Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
File:                     36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json)
Hash identifier:          M+r7deRR7HDMkHEIIR+IW5SFzBu2KZJXIjv50t0oQ9g=
Subject key identifier:   BB:EE:6C:26:EE:94:86:DB:B2:02:D4:78:05:A7:CA:85:81:4D:EA:83
Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8
Certificate issuer:       /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
Certificate serial:       26B4D12C7AA558A31FF4FB5779EA7089E6CE4E35
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
Manifest number:          C4
Signing time:             Sun 04 Oct 2026 00:03:26 +0000
Manifest this update:     Sat 03 Oct 2026 23:58:26 +0000
Manifest next update:     Mon 05 Oct 2026 03:37:26 +0000
Files and hashes:         1: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: 0/4smYnue4lcEUIVnwH161D43Og9pPFlQQmOQ/mlx4k=)
                          2: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=)
                          3: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl
                          rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b4:d1:2c:7a:a5:58:a3:1f:f4:fb:57:79:ea:70:89:e6:ce:4e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
        Validity
            Not Before: Oct  3 23:58:26 2026 GMT
            Not After : Oct  5 03:37:26 2026 GMT
        Subject: CN=BBEE6C26EE9486DBB202D47805A7CA85814DEA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:64:ee:c9:62:1f:b6:a5:d0:56:77:24:69:
                    f9:54:71:54:79:32:66:1a:32:c5:fc:64:a6:90:a6:
                    11:b0:97:4a:aa:1e:7c:33:1a:f6:2f:a3:15:d5:65:
                    b9:16:b1:1e:3b:0c:1c:d2:7d:93:96:31:74:4b:55:
                    0b:c5:aa:71:84:94:10:d1:4d:55:78:49:28:55:07:
                    e3:00:a0:ad:46:ee:38:97:b0:da:ab:76:67:58:bc:
                    1d:c4:69:9f:35:20:5d:05:57:ad:1b:e4:7c:1c:3e:
                    60:3c:ff:20:19:83:67:39:98:7d:54:9d:d1:ef:4b:
                    08:06:a3:54:02:df:03:c6:7b:e2:37:d9:d2:5a:02:
                    ff:5e:c1:45:1d:18:9b:e1:9c:e7:98:7e:a9:a9:bb:
                    fe:82:42:85:5e:63:4c:b0:26:33:52:3c:87:fd:25:
                    38:37:30:84:e0:31:b3:9e:ae:d4:2c:a1:4a:c3:97:
                    23:26:09:a6:69:5f:e8:67:3d:dc:4b:ce:c9:4d:d3:
                    a2:c1:23:c2:1b:b1:96:70:4b:9c:b2:06:24:e0:8e:
                    d9:ff:e8:aa:ce:f9:7e:0b:ee:37:04:00:10:48:85:
                    91:bf:97:a6:3c:0b:f9:3a:6d:43:3a:5c:3d:ec:9b:
                    cd:24:be:af:9e:84:ba:de:c5:4c:08:8f:12:1b:08:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EE:6C:26:EE:94:86:DB:B2:02:D4:78:05:A7:CA:85:81:4D:EA:83
            X509v3 Authority Key Identifier:
                keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:46:7b:bf:28:ba:18:cf:f5:7a:84:0f:f3:72:aa:8a:36:4a:
         93:8f:fb:b4:80:f7:6b:23:4d:b9:58:49:2a:cd:3c:1c:bd:69:
         42:9e:8a:00:44:4e:e7:49:36:40:b4:8b:69:95:53:28:bc:9d:
         1e:22:a2:c9:11:ed:ad:f3:1f:56:dc:17:0c:97:18:ac:dc:9d:
         ca:f6:ff:78:7c:b7:3b:ac:2f:67:87:a3:c4:3a:64:1f:2c:4c:
         66:40:69:fa:99:b4:45:09:5c:bd:44:64:6a:16:85:67:6f:7d:
         a6:e7:36:09:02:5d:ec:ea:a6:92:d3:10:0c:2a:fe:37:da:29:
         03:a7:03:ab:df:a9:ce:09:3f:46:ef:d9:fd:d3:28:78:c2:71:
         4e:a2:50:72:6b:76:ea:93:68:76:f6:7b:de:ca:13:7d:21:55:
         43:97:85:a8:06:e9:2f:b6:4b:74:64:38:3a:59:0e:16:e4:da:
         e4:f0:8f:44:e4:c6:a8:16:83:43:0a:7e:31:15:89:1e:89:84:
         63:ab:54:0c:38:dc:62:07:da:6d:fc:82:56:5e:c7:46:18:cd:
         f0:b7:74:03:36:dd:3a:56:f2:4d:43:3f:68:ba:02:84:05:82:
         69:f0:88:ca:b7:ab:34:25:2b:f5:a1:ab:a8:bf:99:90:f8:8e:
         1a:68:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:53:51 2026 by rpki-client