Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File:                     E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier:          qymTmmEgr6+1ZNxrZmV/UHAhxb1dy6rPo5W+RE8wrBY=
Subject key identifier:   8E:E7:5B:81:C1:38:A6:94:47:8F:8F:10:B3:53:36:47:1C:7A:F5:6B
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       216A2FD6C8F9424718F101C25D3F9113EF34DA0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number:          82
Signing time:             Fri 14 Aug 2026 22:33:36 +0000
Manifest this update:     Fri 14 Aug 2026 22:28:36 +0000
Manifest next update:     Sat 15 Aug 2026 23:55:36 +0000
Files and hashes:         1: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: hNgZHV9DjQxVYD8I9kpdz4mpY8mBohurzSSFBusU98Y=)
                          2: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:2f:d6:c8:f9:42:47:18:f1:01:c2:5d:3f:91:13:ef:34:da:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: Aug 14 22:28:36 2026 GMT
            Not After : Aug 15 23:55:36 2026 GMT
        Subject: CN=8EE75B81C138A694478F8F10B35336471C7AF56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:ff:98:65:30:5a:67:96:8f:b3:4e:af:19:
                    2c:ad:62:ac:00:b5:f9:99:3c:e4:06:2e:32:ed:a7:
                    08:8e:21:29:bb:be:68:eb:84:09:f4:fd:05:32:49:
                    8e:0f:1f:cb:49:31:5e:f4:1e:a5:9c:69:17:0d:0c:
                    ac:75:2a:ca:06:cb:8c:63:0a:a9:23:b9:11:dd:95:
                    ce:9e:aa:00:64:a0:03:48:ca:01:6f:7b:25:b2:8d:
                    7e:b4:a7:ab:af:c0:cc:51:58:c0:b7:8e:09:b5:c9:
                    4a:5a:bb:0a:80:2e:86:7b:61:46:fc:10:b2:f1:fa:
                    10:61:a1:ca:16:b4:a8:e8:f9:18:60:0e:84:65:cd:
                    3a:8d:a8:36:a8:4e:de:bf:00:70:3a:2b:6f:e4:c1:
                    e9:cd:fc:0a:d9:d4:38:05:98:6a:fa:cd:a7:67:1d:
                    04:2e:ea:4d:46:8f:cc:b0:a5:b2:c8:db:3c:ff:e2:
                    5b:50:35:9f:07:e3:c6:01:aa:7d:3f:6a:e3:05:aa:
                    a0:30:0a:3e:d3:b3:30:59:6b:f8:54:51:21:22:1a:
                    bb:9a:5a:90:fc:25:99:a8:bd:9e:ca:5f:ac:99:fc:
                    3f:b3:a2:44:37:23:ca:86:49:e2:86:d1:08:ab:cb:
                    72:95:65:e0:5e:e8:e3:bc:64:6d:14:ab:7a:dd:b8:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E7:5B:81:C1:38:A6:94:47:8F:8F:10:B3:53:36:47:1C:7A:F5:6B
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:86:b2:2e:aa:e7:a3:e2:11:46:2a:3e:72:93:3a:91:b5:
         94:bb:df:4e:cd:6e:7c:28:82:ec:88:69:5b:fd:6f:8a:ea:d3:
         60:ff:bf:b8:c8:75:b1:47:58:40:81:2b:b1:98:d7:18:25:2b:
         d2:e2:4a:c7:d0:8b:c9:e4:2f:63:4f:01:90:15:8a:10:dd:54:
         a7:cf:c4:3f:b7:a7:56:81:92:69:db:80:3e:dd:0c:79:9e:ab:
         bb:ba:0e:60:3c:5b:7b:cd:d8:28:53:5d:2b:c2:a9:76:27:12:
         e0:22:f3:d5:d9:fd:92:3b:69:a5:2b:eb:0b:5f:68:f7:c3:2e:
         f5:66:9f:90:84:ce:72:c2:4e:97:be:0a:fb:0d:03:50:73:25:
         6d:13:90:c8:96:b0:5c:38:dd:c6:6a:31:54:a5:e6:5e:b9:da:
         39:78:5c:ff:61:1c:c5:de:aa:da:09:44:2f:38:e9:d3:69:9f:
         60:eb:95:cb:c3:0e:6b:b6:50:f3:59:84:f5:a1:8a:a5:89:3b:
         42:89:8a:6c:a4:75:cd:8f:56:8a:e0:72:45:cd:db:24:8e:fc:
         21:f4:37:61:3b:e2:3c:3e:48:4a:a1:b7:69:d1:35:88:cd:a6:
         80:69:14:31:80:13:e8:d2:21:e2:72:82:06:75:e0:f1:49:ff:
         cd:a9:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:45 2026 by rpki-client