Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
File:                     385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json)
Hash identifier:          Op+8d91KBUCL46E+yYMbXQAUcNlotO7f6FXdEJ40yHY=
Subject key identifier:   57:90:92:B6:0C:77:82:70:C9:B9:87:4A:64:9B:32:CF:BC:6E:FE:4B
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Certificate issuer:       /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial:       07F4158F660315CE627CC84DD61544F71E9723AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
Manifest number:          CC
Signing time:             Sun 04 Oct 2026 23:10:55 +0000
Manifest this update:     Sun 04 Oct 2026 23:05:55 +0000
Manifest next update:     Tue 06 Oct 2026 02:59:55 +0000
Files and hashes:         1: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=)
                          2: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: +RrRp8aJ8Q8cOHETvpMQK0Eyv077qhxAGABZEi9ywe8=)
                          3: 3136352e3130312e32392e302f32342d3234203d3e203136353039.roa (hash: yjG8MYF6nfrkwkNu+HFEW+1IrLrwkYkIiZ19QyWO3Dk=)
                          4: 3136352e3130312e32382e302f32332d3234203d3e203136353039.roa (hash: I9pglQOMH4ub5GmJQynwwln40ZQJu3vyeI2yVEXDiCY=)
                          5: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (hash: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=)
                          6: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (hash: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=)
                          7: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=)
                          8: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f4:15:8f:66:03:15:ce:62:7c:c8:4d:d6:15:44:f7:1e:97:23:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
        Validity
            Not Before: Oct  4 23:05:55 2026 GMT
            Not After : Oct  6 02:59:55 2026 GMT
        Subject: CN=579092B60C778270C9B9874A649B32CFBC6EFE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:94:a2:df:e2:af:2f:5c:b5:fb:bb:a7:89:
                    4f:6c:35:d5:37:e1:61:e1:ef:8f:bf:a4:53:b7:3c:
                    6b:46:11:6f:b5:58:4d:69:47:0e:55:4f:90:93:56:
                    5b:34:64:50:b3:db:71:74:3a:5a:2b:9f:37:4d:ef:
                    a4:e6:01:2c:82:fc:da:5c:09:20:50:1c:41:c5:67:
                    a2:f8:c3:8c:ad:c7:e0:87:a2:92:e3:f5:ee:bc:3e:
                    57:b0:71:c6:f9:50:4b:ca:28:77:b1:99:22:fb:c2:
                    11:cb:70:ee:e7:90:70:4f:0c:8a:1b:c6:ca:a4:7b:
                    7c:f1:9e:81:95:d6:54:0f:ba:e6:22:f9:a4:28:8d:
                    0b:a8:e7:f2:f2:de:19:e1:30:a0:c9:8d:ed:fe:96:
                    14:1f:76:70:cd:e0:de:02:6d:f8:e6:6a:e7:b3:6e:
                    5a:f0:e0:da:fd:9e:d6:ff:4d:31:8c:8b:7c:77:05:
                    ce:06:77:9d:d0:bc:05:0f:34:5d:c9:a4:99:0d:3e:
                    2d:bb:73:60:50:3b:a6:31:41:14:60:d3:a8:a8:38:
                    33:2a:47:26:32:17:e6:2e:9c:36:b4:bd:d6:6d:8c:
                    29:64:e8:bb:77:ba:15:c7:18:5e:56:a6:98:2f:af:
                    ba:73:82:d1:e5:ad:cf:24:47:70:c9:8b:a9:ca:06:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:92:B6:0C:77:82:70:C9:B9:87:4A:64:9B:32:CF:BC:6E:FE:4B
            X509v3 Authority Key Identifier:
                keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:92:ad:44:57:c9:b7:55:71:7f:4e:e8:e1:22:37:be:5d:
         3c:d4:8f:1c:9d:a1:5e:4f:ad:24:9d:50:c7:51:4b:2d:28:7b:
         fa:64:43:1a:80:e2:8a:7d:55:6e:df:5a:3d:57:1f:c7:7d:d8:
         68:a2:c7:ce:1c:28:09:51:d8:b7:6d:50:f2:c9:ea:42:26:d1:
         2f:b8:f3:d4:3a:d2:26:3e:3d:75:60:ab:ec:e2:a4:23:24:94:
         42:af:f7:67:34:5a:a5:8c:7a:3f:f2:cf:18:3b:f2:ee:67:f7:
         b9:41:81:b0:05:a3:cb:10:fe:aa:1f:51:8e:71:17:aa:6d:1d:
         72:11:69:20:d5:c7:f0:c6:97:a0:45:9e:34:30:d8:3e:76:a1:
         2e:02:9d:fb:24:b2:20:b7:32:1e:6a:66:b8:3b:29:56:76:81:
         42:53:8d:af:ee:6e:1d:aa:68:b1:f7:fd:2e:a4:6d:34:c8:82:
         82:f5:2d:25:b6:f7:f7:36:75:08:a2:25:85:b8:0a:86:4d:7e:
         90:d1:97:24:2f:1b:43:b0:4d:2e:bc:7c:c9:51:76:f3:8b:76:
         86:d7:e1:31:1b:cc:40:50:fa:16:b7:2b:c0:b8:17:2f:7c:83:
         d1:06:8b:7c:e6:5b:27:70:37:89:60:ad:99:95:a5:45:9a:0d:
         2c:b0:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:00 2026 by rpki-client