Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
File:                     BA76DF7F88073A2138A8860116C53F470BF01FF5.mft (raw, json)
Hash identifier:          lt+hNiEax1Qpori4cPGhUVYP+gunzKnlWAXi5+LopvA=
Subject key identifier:   02:00:AC:04:02:55:EF:6E:2F:FF:DE:70:BC:1B:74:2B:7D:E2:35:FC
Authority key identifier: BA:76:DF:7F:88:07:3A:21:38:A8:86:01:16:C5:3F:47:0B:F0:1F:F5
Certificate issuer:       /CN=BA76DF7F88073A2138A8860116C53F470BF01FF5
Certificate serial:       53BAFDE2913BE97216BE25928EDC46FE723115D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 12:35:05 +0000
Manifest this update:     Sat 03 Oct 2026 12:30:05 +0000
Manifest next update:     Sun 04 Oct 2026 15:42:05 +0000
Files and hashes:         1: BA76DF7F88073A2138A8860116C53F470BF01FF5.crl (hash: Wj/lU0+oaHrpE28Ts+dBEXnmy701HCGwhHirR+qPf+4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.crl
                          rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 15:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ba:fd:e2:91:3b:e9:72:16:be:25:92:8e:dc:46:fe:72:31:15:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA76DF7F88073A2138A8860116C53F470BF01FF5
        Validity
            Not Before: Oct  3 12:30:05 2026 GMT
            Not After : Oct  4 15:42:05 2026 GMT
        Subject: CN=0200AC040255EF6E2FFFDE70BC1B742B7DE235FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:1a:b3:3a:eb:55:a8:8e:a8:72:20:2b:37:
                    2f:0c:c1:ff:85:d5:71:d7:f6:20:95:21:d3:fc:26:
                    27:19:b2:92:fa:e4:09:66:03:12:d4:df:cb:2e:36:
                    e6:3e:c6:53:c9:d1:d3:4f:a7:0b:01:0b:37:fc:b5:
                    0b:83:82:e7:fc:fc:1a:f2:99:a1:ac:d8:93:7f:9a:
                    f2:55:1d:64:43:61:0b:e3:ef:a3:69:cb:22:28:a1:
                    47:36:db:f7:04:c0:3d:a1:60:dd:2f:3d:8a:b0:01:
                    8b:a7:18:5a:03:bd:dd:8b:3d:d6:98:1f:53:2f:b3:
                    15:b3:18:9a:97:79:1f:ba:9e:93:ad:44:85:be:31:
                    a8:18:d9:a7:58:3b:15:25:66:5a:34:6a:92:7b:bd:
                    cb:8e:d1:14:ad:a0:8e:4b:d7:bf:69:7e:3a:b3:4e:
                    11:50:82:17:df:11:f0:9c:bc:6d:e9:1a:3f:06:3f:
                    88:af:ee:ab:d8:11:52:ee:4d:d8:ac:ff:79:7b:7d:
                    0d:e1:63:79:f7:9f:a3:7b:eb:bd:d4:43:61:1e:37:
                    de:91:7c:eb:6a:8c:4a:46:e6:fa:a3:62:3a:84:78:
                    8d:75:ee:77:4a:8c:33:bc:6d:ff:3a:86:c4:98:87:
                    89:20:15:ce:31:83:86:e0:12:e5:06:93:99:16:1d:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:00:AC:04:02:55:EF:6E:2F:FF:DE:70:BC:1B:74:2B:7D:E2:35:FC
            X509v3 Authority Key Identifier:
                keyid:BA:76:DF:7F:88:07:3A:21:38:A8:86:01:16:C5:3F:47:0B:F0:1F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:8f:f6:6d:7f:2a:4d:88:7c:12:98:4f:c3:fa:25:72:3a:
         96:5c:ec:59:d2:07:17:5b:fb:d3:b3:39:d8:aa:7b:50:94:4c:
         3c:e4:f2:63:f9:81:2d:91:f0:73:b5:c0:f3:37:cd:2c:f1:60:
         b9:d5:fd:4f:4c:d3:c9:8a:3d:c6:c2:2a:2c:00:62:53:22:3a:
         62:8d:41:44:91:35:dc:9f:b8:1c:e8:83:a0:7b:9c:35:76:c2:
         f3:0e:cd:d5:db:5b:73:9d:12:df:2c:52:55:52:cb:b9:13:13:
         c0:94:2d:1f:be:f9:a5:59:35:51:b8:a3:95:6f:89:c6:e0:2d:
         d8:23:ef:fb:e7:6d:ca:10:cb:05:35:3b:7f:34:8d:cf:cd:0f:
         b7:a6:26:b0:30:cd:4d:ad:cf:6d:f7:83:70:49:4c:3c:fb:bc:
         c8:b8:97:44:3f:79:b8:cc:fb:23:7d:8e:2a:b7:f1:9e:62:79:
         7f:c8:b6:78:31:aa:75:4e:c9:45:d4:42:a4:bc:b5:a5:5e:52:
         f7:4d:64:c9:94:7b:5f:cf:3f:05:66:dd:21:60:e1:37:62:0d:
         9a:46:e9:9f:72:c4:ea:89:44:d8:f1:95:5d:41:83:b2:f6:c1:
         db:04:26:0d:6b:9f:7d:fe:43:d5:a1:e5:e4:05:fd:28:9a:d2:
         73:16:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:35 2026 by rpki-client