Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
File:                     871300497118DBA75FA9B46DE2D7D39663DBDE52.mft (raw, json)
Hash identifier:          wIZTgd6e2AxZRgu2vVpn4FOp8y1RA189pirWk8kbimY=
Subject key identifier:   DF:A2:5B:B2:0B:00:15:5B:DB:8A:6A:2E:3C:60:04:F1:D3:CA:C5:BF
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Certificate issuer:       /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial:       121CE93923066662FD4E25F90D9A8F3D7019AD3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
Manifest number:          B8
Signing time:             Wed 23 Sep 2026 10:47:19 +0000
Manifest this update:     Wed 23 Sep 2026 10:42:19 +0000
Manifest next update:     Thu 24 Sep 2026 12:55:19 +0000
Files and hashes:         1: 3130332e3131372e342e302f32322d3234203d3e20313331363233.roa (hash: Tln46/ulM0jeOxnleoQfL0KZfR8c6xYxi9yDZm65GwA=)
                          2: 871300497118DBA75FA9B46DE2D7D39663DBDE52.crl (hash: gQETha+sgn9j7AvqNLmgjX4mp4zicBtc7GzH5squlDQ=)
                          3: 3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (hash: jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
                          rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1c:e9:39:23:06:66:62:fd:4e:25:f9:0d:9a:8f:3d:70:19:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
        Validity
            Not Before: Sep 23 10:42:19 2026 GMT
            Not After : Sep 24 12:55:19 2026 GMT
        Subject: CN=DFA25BB20B00155BDB8A6A2E3C6004F1D3CAC5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:e2:69:1c:eb:cf:31:08:b5:d9:fa:1a:31:
                    08:45:ef:fe:d7:3c:be:c0:90:45:47:2a:c3:d9:54:
                    69:17:6c:6f:41:c2:19:17:fd:27:2f:03:3d:25:22:
                    63:a8:57:0b:a4:3b:93:b0:64:10:66:4e:c2:17:82:
                    f2:ee:3d:c6:bd:e3:78:84:27:bd:75:54:a8:a8:5e:
                    1c:0c:39:6f:f7:53:d8:69:41:a0:da:c4:5a:0c:fd:
                    d4:f6:67:96:b7:ed:bb:bd:01:97:cc:dc:7a:d2:ba:
                    f1:60:60:58:4e:6b:ff:85:0b:7d:0f:d1:a8:9d:b5:
                    48:71:ed:92:88:c5:71:29:a0:7e:c4:34:e4:3d:b6:
                    13:d9:89:c4:a1:81:b7:35:0e:83:39:42:f1:67:7e:
                    96:05:10:b1:59:52:08:c1:d9:40:42:43:01:88:01:
                    55:05:95:14:92:6a:85:48:17:d6:5f:ac:a9:66:45:
                    94:58:75:93:4e:d3:c1:2a:99:c4:56:ff:0e:04:35:
                    2d:d2:0d:ae:95:85:52:b8:e9:89:3c:2e:92:dd:3b:
                    9d:92:e3:bf:86:09:07:f6:47:c1:5b:2a:d1:cb:f5:
                    61:66:be:90:0c:83:80:a7:d8:fa:26:e9:79:3c:c7:
                    af:b8:54:48:ce:12:a6:08:d4:cb:b1:a7:ff:0a:e2:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A2:5B:B2:0B:00:15:5B:DB:8A:6A:2E:3C:60:04:F1:D3:CA:C5:BF
            X509v3 Authority Key Identifier:
                keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:2b:74:92:ab:c7:57:ba:bd:f9:79:a6:1d:04:ab:f4:b3:
         57:fe:1c:af:c2:4f:bd:cd:76:35:ce:46:ec:1b:39:52:c9:42:
         40:16:17:d0:34:34:9e:87:07:0e:c5:a0:74:17:d2:f3:09:ff:
         3a:9c:6c:0f:b6:a9:bd:69:82:cf:1a:ac:55:e1:16:a0:92:87:
         c5:c3:28:a7:fd:77:a4:5b:02:98:da:e9:34:fe:f3:23:8b:02:
         0e:04:b0:12:65:24:75:a2:2a:7d:f0:67:31:33:b5:34:86:f5:
         fe:ab:11:20:d3:49:d2:77:44:77:81:ac:5c:0a:5e:b4:14:20:
         57:44:8f:60:25:f5:d2:51:83:16:97:42:2b:48:40:62:f9:36:
         fc:3b:55:01:be:7f:af:62:c9:34:49:8e:31:ee:73:76:1a:14:
         56:a6:63:56:82:e2:28:9c:81:0f:d2:dd:23:62:be:2c:c1:41:
         5b:ea:db:62:6d:ae:d9:1f:67:4e:3b:16:98:b4:e3:8f:ca:24:
         50:30:c9:12:80:ff:fd:c1:29:77:b5:66:3f:89:76:89:00:af:
         0c:75:94:c7:87:d5:c6:9f:0e:72:6d:16:51:ef:5a:06:a8:69:
         78:e8:98:98:4f:6a:5f:e1:1f:a7:57:b1:db:70:e5:61:bf:c1:
         ad:d2:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:15:49 2026 by rpki-client