Hash identifier:          U4OxLtQjig0490VYVqmzJFzVY3PIjdJhsW3bPBAveDQ=
Subject key identifier:   37:30:CF:F4:32:44:95:F6:7C:ED:4A:D9:8A:E2:87:A2:73:CC:40:59
Authority key identifier: 15:82:E2:94:18:E8:AD:21:D7:B5:39:F9:C2:F0:A5:C7:58:E5:35:51
Certificate issuer:       /CN=1582E29418E8AD21D7B539F9C2F0A5C758E53551
Certificate serial:       15C71DA3C03A3969DDDA2ACD7FBDE18C505B85E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
Manifest number:          B8
Signing time:             Sat 26 Sep 2026 07:10:34 +0000
Manifest this update:     Sat 26 Sep 2026 07:05:34 +0000
Manifest next update:     Sun 27 Sep 2026 10:41:34 +0000
Files and hashes:         1: 1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl (hash: tqxhRSDW/fL+Hwg9OSJf5oU1KcUZao3pXWHqoE4cd3s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl
                          rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 09:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:1d:a3:c0:3a:39:69:dd:da:2a:cd:7f:bd:e1:8c:50:5b:85:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582E29418E8AD21D7B539F9C2F0A5C758E53551
        Validity
            Not Before: Sep 26 07:05:34 2026 GMT
            Not After : Sep 27 10:41:34 2026 GMT
        Subject: CN=3730CFF4324495F67CED4AD98AE287A273CC4059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:3e:2e:84:89:c0:0f:87:a4:5b:b7:52:9c:
                    3e:ad:2d:dc:c7:5c:d4:76:b2:42:74:e4:60:fe:31:
                    77:41:c3:88:7a:e3:21:08:39:69:9d:32:22:7d:e8:
                    2c:12:e8:e8:4c:5d:3f:69:f0:7e:91:7b:2b:77:22:
                    c2:f2:17:62:4d:11:11:3a:6c:3a:3a:ae:0c:1e:73:
                    5f:ca:79:80:9e:a9:a9:98:d9:ad:a4:c3:82:be:b6:
                    c1:75:d6:d3:45:63:ff:03:ed:18:a9:78:43:ef:c2:
                    34:f9:bd:14:61:ba:f6:ac:a1:c2:91:45:db:e3:29:
                    3a:7d:b0:25:51:85:7f:a5:a9:fe:be:d3:ef:c4:d2:
                    98:09:4d:97:25:a4:e3:ef:4c:35:9b:87:d3:dc:ec:
                    ad:12:a5:9b:7e:72:cf:20:f6:16:6d:22:a2:d9:e3:
                    b8:b5:15:13:a2:7a:c8:6c:ed:ee:de:49:64:55:d5:
                    ad:cc:58:98:37:e0:b0:af:e9:66:e2:08:63:5d:e4:
                    9b:06:1b:65:3e:b3:7d:07:2b:4f:23:2f:b1:00:16:
                    b0:47:7a:18:13:12:ae:ea:9a:ea:ad:d0:f1:43:c2:
                    2d:af:33:78:5b:ba:df:63:ac:4b:da:6e:56:04:b0:
                    ab:c9:79:6b:d8:1d:4d:2a:d6:0e:c7:84:22:1d:d3:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:30:CF:F4:32:44:95:F6:7C:ED:4A:D9:8A:E2:87:A2:73:CC:40:59
            X509v3 Authority Key Identifier:
