Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File:                     95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier:          LDKBsRlYbVj2gAw19+n9tZP2XIG8AEeZjUoUVv/FlfU=
Subject key identifier:   3E:1A:B0:EA:B3:48:FE:4B:90:D3:C7:FC:77:1B:D9:76:32:AB:F5:75
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer:       /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial:       03155D0EAF77F9EA3B3C9E24C73E4A76925D9389
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number:          AE
Signing time:             Wed 09 Sep 2026 11:52:31 +0000
Manifest this update:     Wed 09 Sep 2026 11:47:31 +0000
Manifest next update:     Thu 10 Sep 2026 13:43:31 +0000
Files and hashes:         1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
                          2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: SQhE1z7TacWWdqDUxZBmwkLp78BV7srMiLMmNvJ9y00=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:15:5d:0e:af:77:f9:ea:3b:3c:9e:24:c7:3e:4a:76:92:5d:93:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
        Validity
            Not Before: Sep  9 11:47:31 2026 GMT
            Not After : Sep 10 13:43:31 2026 GMT
        Subject: CN=3E1AB0EAB348FE4B90D3C7FC771BD97632ABF575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:30:40:b7:7e:6b:3f:8b:2e:3e:3d:0c:c5:
                    34:3a:a5:27:2f:f1:32:d2:0b:76:7a:ef:f9:47:f6:
                    e2:da:49:e7:d7:4e:3f:99:5f:d7:7b:d2:5d:85:54:
                    94:47:3d:9b:64:d1:13:d0:18:6d:c9:bb:dc:dc:17:
                    21:9f:0c:2c:4d:18:79:cd:0a:15:b4:10:fd:27:5e:
                    1d:14:fb:68:4a:fe:4e:97:83:6d:36:a8:a0:de:fd:
                    75:b0:87:8d:c0:98:1d:7c:a1:5f:df:2f:7a:4e:46:
                    57:4e:83:f7:1c:97:83:09:ad:20:c0:75:44:fb:0d:
                    83:d1:7b:93:4f:75:fd:83:57:bf:dd:95:7b:33:e8:
                    c4:05:0c:04:25:5d:e9:76:9d:82:f3:5f:98:38:c6:
                    58:c6:64:2a:6b:a2:e6:5f:8c:f1:22:b0:26:cf:d6:
                    79:0b:ca:5a:d4:a2:ab:02:74:93:a5:44:1f:6c:23:
                    94:5a:21:f8:6b:6f:f7:e4:c1:36:b0:2b:65:a0:86:
                    95:17:56:f1:19:f9:8e:40:76:96:82:8a:26:9f:52:
                    68:02:af:d2:65:e4:e7:de:47:c6:72:99:f9:8e:b3:
                    d2:e8:ec:bd:82:9e:03:d4:3a:85:be:57:15:54:25:
                    c9:cc:11:1e:3c:72:28:f2:98:1c:ad:15:69:0c:e2:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:B0:EA:B3:48:FE:4B:90:D3:C7:FC:77:1B:D9:76:32:AB:F5:75
            X509v3 Authority Key Identifier:
                keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e7:a9:35:ce:44:04:81:bb:c6:d7:34:00:46:78:cc:f4:56:
         3f:66:da:fb:01:8b:ef:5f:27:83:0d:fc:e3:2f:5e:e5:3d:c5:
         1a:e4:eb:9e:b4:6b:92:95:29:65:a1:29:cf:17:99:59:41:6d:
         48:66:49:80:2c:61:f8:7d:4f:2b:14:a7:78:54:6d:ef:95:0f:
         d1:6b:4a:e2:ec:98:08:3d:cf:a4:56:58:a6:b8:d5:1e:bd:07:
         63:49:bb:1a:3b:ff:e2:40:b1:6b:1f:17:df:55:43:34:3b:3b:
         25:6e:66:2b:b2:b3:45:33:cd:1c:63:75:c1:88:bb:3d:71:a5:
         4f:bf:a2:be:bb:c9:1b:96:cf:7b:53:b8:3f:61:3b:42:e9:3d:
         93:85:b8:72:f6:6d:5b:a8:17:85:16:58:92:af:75:41:38:d7:
         89:2b:b5:5b:e9:e6:6c:4e:8f:bc:e5:ef:e0:42:7c:6b:2d:32:
         99:3a:32:21:11:f7:f6:4c:b0:21:89:1e:e5:ce:86:fc:2b:b1:
         69:29:2a:a5:0f:8b:02:fc:9e:70:cf:c1:1e:ee:14:80:83:36:
         cd:35:e2:56:0e:ea:d1:7b:aa:36:5f:68:32:83:77:3a:d5:62:
         66:fa:a5:5f:7e:73:64:d8:1c:c0:96:46:14:fd:5f:4c:27:60:
         25:29:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:18:30 2026 by rpki-client