Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
File:                     3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft (raw, json)
Hash identifier:          +rY8P8gHtI19SWJPXbyA/e2NLkpdWHGODEjbz7UjJ1k=
Subject key identifier:   34:6D:42:8E:C8:B8:15:12:EE:AD:A7:64:B5:39:91:CF:21:C2:D3:F5
Authority key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
Certificate issuer:       /CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Certificate serial:       21F8131E8364DFF912CC318F959894601FED8ACD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
Manifest number:          FB
Signing time:             Sun 15 Nov 2026 07:47:40 +0000
Manifest this update:     Sun 15 Nov 2026 07:42:40 +0000
Manifest next update:     Mon 16 Nov 2026 11:06:40 +0000
Files and hashes:         1: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl (hash: r80lW+aKnV9WZ22pra5oELptMr6WoNKIEezMaCl8iMI=)
                          2: 323430303a363365303a3a2f33322d3438203d3e2037343833.roa (hash: rHuxaTKbxFOG3QVLxlmDpVGC4VQ2hgu+8e9CRQbtD+o=)
                          3: 3130332e3138332e3139382e302f32332d3234203d3e2037343833.roa (hash: QxmoSLkHm5UR5jJGq6GVgmM8tmoMrY7IxvQLIUDlgG8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
                          rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:13:1e:83:64:df:f9:12:cc:31:8f:95:98:94:60:1f:ed:8a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
        Validity
            Not Before: Nov 15 07:42:40 2026 GMT
            Not After : Nov 16 11:06:40 2026 GMT
        Subject: CN=346D428EC8B81512EEADA764B53991CF21C2D3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:79:8e:7b:13:eb:ea:e5:87:fd:98:a5:b6:
                    11:42:57:7f:47:c6:c1:fc:40:e1:af:70:39:e9:c4:
                    ca:fc:a3:ea:3f:db:1a:02:4a:93:ce:09:e1:53:6c:
                    43:a7:56:31:1a:5b:4a:e0:e5:00:76:2d:96:76:ee:
                    53:ce:c7:ff:ef:77:cb:23:39:69:a6:1b:02:52:bf:
                    24:33:88:2d:fe:1b:c6:60:2a:1c:4e:f0:a0:aa:90:
                    e1:90:9c:64:d5:22:d2:9d:a4:1c:64:a1:6c:93:4d:
                    c0:ad:75:9a:65:17:b5:a1:17:a6:cd:01:e6:ae:d6:
                    05:d6:71:a5:a0:cc:c7:de:c4:1d:d6:fe:9b:c0:83:
                    bd:fe:5c:7f:ec:80:c0:07:f6:44:ff:12:59:d7:70:
                    dc:12:50:92:58:d3:3f:83:6e:88:dd:f3:3b:78:7c:
                    5a:b8:41:77:d4:f0:77:0c:31:d4:f0:83:f1:09:5b:
                    de:56:c2:0d:a2:4a:68:7d:79:01:21:c4:03:f5:1d:
                    a2:f2:b9:1a:d5:79:06:92:6d:7e:e4:24:2e:d7:e3:
                    b3:32:8d:52:13:b4:05:87:ad:fc:e2:ab:ad:d4:fd:
                    08:7c:b9:ff:fd:4b:a9:83:ed:89:f2:95:dd:8c:84:
