Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File:                     9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier:          4MZcDr/q8T+sbSRsXmtlpvmffVcuxiKfIjOIuwYfZkk=
Subject key identifier:   7F:10:7E:12:A2:3A:75:67:B2:F6:BA:E8:C8:92:A1:2E:6D:55:FA:35
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer:       /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial:       76E4336F192DBB80888A0BDA236F747CDCC91E1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 12:22:59 +0000
Manifest this update:     Fri 25 Sep 2026 12:17:59 +0000
Manifest next update:     Sat 26 Sep 2026 15:06:59 +0000
Files and hashes:         1: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
                          2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
                          3: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: MXpxkGEXUD5WZ92dWPVKSRC3Qw/SwTmHlUCB5ctpfGQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
                          rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e4:33:6f:19:2d:bb:80:88:8a:0b:da:23:6f:74:7c:dc:c9:1e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
        Validity
            Not Before: Sep 25 12:17:59 2026 GMT
            Not After : Sep 26 15:06:59 2026 GMT
        Subject: CN=7F107E12A23A7567B2F6BAE8C892A12E6D55FA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:cd:6b:9e:7d:13:a9:83:da:f7:e1:d3:04:
                    a7:a0:54:62:19:9c:9e:68:66:b9:b2:d9:78:8e:c6:
                    01:41:d6:8f:0d:5a:43:a8:25:c2:c4:ae:13:83:29:
                    57:f9:ab:0e:c8:4c:e0:a6:5c:04:95:77:62:37:2f:
                    1e:18:f0:fb:4c:8b:38:df:85:b4:8a:6e:8b:a1:3b:
                    da:d9:f8:66:8f:c7:23:be:c6:0f:84:c5:a3:9f:90:
                    11:c6:a2:2a:d3:e3:4d:bf:d3:15:58:c6:6b:e5:2b:
                    4b:cd:5b:5a:5f:b4:46:b6:2d:ba:03:38:1a:1b:25:
                    63:aa:93:5b:92:b4:68:7a:37:16:c5:b9:8b:f3:15:
                    00:ec:51:f2:92:65:8f:1e:db:12:d9:33:4a:55:97:
                    5a:23:1a:40:89:00:ef:a2:58:ad:3f:7d:f0:07:a2:
                    42:6f:68:e0:48:f1:e6:9c:4f:7e:8d:af:94:20:11:
                    66:26:c7:13:cb:5e:a7:43:6c:50:fe:de:85:9a:08:
                    8f:77:b7:75:e5:ed:46:bb:d0:86:7d:fd:69:32:7c:
                    04:f8:43:19:c8:aa:bb:fb:4e:92:60:83:cc:4e:73:
                    10:fc:52:8d:d6:89:c3:a9:bc:01:89:3a:64:c1:7d:
                    ff:6d:44:a4:52:a9:3c:b4:8b:06:17:21:46:d4:d4:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:10:7E:12:A2:3A:75:67:B2:F6:BA:E8:C8:92:A1:2E:6D:55:FA:35
            X509v3 Authority Key Identifier:
                keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:9a:33:53:97:d3:98:87:70:61:7b:6d:6b:74:47:4c:4a:
         0e:c6:ed:f9:06:03:82:2f:07:60:0b:62:be:5b:dd:8c:7b:4c:
         9e:2e:50:33:4f:91:07:a9:e5:cc:d0:6c:86:13:f1:26:fd:56:
         3b:07:7f:5e:0d:58:e6:b1:27:b3:ac:c6:17:5d:27:af:a5:eb:
         48:11:b6:b3:cb:bd:ce:23:d2:3a:a2:98:c2:d4:d5:ce:f0:45:
         06:60:b4:1f:1a:34:05:a4:d4:2d:dd:9c:b2:cf:a4:86:e3:cd:
         3a:44:f0:b6:fd:10:86:c4:85:ec:49:0f:f1:f7:9a:19:f0:fd:
         e6:8f:00:f9:69:78:43:6a:49:83:d1:16:f4:69:4d:6d:80:5f:
         eb:1c:38:b5:1a:9c:f2:96:da:46:59:9a:39:f9:8c:14:38:f1:
         4d:8e:aa:61:9b:d6:26:87:55:2f:7b:99:09:fb:b6:7d:92:fa:
         60:6b:5d:b4:24:95:79:64:a9:d7:f6:7f:69:42:8d:6e:e2:8a:
         18:b6:80:0b:0e:c3:a3:16:3c:ab:ec:fb:eb:98:da:89:cf:2f:
         b7:d6:8e:7b:e1:b5:88:6e:20:15:b1:10:2d:c1:40:aa:1c:73:
         b2:d0:b6:05:4d:89:be:1d:77:4f:b0:8f:e7:57:62:50:fa:ef:
         42:3d:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:26:25 2026 by rpki-client