Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
File:                     F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft (raw, json)
Hash identifier:          G0t4BXTZ40IRUx6Mmc1PlUnjsIZ8H9TbF8esfV+ZGBY=
Subject key identifier:   4A:F0:44:8E:9D:A9:81:21:6D:8A:F0:0D:FD:8E:D2:77:C7:7F:26:8C
Authority key identifier: F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32
Certificate issuer:       /CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
Certificate serial:       13D5DE8CAE3DE77330B9046B47C069452FD0018D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
Manifest number:          BA
Signing time:             Fri 25 Sep 2026 22:09:27 +0000
Manifest this update:     Fri 25 Sep 2026 22:04:27 +0000
Manifest next update:     Sat 26 Sep 2026 22:21:27 +0000
Files and hashes:         1: 3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa (hash: 0p2C5UFLTCbfIwJPIw4v0QPxsj3Q6BFbv279Z9N1VQ8=)
                          2: 3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa (hash: XbjewDs3SN7fvoTCze4EnrDIW/wXRnlQHr/V/+JCXtA=)
                          3: F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl (hash: Tu2eiFlIlhWNi/JOKzqG6D7uOIj0F9V2C62eZ936wI4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl
                          rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:de:8c:ae:3d:e7:73:30:b9:04:6b:47:c0:69:45:2f:d0:01:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
        Validity
            Not Before: Sep 25 22:04:27 2026 GMT
            Not After : Sep 26 22:21:27 2026 GMT
        Subject: CN=4AF0448E9DA981216D8AF00DFD8ED277C77F268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:e3:20:b9:4c:42:c2:05:9d:d0:5c:05:50:
                    b1:20:b2:af:69:28:44:b0:3f:b7:1e:03:a5:e7:cd:
                    b1:27:90:34:6a:d0:b2:0b:2b:e0:42:81:82:5c:9e:
                    8f:a0:61:ff:0c:bb:38:0a:a1:22:4c:1a:60:5f:17:
                    bb:fa:75:21:82:0e:7a:4c:a6:65:ca:39:a6:b6:58:
                    a2:c3:03:02:90:6f:dc:12:52:a9:69:31:d4:a7:64:
                    ee:fd:f1:d9:89:1a:04:bf:6f:fa:8a:f3:e1:f6:07:
                    e1:02:84:b8:41:8a:43:e7:0e:7a:02:22:21:15:26:
                    8c:ec:fd:24:8c:53:d1:ef:54:69:01:27:b1:81:fc:
                    5d:8b:77:12:8a:40:0f:ed:a2:18:53:d5:2e:ea:91:
                    11:6c:22:e8:6d:d8:7a:b2:f1:88:ef:bc:4d:2c:29:
                    63:b8:8f:55:b9:c7:58:38:20:fa:5e:5e:41:dd:1b:
                    9f:a8:e2:a4:35:7c:a2:f2:46:0c:dc:44:b2:7a:f7:
                    ba:b5:7b:2d:17:2b:f3:e2:8a:c6:36:5e:61:d1:8b:
                    b4:dc:e6:a1:f7:c7:bf:80:ca:e4:29:86:fc:d3:18:
                    60:fc:3c:3e:99:24:2c:b8:8f:0a:bd:55:de:7b:e0:
                    fc:8e:f5:ac:13:10:8f:c4:2e:22:ee:32:af:7a:9c:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:44:8E:9D:A9:81:21:6D:8A:F0:0D:FD:8E:D2:77:C7:7F:26:8C
            X509v3 Authority Key Identifier:
                keyid:F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:36:7b:a3:4f:03:3a:9a:89:16:ab:3a:ae:e5:9e:32:f4:
         0d:df:3e:4c:2e:11:e7:0a:cc:48:26:93:3d:19:d8:d8:ab:4b:
         e2:86:09:bd:ec:53:66:01:00:0a:12:80:5a:a3:5a:d0:48:09:
         30:3f:12:02:d5:cc:da:65:a6:1b:0a:16:fa:59:7d:80:c7:89:
         98:84:54:9a:10:d5:a9:8a:38:6e:28:58:a2:70:ba:89:5e:c2:
         a1:18:aa:3a:a9:86:fc:1d:00:66:7b:a0:91:4a:17:ac:96:5e:
         9e:7d:22:b5:aa:07:79:6a:7f:c8:52:d9:ad:e5:96:df:ee:1f:
         d9:26:27:d1:9c:90:4c:cb:3c:30:1f:4c:67:97:fd:88:e7:a5:
         57:35:80:0f:bd:b8:ef:18:5d:69:d3:14:c0:d9:68:cb:d2:3c:
         99:42:3c:74:03:bf:e3:7c:07:84:09:4c:fd:d2:e9:82:7a:69:
         c7:57:68:9d:5a:36:b6:9e:42:25:b0:5a:70:cd:ac:83:7f:eb:
         04:a2:8b:9f:3f:e5:58:c3:d7:3d:90:fa:3a:96:3a:3f:f5:56:
         00:4b:dd:0e:e7:5a:e5:90:91:a2:56:bb:12:52:47:81:e5:b9:
         c8:c6:11:66:c5:fe:c3:e0:c8:6d:77:74:cd:53:5b:2d:70:fe:
         eb:fd:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:47 2026 by rpki-client