Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.mft
File:                     80A82353C115BEBF549584A0A7933571A8A20790.mft (raw, json)
Hash identifier:          unze4BsVguCpSsRqjYUOkMibXsYhdqFUR+iNwnnjbV0=
Subject key identifier:   4C:97:E5:65:E3:E6:26:13:72:44:23:F9:C5:67:DB:85:0C:06:5A:9A
Authority key identifier: 80:A8:23:53:C1:15:BE:BF:54:95:84:A0:A7:93:35:71:A8:A2:07:90
Certificate issuer:       /CN=80A82353C115BEBF549584A0A7933571A8A20790
Certificate serial:       3820CF931F03FD134301ACBACB394E04389AFF5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 11:07:47 +0000
Manifest this update:     Fri 25 Sep 2026 11:02:47 +0000
Manifest next update:     Sat 26 Sep 2026 14:55:47 +0000
Files and hashes:         1: 3136352e3130312e38382e302f32332d3234203d3e20313334383233.roa (hash: JQ2r4Xd9tfzf4zRE4IXpfK+egNEOSni724KHjLhcyhI=)
                          2: 80A82353C115BEBF549584A0A7933571A8A20790.crl (hash: kje3Rh4++CO/L/kyOE+cAsS3anw7fPmjf/BcmXx0ka0=)
                          3: 3136352e3130312e38382e302f32332d3234203d3e20313532313739.roa (hash: uwjPzEiZg5US2WfzB/Dl8OBvnEpcY8FBzW0f+M2I97o=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.crl
                          rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 11:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:20:cf:93:1f:03:fd:13:43:01:ac:ba:cb:39:4e:04:38:9a:ff:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A82353C115BEBF549584A0A7933571A8A20790
        Validity
            Not Before: Sep 25 11:02:47 2026 GMT
            Not After : Sep 26 14:55:47 2026 GMT
        Subject: CN=4C97E565E3E62613724423F9C567DB850C065A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:01:bf:9f:ca:e4:e9:21:78:c9:64:e4:13:
                    67:4d:1b:fc:13:69:f4:00:3f:6c:96:d0:70:1d:b9:
                    9f:b4:cc:37:61:fe:d7:14:b1:e0:70:f8:c5:42:f2:
                    3e:f6:2d:ee:6d:2b:00:ef:a6:4c:35:5e:47:78:aa:
                    0e:9d:3d:82:96:ba:3a:90:3c:a6:dc:3a:9f:f2:28:
                    88:dc:49:e0:29:b6:78:93:a5:52:a7:fe:2a:b3:14:
                    59:af:58:1b:3c:98:de:75:5c:09:c5:80:3f:4c:1f:
                    38:aa:76:72:fb:15:2a:ca:ff:c2:d4:e3:9f:17:90:
                    51:0d:03:59:5d:8d:bf:b5:bc:63:39:e1:d6:48:43:
                    95:42:89:4f:b3:a9:af:ab:28:e1:0c:8c:83:cd:55:
                    76:bd:c5:e1:d2:e7:87:39:6f:5b:5e:70:fd:45:82:
                    05:c7:83:08:29:2e:0a:40:f0:61:24:fd:75:20:bf:
                    4f:0a:17:1d:13:6d:31:95:4e:65:bf:19:a5:83:23:
                    af:17:58:a4:49:5f:a8:8d:7b:00:eb:52:5f:4b:bc:
                    e4:5c:68:2a:4a:f2:0c:79:5b:9a:20:c9:26:2f:d7:
                    8a:61:82:58:09:89:06:b0:7c:a7:d9:4d:2c:20:38:
                    92:ae:76:c2:ee:c4:b1:d7:f0:5e:99:35:74:fa:e2:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:E5:65:E3:E6:26:13:72:44:23:F9:C5:67:DB:85:0C:06:5A:9A
            X509v3 Authority Key Identifier:
                keyid:80:A8:23:53:C1:15:BE:BF:54:95:84:A0:A7:93:35:71:A8:A2:07:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:a6:fd:0e:09:8f:34:f9:f2:4a:20:71:4e:b6:c6:e9:ac:
         e0:20:23:89:b2:87:66:87:8a:da:a5:0e:7f:2f:23:4f:02:83:
         d8:ea:10:8e:d9:04:8f:6b:de:9b:2d:ac:b0:7a:c9:e4:42:cf:
         02:8d:61:ca:ee:28:c1:06:d0:e6:b9:3c:6e:a0:c6:12:fe:75:
         a4:51:0a:9f:b0:84:7d:91:98:ba:a9:93:2e:e0:94:c3:65:f7:
         8c:bc:d0:41:34:f5:26:5a:22:86:3f:41:7a:3c:25:e2:82:28:
         b3:93:25:df:3c:ea:c6:a8:7f:9c:c1:66:1c:7e:c9:ef:40:10:
         73:fc:9a:66:5c:52:3c:c4:15:79:db:fc:a7:88:ab:0b:dc:17:
         b3:67:61:89:2c:95:ea:ca:72:a5:a0:1c:fd:7e:dc:e5:11:07:
         bb:71:ae:ae:1a:80:c4:c8:9b:f8:db:72:7f:dd:30:18:85:0c:
         fa:a3:ad:58:ba:17:f9:2d:a2:6d:e0:42:c5:e9:4a:62:84:cc:
         7e:bf:38:f3:85:e1:fd:3a:a9:87:c5:25:f3:76:90:15:cb:d7:
         37:51:57:29:32:fc:17:2f:00:96:53:7d:71:2b:fd:f7:8c:78:
         c3:ed:59:0e:68:6e:a3:4b:b1:32:e0:6e:3e:6c:2e:b7:df:1c:
         df:85:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:46:20 2026 by rpki-client