Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File:                     273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier:          rPOlMByXPa7U7Fw2PJtgZcC9at972r98yauPyZyqBRU=
Subject key identifier:   09:3D:F4:E1:E6:02:89:97:D4:3F:47:B7:87:6E:E2:FE:FF:C2:0C:26
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       5D5A765E24A1696F34C45FCFBA3DDAA37229381D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number:          0100
Signing time:             Sat 14 Nov 2026 16:39:13 +0000
Manifest this update:     Sat 14 Nov 2026 16:34:13 +0000
Manifest next update:     Sun 15 Nov 2026 17:02:13 +0000
Files and hashes:         1: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
                          2: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
                          3: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: LjppadIwXzEiEjcrp25AThSU1X621sPxdhI4TvpYVwI=)
                          4: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 15:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5a:76:5e:24:a1:69:6f:34:c4:5f:cf:ba:3d:da:a3:72:29:38:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: Nov 14 16:34:13 2026 GMT
            Not After : Nov 15 17:02:13 2026 GMT
        Subject: CN=093DF4E1E6028997D43F47B7876EE2FEFFC20C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:58:20:7e:4f:55:ca:71:e2:28:8d:ff:d5:
                    b0:7e:8e:e5:a1:32:78:91:fe:7d:7c:39:e1:e1:af:
                    fa:94:2f:01:ab:f3:a0:37:c3:2f:53:3d:34:20:37:
                    a5:21:f2:22:e1:bc:ae:f7:72:80:d4:2f:8a:b5:52:
                    34:57:c3:d8:55:d0:0c:ee:84:0f:63:e6:4a:35:2e:
                    39:df:96:9b:39:e5:67:61:25:f6:51:01:a4:a3:ed:
                    0b:44:67:b2:45:22:73:e8:14:cc:8e:d9:d0:59:ce:
                    69:77:de:23:2c:54:a4:31:aa:ef:25:c6:9f:4c:8d:
                    4a:7f:25:4f:c2:4a:81:8d:f9:67:ac:a2:c6:9b:2e:
                    7a:64:d3:1b:5e:d5:b0:6c:3a:49:29:ac:01:ac:c4:
                    4c:13:50:3c:56:3e:74:91:39:ae:54:87:06:7b:0a:
                    2c:36:39:db:80:8e:78:0a:24:6f:b8:96:c7:12:af:
                    db:21:bd:75:09:74:48:ac:d6:01:a0:90:00:78:07:
                    ab:8e:3e:d1:21:5d:db:d0:8c:f3:53:77:01:dc:4b:
                    db:16:78:d6:77:04:87:af:60:2b:a4:f5:57:3d:da:
                    29:56:58:07:1f:8a:b8:1e:36:f4:b5:03:0e:bd:b1:
                    6b:a3:d3:ea:ed:37:17:ba:92:12:65:b8:6c:42:66:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3D:F4:E1:E6:02:89:97:D4:3F:47:B7:87:6E:E2:FE:FF:C2:0C:26
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:a0:e1:55:48:d8:f4:a0:5c:6f:f1:b7:c7:e7:bb:07:57:
         d2:c5:84:f9:17:7c:51:90:09:7d:d7:81:49:6b:42:8a:c0:85:
         9c:7a:7a:db:98:ef:14:ba:44:33:5d:b9:9f:de:5c:1b:75:e0:
         66:72:41:83:56:b8:13:a0:c6:9c:cd:d7:3d:1a:a5:69:30:00:
         f8:c7:82:e1:3e:c1:ed:7d:a1:ce:c9:d7:ea:94:f3:4e:2c:5e:
         5e:79:78:9d:7b:86:56:85:a6:ce:f2:6c:7a:71:f2:7e:3b:a9:
         b9:85:44:43:ce:14:7d:7f:3d:ea:af:af:40:a4:0e:05:d5:dc:
         24:a8:b4:2f:73:82:e3:9c:83:35:07:6f:df:af:73:b0:db:68:
         20:7b:f9:4a:1a:68:89:71:c7:9c:9f:50:06:88:b5:86:91:22:
         9a:53:5c:b3:d1:32:33:3e:ff:30:35:4f:fc:b9:80:48:22:c7:
         4a:38:72:9d:e2:87:bb:26:04:74:3b:c1:c6:e3:14:fd:18:64:
         0c:20:88:fb:c8:95:4f:69:9e:26:89:99:54:59:ff:16:a8:f2:
         46:0d:3e:a9:cb:e3:aa:38:5e:e5:c0:e2:9f:49:f8:39:63:57:
         58:c8:f0:86:f1:6c:dd:11:88:96:9c:e9:7d:f5:45:a7:ee:10:
         af:b4:a9:79
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUXVp2XiShaW80xF/Puj3ao3IpOB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczRDgwNTcwQTZGOEM0MzgxNkZBQzRGNjE1NzQ5QzlE
NkQ5OEU5NjAeFw0yNjExMTQxNjM0MTNaFw0yNjExMTUxNzAyMTNaMDMxMTAvBgNV
BAMTKDA5M0RGNEUxRTYwMjg5OTdENDNGNDdCNzg3NkVFMkZFRkZDMjBDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9Vggfk9VynHiKI3/1bB+juWh
MniR/n18OeHhr/qULwGr86A3wy9TPTQgN6Uh8iLhvK73coDUL4q1UjRXw9hV0Azu
hA9j5ko1Ljnflps55WdhJfZRAaSj7QtEZ7JFInPoFMyO2dBZzml33iMsVKQxqu8l
xp9MjUp/JU/CSoGN+WesosabLnpk0xte1bBsOkkprAGsxEwTUDxWPnSROa5UhwZ7
Ciw2OduAjngKJG+4lscSr9shvXUJdEis1gGgkAB4B6uOPtEhXdvQjPNTdwHcS9sW
eNZ3BIevYCuk9Vc92ilWWAcfirgeNvS1Aw69sWuj0+rtNxe6khJluGxCZjSpAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUCT304eYCiZfUP0e3h27i/v/CDCYwHwYDVR0j
BBgwFoAUJz2AVwpvjEOBb6xPYVdJydbZjpYwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF
LzEvMjczRDgwNTcwQTZGOEM0MzgxNkZBQzRGNjE1NzQ5QzlENkQ5OEU5Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMC8yNzNEODA1NzBBNkY4QzQzODE2RkFDNEY2MTU3
NDlDOUQ2RDk4RTk2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzEvMjczRDgwNTcwQTZG
OEM0MzgxNkZBQzRGNjE1NzQ5QzlENkQ5OEU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC06oOFVSNj0
oFxv8bfH57sHV9LFhPkXfFGQCX3XgUlrQorAhZx6etuY7xS6RDNduZ/eXBt14GZy
QYNWuBOgxpzN1z0apWkwAPjHguE+we19oc7J1+qU804sXl55eJ17hlaFps7ybHpx
8n47qbmFREPOFH1/Peqvr0CkDgXV3CSotC9zguOcgzUHb9+vc7DbaCB7+UoaaIlx
x5yfUAaItYaRIppTXLPRMjM+/zA1T/y5gEgix0o4cp3ih7smBHQ7wcbjFP0YZAwg
iPvIlU9pniaJmVRZ/xao8kYNPqnL46o4XuXA4p9J+DljV1jI8IbxbN0RiJac6X31
RafuEK+0qXk=
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:42 2026 by rpki-client