Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
File:                     30886A5C2BBD980DCAD17065B483FDADE1588115.mft (raw, json)
Hash identifier:          d+DI8oH2JpHnqsu9Vw0klLlTyHL0dvR5aFQxxR3hSb0=
Subject key identifier:   28:26:81:97:98:02:2F:B4:65:F8:77:36:4D:BC:A4:9C:00:C1:1B:7F
Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15
Certificate issuer:       /CN=30886A5C2BBD980DCAD17065B483FDADE1588115
Certificate serial:       5422DAB78394C9B3A99AE7B8505F5E8C3D28160E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
Manifest number:          C4
Signing time:             Sun 04 Oct 2026 01:33:37 +0000
Manifest this update:     Sun 04 Oct 2026 01:28:37 +0000
Manifest next update:     Mon 05 Oct 2026 04:42:37 +0000
Files and hashes:         1: 3130332e3138302e31342e302f32332d3234203d3e203633383933.roa (hash: dIUSmyYxKhCOy30LHVb9g7/r4ZV90ZHq3KAUNhUgfNQ=)
                          2: 323430303a353036303a3a2f33322d3634203d3e203633383933.roa (hash: BHydVbU3JrPLjHj9vIjP5kSoTesZAdHvlP38+Eg+13A=)
                          3: 30886A5C2BBD980DCAD17065B483FDADE1588115.crl (hash: 3IW/Cf98UNdz9YWlBkaXTNmwuIrcotf0JyfI7EE6K9k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 04:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:22:da:b7:83:94:c9:b3:a9:9a:e7:b8:50:5f:5e:8c:3d:28:16:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115
        Validity
            Not Before: Oct  4 01:28:37 2026 GMT
            Not After : Oct  5 04:42:37 2026 GMT
        Subject: CN=2826819798022FB465F877364DBCA49C00C11B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:70:fe:b8:09:31:a8:ab:25:71:1c:12:bf:
                    94:c4:d7:cf:fc:34:76:8b:36:19:90:bc:de:45:5b:
                    35:1e:a3:42:75:b6:80:45:a6:72:9e:74:9b:af:c2:
                    96:be:42:9a:d2:28:0a:5c:ab:ce:d5:0a:2e:f8:a1:
                    18:2b:87:39:1a:68:c6:8c:bf:9d:6a:f1:9f:fe:29:
                    f4:43:8d:18:cc:37:84:8f:91:10:cd:2f:a8:88:f0:
                    42:f5:82:54:3f:dd:ce:0d:26:9e:0b:c1:5b:0d:be:
                    4a:86:95:02:ad:cb:36:96:0e:59:90:e8:63:70:59:
                    e4:9a:32:41:2b:2b:ea:ee:04:0e:41:aa:f5:8d:b3:
                    9c:d7:97:76:cf:91:02:a7:2b:06:f0:36:58:39:39:
                    f3:2c:1f:81:cb:62:a4:42:d8:e4:4e:8a:4b:bd:11:
                    24:c1:d7:b2:e5:68:f7:ac:22:9c:cf:df:30:8e:df:
                    01:fa:fa:d5:52:5f:a8:3a:98:05:a8:03:46:bb:69:
                    e1:ad:b0:44:7f:6d:cb:70:59:31:a5:d7:03:64:de:
                    98:76:c4:93:83:b4:6f:5f:90:f7:64:3d:2f:e3:5b:
                    f9:10:5d:19:5c:95:21:19:d9:cc:47:fa:fe:48:32:
                    9e:ab:81:20:c0:0f:de:c7:66:46:43:a4:19:7d:49:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:26:81:97:98:02:2F:B4:65:F8:77:36:4D:BC:A4:9C:00:C1:1B:7F
            X509v3 Authority Key Identifier:
                keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:0f:c4:f0:8a:d1:b1:08:1a:16:f6:eb:10:ba:03:ca:cb:
         6a:8c:d0:ef:f0:bc:46:54:4a:d1:6f:c7:f5:26:1c:3d:1a:ca:
         d2:55:d5:9d:11:aa:4e:d9:6f:2f:1b:1a:0d:f1:c7:da:82:cc:
         41:d8:00:ff:10:a3:e6:4c:a9:12:8a:c5:2e:06:82:42:83:ee:
         a0:e0:34:1b:67:bd:62:82:db:a8:22:da:ab:be:e7:66:66:91:
         92:75:32:cc:db:52:3a:ea:49:a6:e6:9b:d8:e7:8d:fa:3a:69:
         64:24:59:b9:0b:c9:6b:52:6e:64:93:be:00:9d:8c:3c:da:52:
         14:44:67:3f:8e:a9:19:58:c6:37:63:ac:a4:8f:f6:cf:e9:9a:
         30:ab:61:2b:17:a7:de:81:11:00:0f:97:23:02:bd:a3:46:be:
         9d:3e:93:e5:9a:de:e5:c7:fd:62:47:bf:10:8d:41:4d:7c:72:
         66:c6:e5:86:18:c9:13:3a:f9:e8:67:95:e7:04:d6:bc:35:78:
         06:b9:6f:1f:7e:14:89:00:b0:8e:48:12:4b:07:2d:6b:6e:d1:
         cb:6c:ad:71:0d:91:c1:6b:89:0a:c6:f7:88:b0:c2:0b:9a:91:
         88:39:17:9d:80:7f:63:e8:3e:10:f3:fb:92:a8:b4:5e:e3:6d:
         bd:74:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:48 2026 by rpki-client