Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
File:                     FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft (raw, json)
Hash identifier:          KTnTMrPIM5ZQlmzdpNYjqq6Me5c7YN9jMBGFkgJwbyY=
Subject key identifier:   98:C5:7D:71:53:CC:FB:9C:90:CE:E1:96:95:FF:60:35:E0:73:31:78
Authority key identifier: FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D
Certificate issuer:       /CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
Certificate serial:       5A030B5B501C91AF807B5C5945E42B3A6A8DDB26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 14:20:18 +0000
Manifest this update:     Sat 03 Oct 2026 14:15:18 +0000
Manifest next update:     Sun 04 Oct 2026 18:06:18 +0000
Files and hashes:         1: FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl (hash: Q9FLGIWy7RtJaaucBBaTYYaRh9CkQOvvSsh5Qwhx8Tk=)
                          2: 3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa (hash: wQPbhs8yb6ZMLslmBkU07zfcO19/UJCWoWgUHvgY6JI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 18:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:0b:5b:50:1c:91:af:80:7b:5c:59:45:e4:2b:3a:6a:8d:db:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
        Validity
            Not Before: Oct  3 14:15:18 2026 GMT
            Not After : Oct  4 18:06:18 2026 GMT
        Subject: CN=98C57D7153CCFB9C90CEE19695FF6035E0733178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:8b:f5:a8:2d:4d:4b:b4:d9:40:7a:d3:f3:
                    cb:eb:a3:a5:d8:12:3c:09:07:64:16:32:11:a8:eb:
                    f9:c2:de:11:92:cf:43:22:56:1c:a3:a9:ee:f6:18:
                    55:ae:95:37:4b:23:73:4b:64:ab:2a:b8:95:16:98:
                    88:f8:53:2f:fb:3d:eb:fb:de:ca:61:28:b0:da:48:
                    08:45:34:32:be:9d:b2:1f:b4:30:71:9c:0f:db:2d:
                    22:b5:8f:bd:e9:67:9a:b4:21:82:ef:74:de:93:0b:
                    e1:fc:27:60:8e:36:58:50:cd:3e:75:06:69:35:c6:
                    60:6b:a0:fd:8c:c2:fe:3c:6c:ec:b6:72:c0:c2:b7:
                    50:97:6b:a3:1f:7f:86:e4:67:19:cb:c2:d1:34:3a:
                    0a:11:e2:8e:82:cb:5e:89:44:8d:4f:8b:10:57:57:
                    bc:71:c8:2a:6a:eb:4b:fc:4e:5b:19:c1:9b:11:58:
                    5e:a8:70:84:90:1c:dc:dc:a7:2e:0e:76:17:0a:84:
                    89:94:20:d6:a3:5d:96:62:fb:ad:09:6f:bd:95:6a:
                    f8:92:42:47:4c:10:82:7b:b7:9c:84:04:01:40:32:
                    71:da:8d:df:8d:e5:de:c2:12:33:d3:12:9d:7d:88:
                    1b:37:19:c6:ec:15:ec:e1:61:62:bb:da:ba:6b:9a:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:7D:71:53:CC:FB:9C:90:CE:E1:96:95:FF:60:35:E0:73:31:78
            X509v3 Authority Key Identifier:
                keyid:FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:db:1a:ce:f2:ff:1c:82:d2:0d:be:35:71:38:44:4b:99:49:
         31:bd:aa:dc:0d:e3:89:9e:7e:28:e8:6b:d5:f3:2b:1a:50:94:
         3f:9b:e8:25:df:44:d2:e8:33:4a:b8:3c:e3:32:06:52:f5:10:
         f6:ad:7b:f1:b1:99:90:65:3e:fa:6f:fe:9a:f6:d2:a6:c1:45:
         7c:50:1f:89:a4:ec:3a:7d:a7:35:2a:70:19:5f:82:6f:b3:4f:
         5b:e4:95:0b:68:0a:84:0b:5c:43:cd:47:8b:2f:8d:ea:44:fc:
         d5:84:6f:eb:27:05:93:c9:42:ed:5f:bf:19:2d:a2:af:21:45:
         e2:a2:0b:a0:80:b1:dc:d5:4c:bb:d2:e5:da:6d:da:3c:88:35:
         c7:ba:ba:7d:69:61:fc:69:61:d0:23:58:d1:f6:df:69:d2:fe:
         2b:0a:5e:41:2c:9c:29:72:57:6f:3d:20:07:79:a5:5e:33:13:
         b6:eb:7b:27:cb:85:95:75:0e:e7:40:4e:1a:3f:bb:46:a6:f8:
         c4:2e:63:29:27:e3:e1:b3:a3:e7:2d:38:2d:87:a0:0b:65:a1:
         9f:20:21:98:ca:fb:4a:2f:49:84:f6:7b:9f:11:1c:0a:c6:1b:
         1e:24:1d:b7:46:33:14:a8:5e:e8:a6:8b:07:61:78:65:2e:b2:
         96:92:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:53 2026 by rpki-client