Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File:                     19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier:          7EUovHfi31ETAtuKqMcneTXXICzigT/yKY6x+9uFtIQ=
Subject key identifier:   D3:32:4C:8B:34:91:B3:42:A8:FB:C7:41:0E:0C:FC:10:66:7C:C6:99
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer:       /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial:       059454E338ED88E66C2E1454EDECCDA9FA276D4E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 21:43:09 +0000
Manifest this update:     Sat 03 Oct 2026 21:38:09 +0000
Manifest next update:     Sun 04 Oct 2026 22:25:09 +0000
Files and hashes:         1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: WoUxPPJcfJy66ZdoNoEnmbK4Bo3z6IrutS+oZW1DtKE=)
                          2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
                          rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:54:e3:38:ed:88:e6:6c:2e:14:54:ed:ec:cd:a9:fa:27:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
        Validity
            Not Before: Oct  3 21:38:09 2026 GMT
            Not After : Oct  4 22:25:09 2026 GMT
        Subject: CN=D3324C8B3491B342A8FBC7410E0CFC10667CC699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:15:d9:b1:e9:dc:c9:20:cd:09:5e:d5:85:
                    de:3e:cb:b0:6f:50:e4:3d:8d:63:e4:bb:af:b5:9f:
                    ef:5b:76:d6:a6:f9:c3:fd:db:de:09:b8:40:ce:dd:
                    18:e4:17:c4:00:f5:a9:da:37:c3:c7:8c:86:31:c9:
                    3f:ee:f1:8b:2c:09:c8:17:71:c2:18:8b:f5:25:64:
                    49:23:7a:95:8a:cd:80:8c:43:53:0b:1e:b5:8c:b8:
                    b0:a1:e4:5c:74:04:01:ec:76:b2:00:d1:16:2a:e5:
                    3e:a1:7c:be:6d:76:ef:4f:9e:0c:1f:c5:62:45:65:
                    ed:b3:92:1a:34:38:93:a0:98:8c:02:12:3f:ef:17:
                    6f:f9:f6:3e:fb:f2:7a:5a:71:5e:9f:3b:09:4e:70:
                    a3:94:2c:77:3f:9c:05:61:b5:58:73:fb:24:11:b8:
                    06:c1:3e:76:b9:c8:ae:ff:3c:49:30:5b:b6:4a:74:
                    62:6e:00:c1:a0:df:e9:d3:29:9d:6b:21:ef:bd:ab:
                    2c:ab:24:67:f0:8c:9a:85:fd:97:86:29:72:7d:2d:
                    1f:9a:1f:12:b7:7a:73:55:40:d5:1c:d8:ce:c5:c8:
                    4c:09:06:60:e5:79:02:80:1b:7d:20:cf:18:ad:8a:
                    de:f4:bb:ca:f9:fb:09:5b:96:1c:f3:7b:be:3d:87:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:4C:8B:34:91:B3:42:A8:FB:C7:41:0E:0C:FC:10:66:7C:C6:99
            X509v3 Authority Key Identifier:
                keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:1c:f2:a1:3c:a5:7c:71:ed:b0:d0:2e:22:5e:05:77:db:
         87:79:1e:42:a3:0e:23:b0:5a:6b:1e:a1:db:53:35:2c:31:fb:
         47:73:5c:ca:74:6d:85:c4:4d:ff:0f:2f:92:a3:60:6f:df:32:
         3f:39:16:0f:cf:ae:d4:33:2f:35:ed:1f:7a:55:24:2e:71:fc:
         84:12:23:6d:3c:f0:ba:50:35:19:45:06:e2:a3:c4:63:2c:44:
         68:d7:b0:7c:98:77:34:ce:9b:6a:39:33:bf:bc:05:03:be:13:
         34:c2:e6:58:6c:e7:d9:a1:7b:48:7c:bb:1f:05:06:eb:65:7f:
         94:54:31:31:34:93:41:94:b1:a5:f2:9c:17:3d:db:66:aa:4e:
         d1:f3:ae:a3:0f:6d:9f:ec:8e:d8:51:f7:7e:f7:e9:f5:99:dc:
         ca:36:fc:95:d0:e4:bd:59:05:98:ca:20:0c:13:e0:1e:43:a7:
         99:14:bd:98:92:bd:13:32:49:32:bc:d8:8c:b9:38:a9:02:9c:
         54:64:70:b4:76:6e:4e:2d:fd:c3:a2:04:2c:d0:d1:74:41:e7:
         c0:90:11:8a:14:44:a2:70:54:1f:d6:59:ae:05:95:bc:db:f2:
         8b:ec:0a:27:a5:2e:3a:7a:87:94:3e:7f:38:6e:8d:e6:c8:0d:
         56:01:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:37 2026 by rpki-client