Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File:                     273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier:          B3BQXJaOG1LqCewuZLDsD+vH7fYsD568xVNdudn4hmY=
Subject key identifier:   E0:BB:2E:AD:C1:97:C2:82:7C:C9:BF:D8:F9:EC:72:ED:8A:8B:5B:73
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       69FF1E279563095C9939A38D7A381A4A44434619
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number:          BC
Signing time:             Thu 24 Sep 2026 16:40:38 +0000
Manifest this update:     Thu 24 Sep 2026 16:35:38 +0000
Manifest next update:     Fri 25 Sep 2026 17:08:38 +0000
Files and hashes:         1: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
                          2: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
                          3: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
                          4: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: Y/uL9+F+CYQ2FUWG/4hne1uELXRc8bM8QAUIFxGLOVo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 17:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ff:1e:27:95:63:09:5c:99:39:a3:8d:7a:38:1a:4a:44:43:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: Sep 24 16:35:38 2026 GMT
            Not After : Sep 25 17:08:38 2026 GMT
        Subject: CN=E0BB2EADC197C2827CC9BFD8F9EC72ED8A8B5B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:34:95:dd:35:89:41:30:5a:94:8a:53:56:2c:
                    c7:89:1b:80:a7:84:28:4f:2c:1e:70:8d:e9:e5:3b:
                    f4:82:f6:ee:1d:f3:a8:d1:99:25:9b:49:85:e4:df:
                    49:7d:c8:bb:ca:ca:00:86:26:55:77:14:b3:13:eb:
                    ee:91:31:f4:8f:bc:c6:67:1e:63:88:b8:51:bf:e1:
                    2a:48:8d:a2:8f:5f:f1:04:24:1b:20:e9:e2:9a:37:
                    69:e3:cd:b2:39:d9:36:79:b9:df:7b:7b:ae:e6:8b:
                    94:bb:bc:39:20:d9:d3:e8:d6:49:b1:69:b0:ae:24:
                    01:af:81:46:ea:b8:06:84:32:c4:87:41:19:31:94:
                    ec:76:55:79:bf:33:0d:97:1c:9b:0e:f2:48:25:47:
                    e5:18:56:0a:0e:d2:91:4e:0b:c3:93:ad:87:5a:68:
                    ad:b5:a8:e7:6e:96:e2:e9:eb:7a:24:24:ea:f4:60:
                    62:63:73:a2:13:e0:b2:10:6b:98:fb:5e:2e:a1:e3:
                    d0:ff:5f:4c:64:85:2a:1f:dd:7a:0f:05:07:8d:da:
                    cd:f4:32:24:71:93:6f:42:af:3d:7c:35:9a:0b:4c:
                    e8:49:83:9e:fd:fc:17:7e:08:0d:3e:51:db:e6:7b:
                    1e:b0:bd:06:03:13:eb:fc:2e:08:bc:2e:2b:81:c9:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BB:2E:AD:C1:97:C2:82:7C:C9:BF:D8:F9:EC:72:ED:8A:8B:5B:73
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:de:b9:b3:02:70:e6:ff:c1:c1:df:04:2e:62:22:6c:f2:
         dd:af:36:13:03:43:0d:47:ef:28:d4:0e:8c:9e:ae:04:27:3a:
         12:ca:6d:98:be:3a:96:16:11:21:e5:72:94:f5:94:1d:a3:b1:
         93:5e:e9:9d:59:6a:2a:71:3c:a8:67:d1:67:31:ee:ec:c1:af:
         23:a0:d6:34:44:84:cb:ff:03:45:02:76:83:24:8e:ce:9b:7f:
         d6:2e:3f:cb:12:1a:9a:ad:5f:01:88:e6:15:bd:56:2f:fe:43:
         65:ba:13:6f:31:25:a1:fc:80:05:cf:4c:2d:55:96:99:5d:4b:
         b6:a7:ed:d5:a9:a8:8f:60:57:43:54:9e:0e:3d:4a:4f:89:fd:
         ea:84:91:fb:67:8e:71:89:0d:e2:4c:26:e9:69:a8:9d:27:08:
         8e:2d:88:ba:9e:eb:7b:d1:78:17:c3:bb:3e:ec:e1:40:00:5e:
         bb:ec:a8:31:1e:12:2d:ae:94:e9:36:9b:9f:92:f0:f0:7c:d3:
         ea:ec:9f:af:01:4b:11:22:be:6b:49:69:99:33:ef:df:8f:78:
         b9:73:8a:10:ab:c6:66:47:1f:eb:53:9c:9b:cc:e7:6d:1b:28:
         d3:c9:d9:60:4b:34:bb:f5:9a:05:72:8a:ce:56:ef:7c:a5:18:
         b3:2a:37:3a
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUaf8eJ5VjCVyZOaONejgaSkRDRhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczRDgwNTcwQTZGOEM0MzgxNkZBQzRGNjE1NzQ5QzlE
NkQ5OEU5NjAeFw0yNjA5MjQxNjM1MzhaFw0yNjA5MjUxNzA4MzhaMDMxMTAvBgNV
BAMTKEUwQkIyRUFEQzE5N0MyODI3Q0M5QkZEOEY5RUM3MkVEOEE4QjVCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvNJXdNYlBMFqUilNWLMeJG4Cn
hChPLB5wjenlO/SC9u4d86jRmSWbSYXk30l9yLvKygCGJlV3FLMT6+6RMfSPvMZn
HmOIuFG/4SpIjaKPX/EEJBsg6eKaN2njzbI52TZ5ud97e67mi5S7vDkg2dPo1kmx
abCuJAGvgUbquAaEMsSHQRkxlOx2VXm/Mw2XHJsO8kglR+UYVgoO0pFOC8OTrYda
aK21qOduluLp63okJOr0YGJjc6IT4LIQa5j7Xi6h49D/X0xkhSof3XoPBQeN2s30
MiRxk29Crz18NZoLTOhJg579/Bd+CA0+Udvmex6wvQYDE+v8Lgi8LiuByUrxAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU4LsurcGXwoJ8yb/Y+exy7YqLW3MwHwYDVR0j
BBgwFoAUJz2AVwpvjEOBb6xPYVdJydbZjpYwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF
LzEvMjczRDgwNTcwQTZGOEM0MzgxNkZBQzRGNjE1NzQ5QzlENkQ5OEU5Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMC8yNzNEODA1NzBBNkY4QzQzODE2RkFDNEY2MTU3
NDlDOUQ2RDk4RTk2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzEvMjczRDgwNTcwQTZG
OEM0MzgxNkZBQzRGNjE1NzQ5QzlENkQ5OEU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACui3rmzAnDm
/8HB3wQuYiJs8t2vNhMDQw1H7yjUDoyergQnOhLKbZi+OpYWESHlcpT1lB2jsZNe
6Z1ZaipxPKhn0Wcx7uzBryOg1jREhMv/A0UCdoMkjs6bf9YuP8sSGpqtXwGI5hW9
Vi/+Q2W6E28xJaH8gAXPTC1VlpldS7an7dWpqI9gV0NUng49Sk+J/eqEkftnjnGJ
DeJMJulpqJ0nCI4tiLqe63vReBfDuz7s4UAAXrvsqDEeEi2ulOk2m5+S8PB80+rs
n68BSxEivmtJaZkz79+PeLlzihCrxmZHH+tTnJvM520bKNPJ2WBLNLv1mgVyis5W
73ylGLMqNzo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:29:28 2026 by rpki-client