                    df:a4:05:2c:54:1f:0e:6a:37:a0:27:4c:34:b3:96:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6D:42:8E:C8:B8:15:12:EE:AD:A7:64:B5:39:91:CF:21:C2:D3:F5
            X509v3 Authority Key Identifier:
                keyid:3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:39:03:04:f3:eb:76:6a:80:22:c7:5d:aa:b9:bc:89:30:
         a7:fb:73:a3:1d:74:28:1e:3d:bc:24:e3:98:a4:5a:c2:0d:dc:
         e9:5d:61:08:00:a8:5c:ec:5d:b1:21:22:3c:9b:b9:c7:26:e5:
         2f:b7:69:77:ff:29:06:ab:fd:a7:1c:0a:e7:99:32:c4:95:b7:
         34:c1:d2:9c:ae:22:ee:79:53:9e:61:98:ae:16:31:06:1f:34:
         19:05:29:5c:98:d7:18:4d:cf:0c:7d:a0:81:c7:fd:c9:fe:c0:
         db:bb:7e:14:bf:c4:e0:66:5b:e0:5e:1f:1e:42:12:6c:20:6d:
         12:09:4a:10:04:c7:4b:c1:0d:4b:7f:51:fb:50:77:b1:e1:f7:
         c9:6a:1f:71:96:77:93:de:d4:1e:1f:35:0d:d8:b5:42:46:b4:
         93:b8:44:5f:be:58:32:7b:00:42:dc:ef:6b:31:66:87:8f:5a:
         c2:65:be:ef:2a:38:47:91:94:6a:ca:f8:5f:6b:06:a3:98:54:
         8a:99:c5:53:4f:d3:68:d8:76:e4:88:51:5e:78:40:48:3d:95:
         88:29:61:14:73:16:29:22:62:b6:5b:d1:b0:36:2c:d2:c5:34:
         1f:45:8d:f8:6c:77:78:d0:80:b0:3b:1e:46:79:3b:43:56:41:
         ef:79:81:5e
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUIfgTHoNk3/kSzDGPlZiUYB/tis0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzRTZFOERGNEY0NkRERkUwNDhGNzFDNUFFQzg2MTZG
REQ3RDczNzAeFw0yNjExMTUwNzQyNDBaFw0yNjExMTYxMTA2NDBaMDMxMTAvBgNV
BAMTKDM0NkQ0MjhFQzhCODE1MTJFRUFEQTc2NEI1Mzk5MUNGMjFDMkQzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+onmOexPr6uWH/ZilthFCV39H
xsH8QOGvcDnpxMr8o+o/2xoCSpPOCeFTbEOnVjEaW0rg5QB2LZZ27lPOx//vd8sj
OWmmGwJSvyQziC3+G8ZgKhxO8KCqkOGQnGTVItKdpBxkoWyTTcCtdZplF7WhF6bN
Aeau1gXWcaWgzMfexB3W/pvAg73+XH/sgMAH9kT/ElnXcNwSUJJY0z+Dbojd8zt4
fFq4QXfU8HcMMdTwg/EJW95Wwg2iSmh9eQEhxAP1HaLyuRrVeQaSbX7kJC7X47My
jVITtAWHrfziq63U/Qh8uf/9S6mD7Ynyld2MhN+kBSxUHw5qN6AnTDSzlhv3AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUNG1Cjsi4FRLuradktTmRzyHC0/UwHwYDVR0j
BBgwFoAUPz5ujfT0bd/gSPccWuyGFv3X1zcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lWQy8w
LzNGM0U2RThERjRGNDZEREZFMDQ4RjcxQzVBRUM4NjE2RkREN0Q3MzcuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvM0YzRTZFOERGNEY0NkRERkUwNDhGNzFDNUFFQzg2
MTZGREQ3RDczNy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NZVkMvMC8zRjNFNkU4REY0RjQ2RERG
RTA0OEY3MUM1QUVDODYxNkZERDdENzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsM5AwTz63ZqgCLH
Xaq5vIkwp/tzox10KB49vCTjmKRawg3c6V1hCACoXOxdsSEiPJu5xyblL7dpd/8p
Bqv9pxwK55kyxJW3NMHSnK4i7nlTnmGYrhYxBh80GQUpXJjXGE3PDH2ggcf9yf7A
27t+FL/E4GZb4F4fHkISbCBtEglKEATHS8ENS39R+1B3seH3yWofcZZ3k97UHh81
Ddi1Qka0k7hEX75YMnsAQtzvazFmh49awmW+7yo4R5GUasr4X2sGo5hUipnFU0/T
aNh25IhRXnhASD2ViClhFHMWKSJitlvRsDYs0sU0H0WN+Gx3eNCAsDseRnk7Q1ZB
73mBXg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:01 2026 by rpki-client