Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
File:                     E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json)
Hash identifier:          UCeD9HNtccDEUzL52+Qd4u0+myFqpcv4szXmklTDcPE=
Subject key identifier:   A3:77:6A:DD:85:45:31:0C:EE:B7:F6:57:6E:71:F5:25:33:D3:B9:B8
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Certificate issuer:       /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial:       1100B6D4EA9FA6D6137E996E04A7E70E9E2E5605
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
Manifest number:          BB
Signing time:             Thu 24 Sep 2026 09:59:24 +0000
Manifest this update:     Thu 24 Sep 2026 09:54:24 +0000
Manifest next update:     Fri 25 Sep 2026 10:27:24 +0000
Files and hashes:         1: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=)
                          2: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=)
                          3: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=)
                          4: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: dlUx25aSmqbPdYw9GXulvwdYBr7m2rcHSeIkwL4OzHI=)
                          5: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=)
                          6: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=)
                          7: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
                          rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:00:b6:d4:ea:9f:a6:d6:13:7e:99:6e:04:a7:e7:0e:9e:2e:56:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
        Validity
            Not Before: Sep 24 09:54:24 2026 GMT
            Not After : Sep 25 10:27:24 2026 GMT
        Subject: CN=A3776ADD8545310CEEB7F6576E71F52533D3B9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:3b:72:22:99:ad:a1:d4:05:93:a9:96:0d:
                    5a:c7:fa:d3:19:6d:61:42:8e:95:74:c8:b3:3a:dd:
                    96:f2:e4:46:c5:5f:c9:e8:40:79:aa:de:ba:3d:6c:
                    5f:a6:91:67:f9:1a:59:df:a2:59:1e:b9:02:95:20:
                    cc:06:32:d7:66:67:df:eb:59:4d:24:7c:4a:de:58:
                    ca:63:e9:75:f1:5d:ca:4e:0c:ae:52:3a:13:b1:0f:
                    18:04:15:dd:16:73:8b:9e:a4:01:2f:6e:b1:4a:5a:
                    e7:7e:bb:6e:24:c4:e4:eb:31:da:2c:59:15:ca:6d:
                    e4:16:a8:b9:a4:cd:bf:1d:c7:8f:5f:92:28:c2:76:
                    65:a2:ba:ef:c1:17:1a:7f:53:82:b0:53:23:1b:ec:
                    d7:3a:40:9f:92:d0:e4:4d:94:1c:df:f2:ce:5a:1e:
                    0d:95:2a:a7:9a:b5:4d:26:29:3c:a6:38:1a:21:b8:
                    ad:80:87:a6:1e:bf:6d:31:7d:78:8c:37:9a:46:2f:
                    96:d4:00:ba:4e:85:ef:c4:bc:04:b7:48:1f:5b:40:
                    b5:f6:15:cd:6f:dd:9d:06:2d:25:90:b6:86:97:e1:
                    2a:8b:97:ac:42:32:54:11:65:0c:b9:3b:82:1b:ed:
                    b8:a2:fe:80:50:26:9d:b5:8e:23:1b:eb:c1:c2:39:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:6A:DD:85:45:31:0C:EE:B7:F6:57:6E:71:F5:25:33:D3:B9:B8
            X509v3 Authority Key Identifier:
                keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:ec:9f:03:f5:f3:d0:3c:20:95:15:23:a2:de:9b:95:c5:
         ba:15:8f:1c:3e:2e:4d:ab:9c:f2:ec:6d:a2:4a:a9:c6:e4:58:
         04:24:dc:78:a4:22:6b:70:28:9f:42:d1:47:76:3e:36:34:79:
         cd:71:fe:10:ff:27:48:58:d5:16:02:59:7e:aa:c7:ec:e4:52:
         dc:39:b8:f9:91:1e:f0:47:32:4b:49:3a:6d:15:ad:e3:68:fb:
         6d:60:01:f3:ca:e9:dc:71:80:c1:88:51:24:f7:54:ad:f9:f9:
         76:a5:2c:54:3e:89:fb:7f:9e:b0:32:cf:47:fc:91:f8:97:4e:
         37:35:6a:62:cf:db:69:7e:d3:83:0d:b1:fb:6f:26:ce:bd:af:
         6b:fe:47:23:4f:cc:18:c1:82:fa:94:30:02:b6:c8:e7:91:67:
         3d:8c:c3:12:ee:39:dc:99:58:82:d7:85:dc:dc:f7:b0:28:2f:
         95:56:06:4c:71:2b:82:8a:f0:e4:1c:f4:16:ce:55:c8:47:b8:
         2a:b1:07:bf:0e:47:e0:98:10:f3:39:60:27:d5:38:3f:f0:9b:
         a4:d1:22:62:b6:05:96:f3:99:d2:c8:35:f1:ca:80:c7:21:7b:
         3d:e2:03:37:ca:ae:87:e5:4f:2f:6d:3d:c3:f4:dd:84:c8:b6:
         b3:05:4c:57
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUEQC21OqfptYTfpluBKfnDp4uVgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRB
RjMwOTM4RjAeFw0yNjA5MjQwOTU0MjRaFw0yNjA5MjUxMDI3MjRaMDMxMTAvBgNV
BAMTKEEzNzc2QUREODU0NTMxMENFRUI3RjY1NzZFNzFGNTI1MzNEM0I5QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTjtyIpmtodQFk6mWDVrH+tMZ
bWFCjpV0yLM63Zby5EbFX8noQHmq3ro9bF+mkWf5GlnfolkeuQKVIMwGMtdmZ9/r
WU0kfEreWMpj6XXxXcpODK5SOhOxDxgEFd0Wc4uepAEvbrFKWud+u24kxOTrMdos
WRXKbeQWqLmkzb8dx49fkijCdmWiuu/BFxp/U4KwUyMb7Nc6QJ+S0ORNlBzf8s5a
Hg2VKqeatU0mKTymOBohuK2Ah6Yev20xfXiMN5pGL5bUALpOhe/EvAS3SB9bQLX2
Fc1v3Z0GLSWQtoaX4SqLl6xCMlQRZQy5O4Ib7bii/oBQJp21jiMb68HCOTV1AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUo3dq3YVFMQzut/ZXbnH1JTPTubgwHwYDVR0j
BBgwFoAU6LOPrRvJ1+QmYD9sIEVmxK8wk48wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAv
RThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9FOEIzOEZBRDFCQzlEN0U0MjY2MDNGNkMyMDQ1NjZD
NEFGMzA5MzhGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAvRThCMzhGQUQxQkM5RDdFNDI2
NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADyC7J8D9fPQPCCVFSOi
3puVxboVjxw+Lk2rnPLsbaJKqcbkWAQk3HikImtwKJ9C0Ud2PjY0ec1x/hD/J0hY
1RYCWX6qx+zkUtw5uPmRHvBHMktJOm0VreNo+21gAfPK6dxxgMGIUST3VK35+Xal
LFQ+ift/nrAyz0f8kfiXTjc1amLP22l+04MNsftvJs69r2v+RyNPzBjBgvqUMAK2
yOeRZz2MwxLuOdyZWILXhdzc97AoL5VWBkxxK4KK8OQc9BbOVchHuCqxB78OR+CY
EPM5YCfVOD/wm6TRImK2BZbzmdLINfHKgMchez3iAzfKroflTy9tPcP03YTItrMF
TFc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:08:59 2026 by rpki-client