Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
File:                     FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft (raw, json)
Hash identifier:          NjxsxJajPUStsSVEwbWoqKDV2pVU8i87TE/oRB3vYUc=
Subject key identifier:   A2:C7:50:C3:A9:3B:69:EC:18:FF:80:4B:59:01:70:BF:21:5A:75:4D
Authority key identifier: FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
Certificate issuer:       /CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Certificate serial:       05D15EA604DE48BB19E6C427597A44EF1A06C5E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
Manifest number:          B6
Signing time:             Thu 24 Sep 2026 03:41:20 +0000
Manifest this update:     Thu 24 Sep 2026 03:36:20 +0000
Manifest next update:     Fri 25 Sep 2026 06:07:20 +0000
Files and hashes:         1: 3136312e3234382e3136302e302f32342d3234203d3e203633383937.roa (hash: jKx2LGW2OnV91lTfg/6Tk6smI31nkyG3PHeGMr/XEew=)
                          2: FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl (hash: yEPZb1rk2gdeGU+9OgviVueGrZasbhPNyOtTuw56uuI=)
                          3: 3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa (hash: 2l7F3xR6CEzktzgJrO3SJv5piK3jtEcJIxeyuIWLklM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl
                          rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d1:5e:a6:04:de:48:bb:19:e6:c4:27:59:7a:44:ef:1a:06:c5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
        Validity
            Not Before: Sep 24 03:36:20 2026 GMT
            Not After : Sep 25 06:07:20 2026 GMT
        Subject: CN=A2C750C3A93B69EC18FF804B590170BF215A754D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:31:6d:0c:5f:64:b8:cc:aa:6d:a3:38:1d:
                    57:0e:66:c5:c2:d5:e5:8a:e6:fb:95:97:fd:2b:c7:
                    c8:c2:60:da:72:cb:0c:ff:c9:3d:9e:50:48:8c:96:
                    98:3a:58:82:6d:3b:90:89:86:19:2e:96:bc:13:30:
                    ad:25:54:66:be:22:f7:90:35:b6:35:a9:0a:0b:8a:
                    19:be:8f:4f:b5:99:d5:0d:b8:13:78:47:06:63:62:
                    d5:ca:09:5d:96:01:2d:18:3d:e9:07:3c:18:71:31:
                    51:15:0a:71:2b:21:f2:c5:0e:9d:c2:12:22:be:7e:
                    04:b8:65:7d:5b:4e:b0:ee:83:b3:97:51:60:24:1b:
                    bf:9c:a3:3a:02:3e:cf:6a:91:c8:8f:d1:15:84:46:
                    57:f6:4a:dc:1d:08:74:60:70:5d:6f:16:2e:e8:68:
                    d9:73:18:e4:8f:54:13:dd:bc:d8:7a:91:0f:36:5c:
                    e5:bf:f2:6e:70:23:0c:8c:b6:21:fb:cc:ef:9b:f3:
                    a6:74:28:d1:c1:bc:68:31:ef:4b:f9:c4:ff:26:66:
                    33:88:9c:ba:10:aa:d5:15:b7:6a:d4:77:9a:c2:41:
                    f2:9b:71:8e:a4:04:96:18:56:d5:cb:a8:0b:48:df:
