Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
File:                     B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft (raw, json)
Hash identifier:          27/xahK1D2dKkC+GvXup+tVlS/FWvjuLrjm1twbEdsQ=
Subject key identifier:   DA:97:7C:0E:11:44:49:9A:E1:CB:D5:17:31:C9:46:D2:A1:FA:B8:B5
Authority key identifier: B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
Certificate issuer:       /CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
Certificate serial:       26AEE3A5CD6701FA6A56429E6C0BABC0D2951446
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 12:09:42 +0000
Manifest this update:     Thu 24 Sep 2026 12:04:42 +0000
Manifest next update:     Fri 25 Sep 2026 15:23:42 +0000
Files and hashes:         1: B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl (hash: CZfTIH1rIjK+XBJket67QgfuXHgu3sREfM8T6RhaRJU=)
                          2: 3136332e36312e36302e302f32332d3234203d3e20313532363232.roa (hash: fCwyscEgrvjXMp337Q3oR9jgOSuagg7YXLxdjlpei1s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl
                          rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 15:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ae:e3:a5:cd:67:01:fa:6a:56:42:9e:6c:0b:ab:c0:d2:95:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
        Validity
            Not Before: Sep 24 12:04:42 2026 GMT
            Not After : Sep 25 15:23:42 2026 GMT
        Subject: CN=DA977C0E1144499AE1CBD51731C946D2A1FAB8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:02:45:d0:e5:dd:c5:58:6e:da:7e:e3:c2:
                    5a:c1:9c:42:fa:34:e5:80:26:60:89:e5:86:db:5f:
                    96:9d:46:22:2b:a4:0a:55:e4:2b:84:01:13:64:97:
                    c3:a4:b5:06:6d:8c:d6:27:7d:87:89:3f:57:61:bf:
                    22:f6:36:b4:c6:57:a1:10:16:10:0b:1d:db:2f:ea:
                    d9:da:10:f1:2b:52:25:07:df:d0:0a:f7:c4:8c:e2:
                    a7:14:f9:5f:86:dd:00:a0:cd:d4:46:21:96:60:e2:
                    62:1f:5e:a7:ab:a5:cb:90:6f:cd:5b:b8:7d:ca:6d:
                    b8:a8:99:4d:37:3e:d8:31:f2:4e:4d:4a:4d:c0:9d:
                    5f:75:ef:65:ee:da:fd:a8:fc:87:ed:3d:ee:6f:04:
                    21:d6:62:50:d7:ce:78:da:74:88:f7:bb:5b:bb:4f:
                    ac:2d:6e:65:f4:0a:83:07:bc:5c:c9:a7:f6:ac:2f:
                    64:dd:09:95:cb:de:07:37:07:b9:ab:bc:66:e1:17:
                    8d:a5:12:30:a8:4e:73:21:85:d7:3f:62:88:99:e7:
                    21:34:19:2b:00:de:24:72:54:96:41:0d:35:16:f6:
                    93:ac:dd:ea:7c:ae:0a:77:c7:28:60:26:da:ac:5d:
                    35:3c:50:f3:ae:d8:43:27:2e:38:9b:82:96:54:79:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:7C:0E:11:44:49:9A:E1:CB:D5:17:31:C9:46:D2:A1:FA:B8:B5
            X509v3 Authority Key Identifier:
                keyid:B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:50:20:6d:85:79:ca:28:8a:cf:ff:e0:2d:46:18:e6:f0:a2:
         22:65:2f:56:02:1a:cb:05:bd:a8:13:9f:35:1a:d3:51:e4:e4:
         1e:c0:7c:dd:46:0d:a8:ec:84:73:dc:87:f0:23:78:76:e0:c8:
         2e:27:68:42:41:13:8d:49:61:b1:f3:d6:d7:55:ac:f1:97:55:
         fc:6d:8e:a2:77:e3:a8:32:44:84:6f:c5:61:8e:69:95:07:8e:
         f7:21:65:fa:7c:9f:23:88:4a:d7:4b:47:00:a0:11:6f:d2:20:
         e9:25:a7:c6:6b:17:39:b4:29:a3:1d:51:8a:41:50:b4:43:8b:
         2e:d4:29:79:1e:2d:07:32:39:7b:a8:2e:4c:ff:bd:49:57:dd:
         8a:cc:36:3e:25:ec:e6:a5:3d:53:e1:3e:ec:8b:05:e0:0a:9e:
         44:57:54:07:78:d9:99:21:87:42:9b:86:ef:9d:25:f1:f5:44:
         10:e3:de:62:55:79:da:fa:d7:ed:77:96:08:b1:09:74:59:10:
         ac:34:99:5d:e5:29:83:4b:5c:50:5e:8d:e0:18:57:91:a5:f4:
         bb:f3:34:36:66:af:0e:b0:a9:f6:97:02:a4:9b:b7:1b:68:f0:
         32:7a:00:5c:e0:6d:69:f6:05:c0:3d:99:fc:26:ae:23:fd:13:
         76:2a:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:51:32 2026 by rpki-client