Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
File:                     671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json)
Hash identifier:          TO33JEJ25dWKbjWQTz0rN42U8/BnpHWb7iP1r4HovZA=
Subject key identifier:   E9:A9:5C:F7:65:F1:A2:28:F7:25:30:DB:A0:B1:77:4F:35:2B:C2:8B
Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
Certificate issuer:       /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Certificate serial:       2E08484576AC4843F87CF2D7D372B4F16E5B7715
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
Manifest number:          C9
Signing time:             Sat 03 Oct 2026 19:47:02 +0000
Manifest this update:     Sat 03 Oct 2026 19:42:02 +0000
Manifest next update:     Sun 04 Oct 2026 19:59:02 +0000
Files and hashes:         1: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=)
                          2: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=)
                          3: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=)
                          4: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=)
                          5: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: DBxHdCofpwyzMZ1uQvII+k81SouEcQtd5Yuc0i3kauw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
                          rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:48:45:76:ac:48:43:f8:7c:f2:d7:d3:72:b4:f1:6e:5b:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
        Validity
            Not Before: Oct  3 19:42:02 2026 GMT
            Not After : Oct  4 19:59:02 2026 GMT
        Subject: CN=E9A95CF765F1A228F72530DBA0B1774F352BC28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:fa:54:42:70:f6:b6:ad:31:57:fe:b3:8d:
                    cd:ab:cd:63:cd:15:2e:45:b7:25:a9:f0:4b:07:0e:
                    6c:6a:4e:a8:d0:d6:c0:52:61:91:00:07:f5:d6:1c:
                    23:6f:d6:b8:90:b2:1f:9c:2a:5d:74:ac:01:19:0e:
                    a3:54:64:b3:24:ab:68:85:f2:b5:67:5a:7c:ee:9c:
                    80:91:76:ad:80:48:3c:b9:89:f1:ff:8a:8f:b8:33:
                    c9:50:0a:ef:87:47:7e:e5:45:79:98:1a:d3:3d:9a:
                    71:70:f4:db:6c:b5:61:dc:eb:8a:72:a5:78:dd:0f:
                    1b:4b:d4:b0:d7:5d:b8:ce:57:dc:64:b5:af:7e:1e:
                    d0:cb:a3:28:3c:9f:ab:2b:6e:95:d0:be:dd:81:f9:
                    c9:6a:5c:b4:47:a6:2b:1a:c6:f3:6b:e1:cd:11:9e:
                    fc:6d:e8:71:99:8f:d0:ac:90:5e:49:19:6e:25:db:
                    cc:f2:65:99:5d:e5:f7:ce:03:94:34:6f:9a:55:8b:
                    ef:ff:2b:65:5c:a7:fc:b0:41:78:4f:ed:a9:3a:24:
                    fe:49:f2:56:c2:17:46:81:4c:cc:43:cb:bc:0c:5d:
                    90:03:db:5e:1f:81:92:6e:8a:c9:a7:6c:e3:0a:08:
                    83:c9:f8:24:21:50:60:04:ef:2e:6a:ca:91:7e:da:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:5C:F7:65:F1:A2:28:F7:25:30:DB:A0:B1:77:4F:35:2B:C2:8B
            X509v3 Authority Key Identifier:
                keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:17:19:01:8b:2a:84:56:f9:f1:93:36:b4:de:3d:98:7c:e4:
         0a:ad:4f:61:f9:08:77:e3:9a:ba:f3:36:21:7a:f6:7e:fb:4c:
         1b:f3:8a:ba:7f:d3:23:fd:a6:7a:d0:88:6f:94:c3:58:bb:a0:
         fe:b4:0a:8f:42:40:06:46:01:67:ae:28:3f:bc:ca:f1:10:d5:
         ac:ea:1b:17:49:69:2e:7d:50:41:54:73:cb:c1:d8:07:ed:95:
         3d:ca:9c:54:6c:a3:e9:d2:8e:af:e6:87:ad:85:99:b7:4b:26:
         44:e0:7a:d2:3d:36:91:54:66:4f:58:a4:c1:25:b5:57:58:3b:
         2b:1c:36:5e:fa:f7:a2:53:ee:b3:c9:90:a4:e1:6c:8b:a4:75:
         fe:dd:7a:82:31:70:8b:9c:cf:94:a0:31:17:c9:20:c2:c4:62:
         55:9c:ea:38:f4:d9:c0:e4:78:5e:85:fd:4d:de:82:60:e3:74:
         11:1a:95:1f:94:d8:5a:e1:ee:91:a5:7b:95:c2:e4:11:68:c9:
         75:09:9d:e0:63:ff:69:5c:ea:15:31:29:21:fb:db:46:35:49:
         a2:45:b5:63:32:ce:52:9b:14:64:59:8a:d9:7e:bd:95:78:9c:
         bb:4e:32:16:6a:20:37:06:06:66:90:ea:0d:71:28:41:53:83:
         1e:e3:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:02:57 2026 by rpki-client