Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
File:                     980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft (raw, json)
Hash identifier:          3nSez8ZYxB5ueFL8iYSYVgZXXm2Tgh+VQ6YsSO9cfCw=
Subject key identifier:   63:80:FE:05:F0:17:FB:FF:9C:58:7C:1E:37:C4:5C:14:09:FD:C6:AE
Authority key identifier: 98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01
Certificate issuer:       /CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
Certificate serial:       27F3CAE1BEBEBD76508785D0C97A2E242854EC61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
Manifest number:          BA
Signing time:             Fri 25 Sep 2026 12:43:11 +0000
Manifest this update:     Fri 25 Sep 2026 12:38:11 +0000
Manifest next update:     Sat 26 Sep 2026 16:15:11 +0000
Files and hashes:         1: 3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa (hash: sfd0XACvVXb+UD6MWhg3l8P8g9Qo3omITYOEYKEM2cQ=)
                          2: 980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl (hash: Xp1aw6ivUFiV5+ztQH1gbEKr2oVrViBAMMSn1dlygOU=)
                          3: 323430303a666536303a3a2f33322d3634203d3e20313530373730.roa (hash: EhLj+m0MkuzmmwvkxkJNFTonhVd1K264TpTCs4vZ774=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl
                          rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f3:ca:e1:be:be:bd:76:50:87:85:d0:c9:7a:2e:24:28:54:ec:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
        Validity
            Not Before: Sep 25 12:38:11 2026 GMT
            Not After : Sep 26 16:15:11 2026 GMT
        Subject: CN=6380FE05F017FBFF9C587C1E37C45C1409FDC6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:c0:d1:e5:23:c0:6b:d0:b6:26:d6:eb:05:
                    8c:6c:1c:fb:4d:4d:49:0b:3c:54:6a:ab:36:0b:9b:
                    b4:b1:55:fd:7e:c1:a7:45:32:32:06:74:32:48:49:
                    39:f5:ec:85:bc:6f:57:66:00:a4:61:ef:a4:97:f3:
                    5c:bf:54:0b:36:ac:c1:92:a4:f9:6e:f2:86:8e:49:
                    13:da:2e:b2:e5:8c:8d:34:93:91:90:17:6a:86:61:
                    7f:82:6d:ab:79:41:9a:5c:f2:c7:0c:a2:5b:74:aa:
                    b2:9c:83:c8:73:fe:0b:8b:8d:76:d3:e7:52:55:a2:
                    48:a4:c9:8b:91:75:8b:f1:61:c4:db:42:97:67:ad:
                    ee:d3:6d:e6:f4:c3:a4:86:b7:e1:9c:13:87:0c:7c:
                    a6:9d:14:60:e8:6a:06:8f:67:19:bc:bf:8e:20:94:
                    54:e1:6b:aa:83:74:62:ce:c8:e1:e3:61:07:a1:8c:
                    bf:57:98:7d:4c:1a:37:ae:3f:80:ba:83:18:8b:a6:
                    a8:b8:37:74:0e:89:5f:92:d6:d2:dd:58:e6:ab:ad:
                    8c:f3:6c:a0:c9:b7:c5:61:f6:f0:72:b8:9b:6e:27:
                    7a:dd:96:3f:9c:0a:e1:ae:20:cc:a9:28:d6:6f:68:
                    89:1e:d9:bf:a2:58:cb:aa:cc:5c:0f:cd:d7:c6:82:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:FE:05:F0:17:FB:FF:9C:58:7C:1E:37:C4:5C:14:09:FD:C6:AE
            X509v3 Authority Key Identifier:
                keyid:98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:38:c5:97:cd:9b:69:7d:17:4b:ea:19:ee:12:29:4c:f6:23:
         d6:a7:e0:89:2b:ad:2a:1a:be:89:56:92:d5:06:a9:9a:79:6d:
         2d:29:14:92:be:37:07:d5:60:91:e5:48:7d:12:07:d0:a4:eb:
         13:c1:21:27:9e:50:be:2a:70:f6:d5:68:71:a4:50:5b:71:af:
         8b:da:77:a1:d0:6a:91:c1:b6:14:62:5f:b3:e6:c9:91:5c:34:
         7a:0f:f5:82:cc:ce:55:5f:e7:54:1b:cb:e0:c4:e8:26:4d:64:
         13:dc:a6:e5:a4:94:73:c2:73:b2:28:9d:61:64:f6:1b:93:15:
         8d:44:e2:bc:7f:51:58:13:78:d0:9d:17:f7:83:e2:5c:aa:f6:
         af:66:47:02:aa:06:57:1a:cd:9b:51:ff:f7:8b:26:08:fa:99:
         4a:83:e0:55:4a:d4:83:b0:bb:31:9d:57:f3:5e:1d:91:73:d4:
         ee:9e:0c:41:0f:de:8f:ef:14:44:2c:78:31:6a:e6:61:41:7a:
         6c:97:4e:ea:57:5e:ac:4f:7b:3b:73:ef:8b:46:bf:99:f9:ab:
         60:7d:58:ab:b3:a5:31:8f:51:64:33:14:3d:4a:68:5d:00:87:
         9a:d6:67:86:96:a4:85:ca:74:9e:9a:fc:92:37:91:d2:c2:b0:
         3b:10:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:02 2026 by rpki-client