                keyid:15:82:E2:94:18:E8:AD:21:D7:B5:39:F9:C2:F0:A5:C7:58:E5:35:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cf:43:ff:c5:72:40:65:99:bb:79:ba:29:b7:28:91:9e:f5:
         0c:f6:54:c3:8c:c0:94:67:36:58:41:b2:79:4e:0b:9f:57:cf:
         4f:64:a8:86:58:a0:4f:99:cf:07:ee:66:3c:64:e1:b9:6c:0d:
         c6:70:e1:1b:86:9a:42:7f:16:19:e4:66:ba:bf:4a:67:3a:3d:
         df:af:f8:48:42:79:c4:26:2c:22:e8:e7:10:86:97:7f:e0:f1:
         95:ef:34:3b:56:6b:29:1a:9f:b3:97:7c:43:99:57:a1:78:fd:
         c2:6b:30:84:72:2a:f3:d6:d8:00:01:27:e1:a8:1d:27:65:60:
         9d:c0:1d:bd:d1:88:14:be:c8:5b:58:c7:e6:38:2b:99:21:74:
         e1:47:12:9e:db:86:38:ac:24:62:43:56:79:0d:fb:ba:e7:11:
         f4:66:e8:af:ce:67:e4:b8:b5:ee:d2:69:4a:5b:7c:7f:73:6d:
         a7:4a:2a:9b:53:f0:b7:77:da:ff:98:2b:a8:26:e5:fe:40:9b:
         8d:96:d2:2e:61:15:96:a8:7a:06:d2:ec:af:c5:61:5a:a4:75:
         d0:74:cd:76:14:30:ef:73:39:88:95:19:5a:9b:7b:97:b1:91:
         29:0f:a1:af:e2:41:8d:85:cc:60:0f:ea:a3:8d:9d:12:98:55:
         c2:53:3a:e8
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUFccdo8A6OWnd2irNf73hjFBbhekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU4MkUyOTQxOEU4QUQyMUQ3QjUzOUY5QzJGMEE1Qzc1
OEU1MzU1MTAeFw0yNjA5MjYwNzA1MzRaFw0yNjA5MjcxMDQxMzRaMDMxMTAvBgNV
BAMTKDM3MzBDRkY0MzI0NDk1RjY3Q0VENEFEOThBRTI4N0EyNzNDQzQwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOj4uhInAD4ekW7dSnD6tLdzH
XNR2skJ05GD+MXdBw4h64yEIOWmdMiJ96CwS6OhMXT9p8H6Reyt3IsLyF2JNERE6
bDo6rgwec1/KeYCeqamY2a2kw4K+tsF11tNFY/8D7RipeEPvwjT5vRRhuvasocKR
RdvjKTp9sCVRhX+lqf6+0+/E0pgJTZclpOPvTDWbh9Pc7K0SpZt+cs8g9hZtIqLZ
47i1FROieshs7e7eSWRV1a3MWJg34LCv6WbiCGNd5JsGG2U+s30HK08jL7EAFrBH
ehgTEq7qmuqt0PFDwi2vM3hbut9jrEvablYEsKvJeWvYHU0q1g7HhCId0xoDAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUNzDP9DJElfZ87UrZiuKHonPMQFkwHwYDVR0j
BBgwFoAUFYLilBjorSHXtTn5wvClx1jlNVEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktDQVRW
LzAvMTU4MkUyOTQxOEU4QUQyMUQ3QjUzOUY5QzJGMEE1Qzc1OEU1MzU1MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTgyRTI5NDE4RThBRDIxRDdCNTM5RjlDMkYw
QTVDNzU4RTUzNTUxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktDQVRWLzAvMTU4MkUyOTQxOEU4
QUQyMUQ3QjUzOUY5QzJGMEE1Qzc1OEU1MzU1MS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD7PQ//FckBl
mbt5uim3KJGe9Qz2VMOMwJRnNlhBsnlOC59Xz09kqIZYoE+ZzwfuZjxk4blsDcZw
4RuGmkJ/FhnkZrq/Smc6Pd+v+EhCecQmLCLo5xCGl3/g8ZXvNDtWaykan7OXfEOZ
V6F4/cJrMIRyKvPW2AABJ+GoHSdlYJ3AHb3RiBS+yFtYx+Y4K5khdOFHEp7bhjis
JGJDVnkN+7rnEfRm6K/OZ+S4te7SaUpbfH9zbadKKptT8Ld32v+YK6gm5f5Am42W
0i5hFZaoegbS7K/FYVqkddB0zXYUMO9zOYiVGVqbe5exkSkPoa/iQY2FzGAP6qON
nRKYVcJTOug=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:00:02 2026 by rpki-client