Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
File:                     EC1DB3CB7CE6162748BA2956BC1706446561D664.mft (raw, json)
Hash identifier:          G14iY3141NRX0SzfoPiZ7HP0osRWYohLMy2MBGXDJjg=
Subject key identifier:   1C:E6:9E:7A:2A:D6:5D:69:63:8A:12:3E:31:C7:09:C7:99:FC:BC:B4
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Certificate issuer:       /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial:       559862616FF0B5C9A89F7585A153B54AC7DE5036
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
Manifest number:          BA
Signing time:             Sat 26 Sep 2026 18:01:48 +0000
Manifest this update:     Sat 26 Sep 2026 17:56:48 +0000
Manifest next update:     Sun 27 Sep 2026 20:23:48 +0000
Files and hashes:         1: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (hash: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=)
                          2: EC1DB3CB7CE6162748BA2956BC1706446561D664.crl (hash: 6b4MxQXPfo9U/CuoZYpoWbL6O/XqvUkL/3AlEERYt0E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
                          rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:98:62:61:6f:f0:b5:c9:a8:9f:75:85:a1:53:b5:4a:c7:de:50:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
        Validity
            Not Before: Sep 26 17:56:48 2026 GMT
            Not After : Sep 27 20:23:48 2026 GMT
        Subject: CN=1CE69E7A2AD65D69638A123E31C709C799FCBCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:3d:70:d8:b2:93:d1:99:c5:39:4a:74:2e:
                    d4:fd:e4:f8:c1:bc:7f:54:f8:4d:b9:0a:ec:18:6f:
                    a7:97:5d:c6:a5:c5:aa:d7:00:cf:7e:58:23:a8:2d:
                    d0:6e:10:82:34:ae:33:0d:8c:fe:79:b0:92:88:64:
                    52:21:97:e1:b5:4f:92:f0:fe:10:4e:36:6e:d8:73:
                    3e:dd:11:3d:17:06:c0:0a:d0:f2:64:74:17:97:0f:
                    d8:0a:17:e5:6e:8e:f0:4c:f0:9b:f9:ec:b1:78:2d:
                    17:54:7b:6b:e9:39:38:e8:f1:dd:ac:b5:ba:8f:78:
                    d2:00:4e:00:d7:2d:34:84:de:09:fa:5c:a5:b8:ad:
                    7b:e1:da:7e:a9:fa:12:3a:42:f8:be:71:6c:7c:f1:
                    33:bc:fc:45:a7:1c:74:7f:0a:46:f2:23:90:93:a1:
                    ce:6f:c0:47:b7:72:c8:d1:bb:1d:0b:f5:b9:62:06:
                    8e:f4:eb:77:3e:eb:dd:12:16:85:ff:0e:d3:b1:29:
                    8a:c5:1b:84:98:d9:50:14:ad:3b:6b:9d:c9:7d:dd:
                    04:71:9d:9f:57:60:f9:06:95:75:52:d0:36:7f:96:
                    35:43:89:ca:32:0d:f4:f4:e8:13:d9:19:c3:68:6c:
                    7c:e8:30:41:7d:d9:1c:04:05:b2:ec:3d:1f:f0:9a:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E6:9E:7A:2A:D6:5D:69:63:8A:12:3E:31:C7:09:C7:99:FC:BC:B4
            X509v3 Authority Key Identifier:
                keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e5:6a:cf:db:6d:4c:46:4a:33:8c:7b:0a:b2:93:1c:e2:45:
         90:57:49:f7:b1:fd:d9:26:2f:90:f7:b5:58:f2:4b:9a:5c:cf:
         af:38:72:89:b5:6f:50:34:29:9c:49:42:c5:62:ef:64:37:ba:
         e0:4d:02:a2:3c:70:85:29:16:b7:dc:f0:0a:88:4b:7b:7d:da:
         1d:ff:c2:5e:34:51:97:c4:3b:c1:fc:b5:10:26:cc:04:09:ae:
         88:29:e3:bf:45:ab:ea:8c:54:da:2e:1c:f7:ef:10:66:54:29:
         7e:b6:ba:ee:04:04:0e:b6:74:27:6b:1f:c9:b9:e0:d0:79:08:
         17:66:e3:b7:f9:ed:92:ef:eb:52:05:66:55:c2:d5:f7:a3:31:
         a5:55:63:e5:39:06:22:07:08:c8:03:ab:75:b5:6e:76:21:6b:
         b4:10:eb:3f:1f:fe:f0:00:b3:99:ae:08:44:c8:1e:01:2f:e0:
         f9:d8:4d:12:24:53:53:ac:ec:da:8f:36:18:31:01:93:10:61:
         1a:a6:e8:1a:9c:23:67:ab:5f:c4:b8:69:37:7a:bb:53:66:4f:
         ac:18:86:d2:f5:12:1f:af:09:bb:d2:e6:57:4f:05:4f:22:39:
         e8:26:6b:38:7c:34:ba:8d:22:03:8e:1d:a3:ef:61:18:08:76:
         be:de:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:00:41 2026 by rpki-client