Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File:                     96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier:          sCdUPDUv1lnCxnEIfx6mWaYLhdFCY3bp0SfwPmMd0LM=
Subject key identifier:   5B:E7:F4:4A:8C:B7:7B:10:CE:17:41:18:78:7F:7D:AF:79:73:1A:BB
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer:       /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial:       42896736702693ED46C2459F4D50DFE313C4BD9D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number:          CF
Signing time:             Mon 05 Oct 2026 21:15:09 +0000
Manifest this update:     Mon 05 Oct 2026 21:10:09 +0000
Manifest next update:     Tue 06 Oct 2026 23:54:09 +0000
Files and hashes:         1: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=)
                          2: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: aITIXZIYgdSzAXqqya0ASLPJtxkOPDtLvch5BC1+50A=)
                          3: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=)
                          4: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=)
                          5: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
                          rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 23:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:89:67:36:70:26:93:ed:46:c2:45:9f:4d:50:df:e3:13:c4:bd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
        Validity
            Not Before: Oct  5 21:10:09 2026 GMT
            Not After : Oct  6 23:54:09 2026 GMT
        Subject: CN=5BE7F44A8CB77B10CE174118787F7DAF79731ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:f3:41:3f:13:37:89:0b:1e:1a:b4:49:67:
                    7e:a3:89:95:e3:94:82:4a:23:2b:bd:4f:b8:b7:d6:
                    27:bf:87:df:67:23:cc:0d:5b:81:73:34:70:b7:24:
                    29:c1:a2:12:5a:2f:91:71:f9:96:53:13:e0:2a:c3:
                    49:6d:f1:fd:d8:11:b6:3d:17:ee:11:aa:ca:c3:4d:
                    0e:f1:3b:40:99:b5:e2:aa:f3:34:d9:e7:c1:78:32:
                    67:0d:a9:c1:2c:80:c7:9d:a9:8a:43:d5:c7:0f:45:
                    37:27:85:64:00:ef:f4:16:89:c0:1f:70:82:3c:84:
                    43:80:b5:95:fc:59:4e:f9:d6:21:4d:49:77:7e:e4:
                    9f:70:56:d4:88:4c:e5:82:60:99:3f:41:2e:0f:b5:
                    ac:bc:5e:af:ba:db:a1:b3:00:64:83:a6:a0:21:4f:
                    73:be:b0:0a:e5:74:cd:c3:f4:c8:26:c4:b6:22:5a:
                    20:c6:08:c4:25:97:d3:b6:8c:13:91:b6:83:fe:24:
                    66:20:58:04:f1:71:79:ac:80:fb:f4:6b:14:e0:cb:
                    66:40:be:36:14:63:a7:8f:14:7f:f6:87:75:8a:91:
                    e2:4f:a4:c9:0c:40:0d:28:1d:58:93:f7:ee:c1:4b:
                    35:e8:fd:d9:08:3c:ce:8d:4d:f5:bb:43:29:46:0f:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E7:F4:4A:8C:B7:7B:10:CE:17:41:18:78:7F:7D:AF:79:73:1A:BB
            X509v3 Authority Key Identifier:
                keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:7e:15:33:28:35:c5:c0:75:51:9c:9d:88:f8:28:14:25:
         59:53:c1:b9:bd:27:9e:bf:8f:8c:1d:76:ee:eb:98:09:ad:cc:
         2f:7b:dc:74:ae:27:e1:fa:85:01:a2:94:93:95:17:46:d7:26:
         ae:65:40:2d:0f:62:4f:31:98:03:6d:b8:6e:1e:17:30:63:8f:
         3c:70:b8:0f:a0:08:17:3e:4b:c7:8e:0e:21:56:2b:c5:e6:81:
         d8:53:0b:cd:84:d7:51:6b:19:f5:6c:ae:d1:c5:47:0e:b9:c9:
         92:3a:cf:aa:bc:1d:44:fe:4c:90:d2:21:3c:de:0f:8e:f3:a3:
         35:b0:a5:53:f0:a6:ff:2f:1b:f4:59:e5:6d:93:ba:ed:df:17:
         88:03:06:ca:2c:5d:43:e6:b4:38:a2:b7:af:ff:76:a0:d1:e1:
         2e:ae:a5:0b:40:30:c5:5f:ca:ae:7a:bb:eb:99:16:84:7a:3d:
         54:2b:cd:bb:9d:32:7e:23:9f:3c:dc:fc:b5:76:19:77:20:7e:
         72:f2:1e:a3:2a:d4:79:c7:86:d1:45:79:01:97:2e:5f:ff:26:
         6d:d5:e7:b6:ef:ad:ce:80:58:83:c3:8b:61:b9:9b:2f:dc:d7:
         1f:38:5c:ee:69:6c:fe:74:b4:c3:d6:8f:a4:b9:ec:d6:fa:b1:
         85:1f:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:24 2026 by rpki-client