                    f1:55:64:ba:b7:5e:5b:a9:66:3e:a8:09:08:d8:f3:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C7:50:C3:A9:3B:69:EC:18:FF:80:4B:59:01:70:BF:21:5A:75:4D
            X509v3 Authority Key Identifier:
                keyid:FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:cf:0c:7c:93:1d:e6:a3:6d:6c:9a:e3:41:52:c3:d2:60:ab:
         7b:10:20:c1:68:1e:24:a7:fe:77:65:9a:91:9d:d2:07:1e:b0:
         88:0e:03:26:5b:74:dc:7a:48:d1:f6:ff:aa:55:c0:71:5e:8f:
         be:97:dd:7b:bd:03:17:bf:d9:1f:97:fc:54:dc:04:f9:38:c3:
         cd:69:04:de:d8:da:f5:25:46:00:6b:24:e4:1a:0d:1f:04:93:
         ab:8a:a9:4b:3e:db:e5:5f:15:8d:21:02:c3:ff:61:4f:9e:d1:
         8d:4c:4e:2c:5d:ff:50:9a:55:e5:e8:60:28:9a:bc:28:f5:be:
         b5:91:d6:d2:05:7e:2b:23:7f:e9:f2:5f:e4:07:a0:65:49:c1:
         1f:e4:a9:3d:87:c1:39:7b:21:42:3c:ae:43:b0:cb:80:db:7f:
         24:88:45:a8:ea:1f:9d:8d:e7:3e:fd:fd:b8:02:72:90:88:40:
         3a:0b:cb:61:75:41:be:84:59:d6:4f:98:1b:c1:43:a8:1d:6b:
         e6:96:07:34:d1:23:a5:4e:bd:4c:59:32:ba:ac:a7:ab:7e:68:
         02:6a:f9:7e:d0:7b:6d:97:b9:fc:2d:e1:16:e0:55:39:5a:00:
         94:4d:c1:27:07:b3:fb:f6:15:ab:cd:40:f1:90:82:57:ef:9e:
         98:b5:48:e1
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUBdFepgTeSLsZ5sQnWXpE7xoGxegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3QzkxRjdFNTMzNDNGNUNGMjRGOUY4MjEyRjI4QThC
RTJFRjg3NDAeFw0yNjA5MjQwMzM2MjBaFw0yNjA5MjUwNjA3MjBaMDMxMTAvBgNV
BAMTKEEyQzc1MEMzQTkzQjY5RUMxOEZGODA0QjU5MDE3MEJGMjE1QTc1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZzFtDF9kuMyqbaM4HVcOZsXC
1eWK5vuVl/0rx8jCYNpyywz/yT2eUEiMlpg6WIJtO5CJhhkulrwTMK0lVGa+IveQ
NbY1qQoLihm+j0+1mdUNuBN4RwZjYtXKCV2WAS0YPekHPBhxMVEVCnErIfLFDp3C
EiK+fgS4ZX1bTrDug7OXUWAkG7+cozoCPs9qkciP0RWERlf2StwdCHRgcF1vFi7o
aNlzGOSPVBPdvNh6kQ82XOW/8m5wIwyMtiH7zO+b86Z0KNHBvGgx70v5xP8mZjOI
nLoQqtUVt2rUd5rCQfKbcY6kBJYYVtXLqAtI3/FVZLq3XlupZj6oCQjY87slAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUosdQw6k7aewY/4BLWQFwvyFadU0wHwYDVR0j
BBgwFoAU+3yR9+UzQ/XPJPn4IS8oqL4u+HQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzEv
RkI3QzkxRjdFNTMzNDNGNUNGMjRGOUY4MjEyRjI4QThCRTJFRjg3NC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMC9GQjdDOTFGN0U1MzM0M0Y1Q0YyNEY5RjgyMTJGMjhB
OEJFMkVGODc0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzEvRkI3QzkxRjdFNTMzNDNGNUNG
MjRGOUY4MjEyRjI4QThCRTJFRjg3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMnPDHyTHeajbWya40FS
w9Jgq3sQIMFoHiSn/ndlmpGd0gcesIgOAyZbdNx6SNH2/6pVwHFej76X3Xu9Axe/
2R+X/FTcBPk4w81pBN7Y2vUlRgBrJOQaDR8Ek6uKqUs+2+VfFY0hAsP/YU+e0Y1M
Tixd/1CaVeXoYCiavCj1vrWR1tIFfisjf+nyX+QHoGVJwR/kqT2HwTl7IUI8rkOw
y4DbfySIRajqH52N5z79/bgCcpCIQDoLy2F1Qb6EWdZPmBvBQ6gda+aWBzTRI6VO
vUxZMrqsp6t+aAJq+X7Qe22Xufwt4RbgVTlaAJRNwScHs/v2FavNQPGQglfvnpi1
SOE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:48:05 2026 by rpki-client