Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
File:                     2730CF9F132716F178F88FB1F268CE51CA264C9F.mft (raw, json)
Hash identifier:          xyky2of9MFwvLJhPQT0MCBEdsW5svfisTfclQszy4QM=
Subject key identifier:   F6:79:53:C5:54:87:FD:71:E9:36:50:FC:D3:10:F9:E7:C8:69:05:5E
Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
Certificate issuer:       /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Certificate serial:       5DD866973F424936A277F860DDE0063AEFD9EE26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
Manifest number:          C1
Signing time:             Fri 02 Oct 2026 15:23:40 +0000
Manifest this update:     Fri 02 Oct 2026 15:18:40 +0000
Manifest next update:     Sat 03 Oct 2026 18:18:40 +0000
Files and hashes:         1: 3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (hash: 9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=)
                          2: 2730CF9F132716F178F88FB1F268CE51CA264C9F.crl (hash: B96RCEzF49VFEiXeNMYv0p5d/fBjZYM+naIzn+25vwI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
                          rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:66:97:3f:42:49:36:a2:77:f8:60:dd:e0:06:3a:ef:d9:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
        Validity
            Not Before: Oct  2 15:18:40 2026 GMT
            Not After : Oct  3 18:18:40 2026 GMT
        Subject: CN=F67953C55487FD71E93650FCD310F9E7C869055E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d9:89:10:73:7e:c2:9f:4b:22:e4:28:3e:05:
                    05:8e:d9:8f:1e:f3:29:84:a9:94:31:4a:04:50:4a:
                    19:08:0a:c2:28:06:b9:dc:b7:b4:b5:4b:19:79:1f:
                    78:99:4e:a1:8b:6b:eb:c9:53:d3:ee:34:c2:8d:13:
                    50:a9:f2:9e:72:b7:c2:c5:88:b4:bf:64:5e:01:b3:
                    cf:0c:6c:41:0d:06:20:9a:00:ce:41:16:39:a4:50:
                    56:1a:a7:cb:df:4b:e1:ef:89:33:2d:49:28:be:6f:
                    96:07:1e:5f:df:de:a1:ef:6b:7e:7c:c5:1f:e9:a5:
                    f4:4a:da:93:2b:5a:67:6b:63:a1:cb:3a:aa:bf:e9:
                    01:b6:09:ee:7e:99:80:cd:46:34:45:54:b8:08:a0:
                    e2:12:c0:d1:cd:ef:4e:1a:4a:24:19:82:bf:1c:d1:
                    db:f2:68:d6:46:77:6e:5d:10:71:63:dc:c9:09:70:
                    3f:06:50:5b:5b:3c:92:22:76:4c:70:c4:b1:66:6c:
                    d4:57:08:20:0d:95:10:28:dd:ab:ea:42:1e:ec:42:
                    3a:ce:a0:d5:00:79:2a:eb:3d:e0:66:9c:23:60:e5:
                    2e:7c:f7:65:b7:e6:70:b1:cf:86:e2:ef:29:23:7e:
                    68:e0:dd:44:8a:49:83:0d:ef:d9:5f:f5:5d:2f:74:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:79:53:C5:54:87:FD:71:E9:36:50:FC:D3:10:F9:E7:C8:69:05:5E
            X509v3 Authority Key Identifier:
                keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:d3:14:24:c9:3a:fa:e5:59:c2:47:27:0f:17:fc:9f:1c:
         c9:f2:5c:9e:59:e0:3c:e2:f3:07:60:f9:73:51:7e:5d:1d:ad:
         5f:3c:1f:fd:aa:84:7b:aa:4f:9a:60:71:d3:24:3e:d5:ee:a5:
         4b:0c:09:4d:7d:31:65:89:45:52:9b:31:28:07:6a:59:fb:96:
         4e:29:5f:64:55:2b:ee:2f:c1:ff:2e:3e:1a:69:f5:de:f1:05:
         a7:4a:5b:7b:93:0d:6d:5b:c1:7d:57:27:15:07:f6:eb:77:65:
         ae:84:59:d8:24:10:7e:58:19:af:8d:8e:d6:27:36:68:56:5b:
         c3:ab:4e:df:a8:66:6a:9a:5f:10:a3:60:8d:8c:fd:39:ca:e2:
         74:64:66:39:2b:69:84:6b:e3:34:6b:70:c2:40:ae:fb:d4:57:
         72:63:26:58:97:ea:f3:ac:13:37:90:6f:58:2f:58:3c:a8:4e:
         58:9b:81:a0:fc:2d:b1:27:0e:57:65:55:dd:ea:ab:ff:0d:56:
         fb:47:be:32:24:b7:b9:a8:6a:ab:23:52:14:84:33:eb:4c:65:
         52:90:c5:92:a3:19:dc:b5:b3:5e:ff:e4:68:b9:47:a8:bd:ba:
         b3:77:3c:3f:69:ed:8f:74:c9:42:49:d2:42:06:7d:28:cf:47:
         1d:1c:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:11 2026 by rpki-client