Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
File:                     3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft (raw, json)
Hash identifier:          ylCJo1sNYVDppbA2KvmU1eb+ORota7i93QV4lG9XU2E=
Subject key identifier:   F4:4D:77:EB:AD:40:C3:70:0B:13:54:E0:E9:BD:5A:BF:69:54:79:EB
Authority key identifier: 3C:9A:D0:2F:B3:CB:E1:E8:73:D8:66:42:0C:38:F0:9B:FA:79:52:B1
Certificate issuer:       /CN=3C9AD02FB3CBE1E873D866420C38F09BFA7952B1
Certificate serial:       4FDB531FA50D5C7BE0145A40725EEE07A3C6102C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
Manifest number:          B7
Signing time:             Fri 25 Sep 2026 01:40:32 +0000
Manifest this update:     Fri 25 Sep 2026 01:35:32 +0000
Manifest next update:     Sat 26 Sep 2026 01:56:32 +0000
Files and hashes:         1: 3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl (hash: v6j91K4S8be8xDoWWdNFJImMZy1IfnQcPWyYOXUEKQU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl
                          rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 01:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:53:1f:a5:0d:5c:7b:e0:14:5a:40:72:5e:ee:07:a3:c6:10:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C9AD02FB3CBE1E873D866420C38F09BFA7952B1
        Validity
            Not Before: Sep 25 01:35:32 2026 GMT
            Not After : Sep 26 01:56:32 2026 GMT
        Subject: CN=F44D77EBAD40C3700B1354E0E9BD5ABF695479EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:48:e8:7f:4b:2c:8a:81:a7:77:6d:a0:6c:
                    09:b6:eb:86:ee:f4:ed:2d:bd:07:6d:bd:74:34:25:
                    42:9f:9d:53:79:8a:0f:14:20:f9:91:39:ce:46:27:
                    8a:95:94:94:15:0b:32:40:05:d0:fb:27:81:ae:8c:
                    07:16:c3:83:db:79:a4:e8:bc:ae:7a:63:5f:10:44:
                    7f:d0:39:fe:6e:2a:ed:2d:28:31:14:32:00:2f:99:
                    53:d4:ea:2c:dd:5d:7d:aa:40:b9:8e:78:e3:fb:12:
                    70:bc:51:32:20:11:c1:b4:f3:fc:82:71:96:23:21:
                    3d:43:2f:f1:bb:26:2c:39:8b:8a:7e:11:51:d7:80:
                    cf:a1:7c:8c:30:28:b2:b7:cd:c1:ae:94:b2:46:57:
                    47:e1:37:b2:15:ef:f8:15:b0:df:92:cf:59:6a:07:
                    55:b0:ce:73:43:02:e0:8f:b1:cc:6c:ab:c3:45:53:
                    7b:b1:19:89:76:a9:ab:43:43:8d:ed:dc:d0:4c:96:
                    f3:1b:a1:0f:9e:d1:56:76:eb:90:cf:1c:8d:1e:9d:
                    66:c5:e0:f6:e4:00:50:6d:d2:27:21:3e:b5:98:e0:
                    95:89:9d:33:ee:4a:21:b9:a0:10:72:46:70:1a:a2:
                    34:07:fc:28:ee:a2:65:e5:7e:aa:d6:3a:91:ed:3b:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4D:77:EB:AD:40:C3:70:0B:13:54:E0:E9:BD:5A:BF:69:54:79:EB
            X509v3 Authority Key Identifier:
                keyid:3C:9A:D0:2F:B3:CB:E1:E8:73:D8:66:42:0C:38:F0:9B:FA:79:52:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:f1:18:c4:9a:2d:1d:9d:8d:47:58:92:b8:78:9b:7e:31:
         28:b6:fb:49:60:11:03:63:69:18:f8:00:77:d6:15:c6:e1:92:
         bb:5e:26:11:84:d4:ef:a3:5c:e2:34:ae:d6:0e:11:6c:fd:91:
         78:9d:cc:08:d4:a8:8e:86:79:39:b4:5d:de:62:b9:c7:82:90:
         ea:9c:e7:8b:c3:10:87:84:15:33:60:ef:b8:ba:3a:f4:5f:4b:
         ba:32:0a:cf:17:d1:8e:35:d9:23:44:d9:c6:81:b3:7d:05:1a:
         1b:f0:7d:50:38:69:9d:0b:70:a5:59:b2:b2:3b:9d:29:5f:6a:
         c0:c2:fa:8a:df:56:73:b0:e3:21:bb:1c:6c:9d:9b:d2:4a:2d:
         7d:f0:9a:9e:31:37:b8:b3:2d:1b:f9:fa:4d:5f:0a:8b:39:1a:
         5c:a7:04:ce:4b:ce:49:e2:18:6b:89:d3:a9:c1:79:ce:58:d8:
         28:f8:aa:58:b0:42:75:3d:2a:ec:c9:1d:64:8e:fc:e3:88:65:
         23:0a:74:0d:87:36:f8:93:25:40:35:f8:6c:5d:de:2d:37:6d:
         2d:af:5e:59:e6:80:d9:d1:f6:cc:1c:d3:1e:9a:91:33:0a:ea:
         44:9c:70:85:ec:bd:7a:64:61:de:fc:02:ba:68:12:6e:a5:ea:
         c7:c3:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:09:02 2026 by rpki-client