Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.mft
File:                     45EBBB492A42A7E609E5FE4D4A3679356609CA46.mft (raw, json)
Hash identifier:          /98ZCLmFktvSMZ8rrS+OixjIhMBir6pj+Bb8uJ/C1UI=
Subject key identifier:   F6:B6:20:8D:A0:04:00:E4:EE:FC:F1:54:64:8D:C2:4B:D1:B6:59:AB
Authority key identifier: 45:EB:BB:49:2A:42:A7:E6:09:E5:FE:4D:4A:36:79:35:66:09:CA:46
Certificate issuer:       /CN=45EBBB492A42A7E609E5FE4D4A3679356609CA46
Certificate serial:       6FEB40C0FDDDDA84C8E0FDCB039ADA7062689426
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/45EBBB492A42A7E609E5FE4D4A3679356609CA46.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.mft
Manifest number:          C7
Signing time:             Tue 06 Oct 2026 07:57:05 +0000
Manifest this update:     Tue 06 Oct 2026 07:52:05 +0000
Manifest next update:     Wed 07 Oct 2026 10:38:05 +0000
Files and hashes:         1: 45EBBB492A42A7E609E5FE4D4A3679356609CA46.crl (hash: mkEen7eh9hvWnQtzqIVZQDW+VZc8biNt/nF/XsxKdDo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.crl
                          rsync://rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/45EBBB492A42A7E609E5FE4D4A3679356609CA46.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:eb:40:c0:fd:dd:da:84:c8:e0:fd:cb:03:9a:da:70:62:68:94:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EBBB492A42A7E609E5FE4D4A3679356609CA46
        Validity
            Not Before: Oct  6 07:52:05 2026 GMT
            Not After : Oct  7 10:38:05 2026 GMT
        Subject: CN=F6B6208DA00400E4EEFCF154648DC24BD1B659AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:b4:d4:fa:5f:40:de:f7:08:c6:96:c3:44:
                    ca:66:1d:b2:5d:86:b3:1c:1f:d1:c8:82:84:6f:ee:
                    ed:0d:59:d9:44:1e:b9:7f:53:ad:1c:ca:f5:17:c8:
                    da:0f:3f:f0:1f:6a:53:83:1e:bf:d7:07:d5:be:60:
                    cf:b9:0a:7b:6d:bc:72:09:38:5c:5a:b7:a7:98:8a:
                    54:13:06:5e:a9:ad:a1:53:1a:e2:fd:f7:8b:ad:78:
                    84:54:59:3d:20:57:18:63:bc:71:fe:59:47:c5:e7:
                    21:85:6d:af:4b:1e:10:f4:5d:ff:21:f8:c1:46:50:
                    f5:50:95:6d:cc:69:b7:e8:bd:7d:95:34:a0:11:ce:
                    46:54:81:61:ed:14:b9:11:4a:88:7f:53:a0:b8:3c:
                    02:ef:8c:44:b4:c0:cb:c6:5b:3b:ad:fa:99:c7:7f:
                    2d:24:f2:b3:df:79:bd:46:24:6e:64:82:88:a7:e3:
                    11:82:94:03:bc:22:2d:e4:b0:34:a0:b8:ba:4f:1a:
                    24:87:c0:31:70:cb:4a:5a:9c:8e:26:28:86:0a:a0:
                    3d:01:41:3c:47:9a:4b:5a:54:3f:31:c9:05:9d:f0:
                    65:b7:89:c7:10:52:0c:91:cb:ee:fb:8e:80:2d:b2:
                    11:65:26:57:a8:23:dc:8e:02:9e:4b:07:de:54:97:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:20:8D:A0:04:00:E4:EE:FC:F1:54:64:8D:C2:4B:D1:B6:59:AB
            X509v3 Authority Key Identifier:
                keyid:45:EB:BB:49:2A:42:A7:E6:09:E5:FE:4D:4A:36:79:35:66:09:CA:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/45EBBB492A42A7E609E5FE4D4A3679356609CA46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIHTAI/0/45EBBB492A42A7E609E5FE4D4A3679356609CA46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:26:6c:9c:a4:8f:78:e2:73:72:b7:0f:d6:42:3f:d3:2e:3d:
         c0:ee:d7:75:44:3e:d5:ca:48:d8:33:b5:a3:77:58:ac:d9:d2:
         2a:a6:c8:23:7f:00:6a:8c:d1:82:8d:e5:11:eb:8e:49:42:e3:
         4d:fe:cc:5c:88:61:cb:0c:65:65:57:13:2d:32:c3:79:8d:0d:
         22:48:7a:54:ab:09:e0:da:46:75:e4:c5:cd:d9:5a:91:32:64:
         7d:d8:96:3e:2b:1e:19:4a:07:58:8f:4a:69:a2:5b:31:95:b7:
         49:1e:a8:7d:5f:32:c3:91:7f:e8:a1:99:22:96:f3:13:14:0f:
         cd:b5:44:40:d6:69:c3:7b:e5:33:f5:a4:1e:f3:a4:ec:b9:cd:
         40:d7:a2:68:2e:c8:f4:50:15:12:1a:8e:e6:af:00:6a:aa:15:
         c3:23:ce:ca:96:07:89:2a:bd:4a:33:3d:f1:4a:cc:d1:0d:89:
         88:ef:09:12:e4:28:ff:d2:8e:31:65:05:fd:b7:8f:62:37:4f:
         e1:ad:0b:a7:ad:ba:76:aa:b5:1e:e4:0b:b0:cd:7a:54:0d:6a:
         14:31:b4:49:ee:fb:da:7a:59:db:14:0c:55:22:f9:aa:a6:db:
         8e:32:fb:e2:c4:e0:60:dc:71:33:c0:93:4d:68:e9:eb:47:f7:
         b0:05:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:59 2026 by rpki-client