Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
File:                     137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json)
Hash identifier:          Z00AmXYnPqbZQ7EbKDV3sZYyEFDI5wuFWBs1JgFM6Y8=
Subject key identifier:   A8:5C:42:DE:4E:34:A4:A9:9F:98:97:E3:8B:1C:2A:B0:C2:EF:B6:98
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Certificate issuer:       /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial:       503383D4D0BA94AB3AEA8FC5E8BB77372D68FDBE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
Manifest number:          B8
Signing time:             Wed 23 Sep 2026 23:34:13 +0000
Manifest this update:     Wed 23 Sep 2026 23:29:13 +0000
Manifest next update:     Fri 25 Sep 2026 00:32:13 +0000
Files and hashes:         1: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=)
                          2: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: T3c2/H20EhNkzdGcZAyE4DEJvzLQzktg0kp32Q/fPro=)
                          3: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=)
                          4: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
                          rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 00:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:83:d4:d0:ba:94:ab:3a:ea:8f:c5:e8:bb:77:37:2d:68:fd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
        Validity
            Not Before: Sep 23 23:29:13 2026 GMT
            Not After : Sep 25 00:32:13 2026 GMT
        Subject: CN=A85C42DE4E34A4A99F9897E38B1C2AB0C2EFB698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:db:90:7f:59:27:9b:f1:dd:55:2b:10:64:
                    31:09:71:6f:01:fd:57:d2:a2:de:da:2b:d8:b2:f5:
                    ce:ef:4b:4c:5a:4d:f7:b4:95:47:14:cb:eb:c1:9e:
                    8e:9a:4f:dd:f4:58:93:ca:25:f5:1c:d8:93:2b:2f:
                    ee:a0:94:5a:a1:5e:14:0c:c8:75:0b:67:1a:b6:19:
                    30:41:91:6d:aa:2c:3b:c5:52:e3:9c:a7:98:94:4a:
                    d4:23:78:18:aa:80:bc:13:02:55:42:af:4e:4a:0e:
                    3d:f7:66:f8:a0:10:26:9d:b2:56:62:e1:34:05:54:
                    b1:2c:b1:cd:d3:07:6a:2b:0d:c8:c4:eb:fe:02:45:
                    44:3b:83:8a:66:20:61:e6:59:db:d5:ca:c4:03:9d:
                    1b:ea:97:f7:75:5d:5a:2c:ee:0e:15:f4:a4:5d:ee:
                    4c:23:5b:29:8e:dd:ea:f0:0b:d3:36:91:e6:c7:fd:
                    29:13:17:3a:3d:f4:03:ad:1b:1b:a7:0c:4d:16:3c:
                    86:9e:58:52:cb:5a:63:04:12:33:f0:74:3e:60:b0:
                    41:64:c8:8b:c5:3b:7e:1e:82:0c:1e:1e:a7:19:04:
                    a7:5f:05:40:0b:95:93:00:59:2d:e5:ec:01:bc:18:
                    ad:50:cc:b0:50:46:b1:2b:a9:94:82:87:9d:d3:67:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:42:DE:4E:34:A4:A9:9F:98:97:E3:8B:1C:2A:B0:C2:EF:B6:98
            X509v3 Authority Key Identifier:
                keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:f4:f2:5e:4b:a5:b4:ff:07:25:41:da:69:5e:e1:3e:0e:
         57:4b:a1:76:e6:ab:8f:72:21:f2:fa:03:51:22:5e:49:d9:74:
         dd:c8:e1:55:08:18:37:4a:f8:a5:56:9b:31:ad:3a:2c:fb:44:
         a9:50:76:10:7f:7f:82:39:11:4d:fd:d6:79:39:d3:53:2b:c0:
         67:f5:4e:a7:fb:e7:a7:e1:0d:c1:e1:5b:be:92:7f:91:31:24:
         31:21:e9:b1:36:58:88:38:75:82:f5:92:92:05:c3:5f:29:ca:
         02:8b:cf:2f:e0:0a:ef:cf:dc:80:60:7a:83:f3:43:df:c9:31:
         34:da:76:62:01:1c:41:cd:dd:3d:8f:91:55:f0:0e:75:7a:1d:
         f0:35:c7:9f:78:c5:83:3f:ee:3a:4a:92:44:44:14:34:0d:d6:
         e8:10:ce:33:18:ff:a4:0e:80:9d:34:0a:1a:06:9b:2c:be:35:
         56:23:b4:83:19:46:17:78:cc:e8:0c:4e:a7:85:79:a5:69:9a:
         52:af:13:1b:22:bd:8c:84:e2:1a:74:54:44:03:53:fa:f6:dd:
         13:e6:4c:ad:33:81:17:75:ac:93:29:26:e1:bb:ac:28:1e:9e:
         2a:6a:94:b8:3d:52:2d:a7:89:1d:5a:b6:7f:73:4d:db:2f:ea:
         14:4b:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:35:26 2026 by rpki-client