Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
File:                     9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json)
Hash identifier:          P9bqn87D6N1T2s5SIsACrccaEsNaFcPAotVD0wFxQxw=
Subject key identifier:   12:B4:AC:46:81:69:11:6A:E7:37:A1:35:00:22:30:74:4F:9A:2B:65
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       47C2C6258FBB01C2823771506438388A066D90DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
Manifest number:          CB
Signing time:             Thu 24 Sep 2026 13:30:01 +0000
Manifest this update:     Thu 24 Sep 2026 13:25:01 +0000
Manifest next update:     Fri 25 Sep 2026 17:29:01 +0000
Files and hashes:         1: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=)
                          2: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: XDHXKRW1dJit0AS2XXhNyC6oT4tYBKHKALcmyGZDhuI=)
                          3: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=)
                          4: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=)
                          5: 3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa (hash: spfGeWFJdUeuEjJPQ+8MnYaXyZJ0WumSmDpey5VZQ7o=)
                          6: 3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa (hash: /zyY4xHrRSNJrzW1F2W6rj36r/peZFfh4+++ESxgZwc=)
                          7: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=)
                          8: 3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa (hash: T1ghJeZqoDyoS6h4+88UDs/OcvRqZ8RuQoLYvkNX8NQ=)
                          9: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=)
                          10: 3130332e32332e3130382e302f32332d3332203d3e203138313738.roa (hash: UFS/Hr7FRpvvD37ViC5Fa6JcMEvAh98z7iSjnL//iSs=)
                          11: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
                          rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 17:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c2:c6:25:8f:bb:01:c2:82:37:71:50:64:38:38:8a:06:6d:90:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: Sep 24 13:25:01 2026 GMT
            Not After : Sep 25 17:29:01 2026 GMT
        Subject: CN=12B4AC468169116AE737A135002230744F9A2B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:88:48:c0:43:61:69:19:95:e1:d7:1b:9f:
                    67:c8:7d:36:1e:c6:d3:f9:0a:b0:27:45:8e:4a:52:
                    cb:9a:10:d0:fc:62:1f:e5:bd:99:a0:98:1f:17:70:
                    78:23:86:8e:a6:4b:bd:12:4b:cf:41:37:e7:96:09:
                    2f:04:0f:ce:1a:63:e6:d5:10:09:e0:4b:ab:df:2a:
                    31:19:e3:55:21:04:1d:61:10:98:fc:10:2c:bf:01:
                    9a:57:5f:d0:41:b5:63:61:9d:6d:fd:b4:50:57:2e:
                    8d:05:83:b0:16:a2:8d:67:b6:83:f2:97:95:a5:8a:
                    27:10:19:4c:4a:a2:c7:f9:af:8c:75:c8:fd:f7:ab:
                    46:0c:ec:c4:8e:60:8b:b7:4f:bd:5d:54:59:aa:1c:
                    cf:22:7a:4c:c4:d7:36:26:dd:50:f8:34:16:36:b5:
                    ea:83:93:ce:fb:3c:85:f9:e1:b9:02:98:51:12:8f:
                    52:b0:b9:33:ae:66:ca:42:c0:69:04:06:6a:12:49:
                    44:40:70:f3:2d:0b:81:da:42:0a:c9:29:80:bb:ac:
                    49:11:5f:ba:84:e5:ca:28:76:5c:e3:e2:f3:29:ca:
                    5b:b0:19:15:f4:1d:25:8a:a9:8e:08:aa:69:a5:87:
                    f1:13:d8:8f:c8:83:7d:cd:66:9c:b5:ae:c2:ee:41:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:AC:46:81:69:11:6A:E7:37:A1:35:00:22:30:74:4F:9A:2B:65
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e9:e8:dd:3e:17:09:db:60:66:74:a4:59:78:23:ff:66:2e:
         d0:32:3b:43:1a:d3:12:02:be:fc:66:bf:89:fc:77:e1:ae:2c:
         44:50:62:af:fc:92:05:9f:ec:f7:7a:18:78:1c:6d:e6:41:27:
         78:7b:ae:4f:e7:88:66:a9:e0:ae:c1:e0:ef:89:36:c7:71:ba:
         34:d7:99:07:4e:05:aa:31:5e:ae:89:5f:6e:d8:53:dd:40:83:
         66:f5:61:83:50:dd:80:73:0c:1c:59:d9:79:b3:83:75:c7:b7:
         23:6f:46:d6:62:39:e3:c8:91:f2:7d:fb:00:10:b9:63:11:c6:
         e0:d4:dd:f8:cc:67:4d:2d:17:b3:53:77:ba:7d:63:d2:36:f8:
         13:39:8a:b1:38:ef:24:67:cf:3d:ab:20:84:22:5a:e0:55:1c:
         0a:ba:ca:42:a3:da:85:3a:8e:08:d1:b0:d5:09:2e:2a:9b:1e:
         0c:38:f1:0e:fb:2a:f4:26:c9:20:13:2e:bf:7f:80:bb:65:ab:
         df:02:4e:ce:f4:ee:d3:32:00:8a:0b:54:09:97:e2:88:8e:c3:
         fe:1d:1e:6d:03:6a:79:88:52:7c:b6:09:ea:bd:4f:7c:e9:07:
         11:94:54:0f:da:d5:93:25:10:b6:70:d2:6a:f8:b0:46:dd:0e:
         4f:50:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:14 2026 by rpki-client