Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft
File:                     86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json)
Hash identifier:          Vp4YJeezIeq70CCeHAhypDR9x169xU3yrFXS9EwR2bo=
Subject key identifier:   1B:3A:AD:C7:72:5E:0A:37:09:87:89:B8:5B:53:1B:25:4F:E5:45:75
Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94
Certificate issuer:       /CN=86E5C9C6D878819F10BEC976A116DB8148A15794
Certificate serial:       6F4E2819645FD554857D663C5DBA0A983D9F302D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft
Manifest number:          CB
Signing time:             Thu 08 Oct 2026 07:37:28 +0000
Manifest this update:     Thu 08 Oct 2026 07:32:28 +0000
Manifest next update:     Fri 09 Oct 2026 10:00:28 +0000
Files and hashes:         1: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: 2XcJZfO7Q1jzClbqFNZribKtbMdBxQE13hO97SJXmXY=)
                          2: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl
                          rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4e:28:19:64:5f:d5:54:85:7d:66:3c:5d:ba:0a:98:3d:9f:30:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794
        Validity
            Not Before: Oct  8 07:32:28 2026 GMT
            Not After : Oct  9 10:00:28 2026 GMT
        Subject: CN=1B3AADC7725E0A37098789B85B531B254FE54575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:46:ad:7f:f6:a9:75:43:ff:07:8f:0e:15:
                    a6:01:58:ad:01:93:f9:e4:99:31:f1:1b:ce:c9:88:
                    97:b9:87:ff:88:7d:66:b7:99:f8:48:55:38:e1:43:
                    71:dc:9e:62:27:93:7e:93:2c:1f:70:c5:82:97:26:
                    f3:6b:92:52:68:8a:b4:49:38:62:ab:fb:16:45:b0:
                    5a:88:13:d8:2d:44:1b:fe:ee:ef:90:91:1b:c2:fd:
                    9f:53:28:62:31:02:ec:da:b7:a7:b1:4a:1f:21:fc:
                    a4:ff:70:02:d6:59:33:c6:ff:3c:1a:9a:f4:f9:a6:
                    a6:9b:35:c2:07:81:fa:53:be:b3:92:b8:5f:04:17:
                    38:2c:2a:d0:6d:bf:49:db:7c:e0:5d:4e:16:4f:50:
                    c4:40:92:52:f0:14:fe:25:b0:e9:76:99:be:dc:ab:
                    75:bd:26:de:4d:25:79:31:7c:b7:a5:9d:1c:9a:40:
                    0b:c5:84:0e:3d:cc:e6:d7:fb:9e:7d:1d:c6:d3:19:
                    a7:fc:19:4b:ae:2f:28:a4:47:3a:bd:ed:8d:7b:6b:
                    c2:60:8c:49:a1:19:d8:cf:79:5e:a5:4d:11:40:a4:
                    b8:d3:0e:82:61:32:08:27:8a:03:65:a7:63:e8:86:
                    28:27:05:8f:70:b6:76:43:0c:a6:4e:ce:4b:cb:54:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:AD:C7:72:5E:0A:37:09:87:89:B8:5B:53:1B:25:4F:E5:45:75
            X509v3 Authority Key Identifier:
                keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:a5:8f:75:94:e8:6d:82:9d:65:d3:ba:7d:00:84:3c:98:
         a4:3f:a9:77:b4:0f:c7:ef:e4:82:34:4f:2b:6b:0d:d9:a6:f1:
         73:c1:64:f8:c4:f4:51:22:41:6b:e8:2b:a8:10:0e:20:0c:fd:
         e7:9f:75:ec:5d:71:38:9f:03:00:e5:f7:df:a1:40:35:0b:d4:
         0b:b5:aa:aa:71:91:4b:80:d8:43:b7:f1:56:da:ed:c7:21:7f:
         b6:00:e1:dc:d9:12:f2:38:cc:31:d7:21:14:55:09:ce:18:25:
         72:aa:2e:bd:7f:e5:fb:57:e2:b3:26:e7:79:e0:65:98:a2:19:
         56:4d:51:21:2b:8b:b6:2a:59:ae:2d:89:76:5b:f5:a6:19:79:
         36:54:a7:ee:5e:57:8d:1e:9e:5d:b2:18:c3:5b:5c:d6:e3:db:
         01:cb:dc:5d:d2:5a:d4:bd:67:17:af:e0:75:07:4d:8a:bb:07:
         c2:7d:04:70:71:c6:0e:2c:aa:2b:85:08:04:24:f6:14:bb:34:
         2c:fa:ea:f3:c5:91:3b:d7:ba:cd:04:bb:82:41:21:bd:85:7b:
         5d:63:27:17:ed:44:ff:65:58:33:8a:29:41:79:2e:05:ef:40:
         16:6a:c4:ae:04:c3:30:5b:7e:40:89:6f:a8:41:0b:89:dd:45:
         4f:ff:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:33:08 2026 by rpki-client