Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File:                     3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier:          /nMGI5p4JhM72Bm9EWw2JHXzMNefArVNisA6ByQm0AQ=
Subject key identifier:   39:5E:D9:AF:CA:09:EE:38:BC:E7:2D:66:D8:82:4E:31:3C:4E:53:41
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer:       /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial:       4E0EC04D7F5C87E736AC4EF46F44BDFB01582D1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number:          FC
Signing time:             Sat 14 Nov 2026 18:24:02 +0000
Manifest this update:     Sat 14 Nov 2026 18:19:02 +0000
Manifest next update:     Sun 15 Nov 2026 22:19:02 +0000
Files and hashes:         1: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: k1MDrc4gZYLQp2IJIWM3jdf6RCy3P8/uiimsOkVKWqY=)
                          2: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 22:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0e:c0:4d:7f:5c:87:e7:36:ac:4e:f4:6f:44:bd:fb:01:58:2d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
        Validity
            Not Before: Nov 14 18:19:02 2026 GMT
            Not After : Nov 15 22:19:02 2026 GMT
        Subject: CN=395ED9AFCA09EE38BCE72D66D8824E313C4E5341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:dd:ba:38:b2:f4:c6:53:ac:c0:0e:4e:a5:
                    99:12:a1:5f:0b:65:60:cb:82:a2:34:95:4a:2e:5e:
                    95:76:42:e0:ab:9d:48:64:1f:df:e5:fd:2f:a1:20:
                    fe:9e:f0:c9:c6:92:70:2d:a0:93:c5:ba:26:4a:ee:
                    5e:96:9e:4a:ca:8b:ab:76:dc:de:48:f2:07:db:a9:
                    98:3c:24:db:a3:56:ad:66:ce:ba:de:b8:fb:ba:0e:
                    ba:1b:12:b0:52:0b:1a:d4:13:2d:72:d3:c5:13:32:
                    44:f9:20:d6:af:3c:05:ca:47:13:42:b7:ad:28:c9:
                    73:24:16:f4:a4:87:1a:9a:a8:6d:30:5e:27:cf:ee:
                    66:84:8a:45:50:9f:4c:ce:15:f7:58:2a:2e:87:7c:
                    84:bd:c2:ca:eb:6e:19:a3:68:7b:24:5d:a8:c3:57:
                    e1:c3:ca:2d:69:e7:f8:86:47:75:88:c8:4f:e8:08:
                    e2:e1:63:52:a3:70:5b:7b:e5:63:d4:49:35:df:9e:
                    7b:b0:61:ca:da:f8:6c:25:60:2d:b2:16:69:97:8e:
                    2e:be:8a:b2:32:df:0a:8b:96:e6:90:26:ab:7d:86:
                    95:fd:e2:13:69:4c:9f:1a:e6:a3:36:4f:21:36:c3:
                    74:71:4d:1b:55:2e:30:6d:61:91:5f:f1:52:e6:79:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:D9:AF:CA:09:EE:38:BC:E7:2D:66:D8:82:4E:31:3C:4E:53:41
            X509v3 Authority Key Identifier:
                keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:36:8e:07:19:6d:f0:e9:27:99:d5:e0:4e:69:a6:15:96:28:
         db:66:d2:ab:34:20:e4:ca:77:9a:d6:12:83:6d:94:ba:fd:de:
         67:72:fb:e9:6f:50:3c:06:1c:cc:af:3d:71:f7:df:d6:d0:76:
         e1:64:1d:ba:ea:d3:43:0c:0d:1b:90:5d:de:8c:e8:eb:ec:f2:
         5f:c5:7a:21:85:b3:2c:f1:f0:36:ec:a2:f6:3d:61:ef:61:04:
         df:30:58:87:1f:6e:64:1b:b9:01:8b:24:c6:7c:91:5f:bf:9b:
         e5:64:b8:e4:3b:c4:b0:00:5f:60:8e:de:5b:8d:a4:f9:33:3e:
         94:25:c2:b2:23:3d:2e:62:4b:62:01:f8:b0:2f:fc:97:94:5c:
         8f:4f:94:6b:d2:7f:60:a5:55:19:d0:28:61:a6:90:63:2e:5a:
         0c:f4:ba:53:5d:07:10:73:fd:00:7e:7e:a6:72:46:03:3a:67:
         df:35:f4:c6:16:20:ef:a5:f9:a7:45:18:3a:d0:75:19:d0:03:
         7e:2e:dc:af:ba:7c:55:7b:b2:a9:78:44:65:44:55:fb:1c:28:
         96:18:94:cc:2d:be:76:d7:04:a9:2e:d9:e2:10:d2:11:ff:df:
         14:69:45:d8:54:eb:d9:a1:3a:cc:b5:a3:8b:df:9a:81:cc:1b:
         ea:d2:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:57 2026 by rpki-client