Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft
File:                     113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft (raw, json)
Hash identifier:          yPZf1ZAlJXouikZhJhrYwYHR/x5IyeawkgyDPEkrGAg=
Subject key identifier:   7C:CA:9E:33:70:49:68:A7:EA:5C:01:1D:15:FF:C0:A1:A6:3D:B7:8B
Authority key identifier: 11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D
Certificate issuer:       /CN=113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D
Certificate serial:       5E4AF7BB544D560CF1BB5676389EAAA61CC25760
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft
Manifest number:          C2
Signing time:             Sun 04 Oct 2026 00:03:26 +0000
Manifest this update:     Sat 03 Oct 2026 23:58:26 +0000
Manifest next update:     Mon 05 Oct 2026 01:18:26 +0000
Files and hashes:         1: 323430343a613363303a3a2f33322d3438203d3e20313334383233.roa (hash: 6MS/SLD9lZIc8AKT/cRuJveakCuE+VHdiffB4G+t2T8=)
                          2: 113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.crl (hash: 90Ce/JHS/tDU6l+La4N35WriaRiquKZXA9YeluNVyIA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.crl
                          rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 01:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4a:f7:bb:54:4d:56:0c:f1:bb:56:76:38:9e:aa:a6:1c:c2:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D
        Validity
            Not Before: Oct  3 23:58:26 2026 GMT
            Not After : Oct  5 01:18:26 2026 GMT
        Subject: CN=7CCA9E33704968A7EA5C011D15FFC0A1A63DB78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:6e:b7:3a:24:ff:f9:72:aa:a6:90:33:54:
                    90:a6:ca:3a:da:65:1d:81:7a:af:02:a2:1e:2a:3a:
                    f8:92:84:97:fa:61:cd:6d:7a:0c:b3:b2:b3:9a:83:
                    4b:be:bc:fe:1e:70:76:c7:13:bc:44:63:8d:43:98:
                    3b:c9:1c:c9:65:22:7d:75:27:1e:c2:07:22:da:db:
                    50:f9:42:1b:44:29:3f:35:8c:2a:bd:7e:41:f9:cb:
                    a5:47:bf:63:8f:2c:da:7e:db:52:89:f8:d0:82:01:
                    9a:b1:f9:bf:bf:a3:81:30:0d:ad:da:c8:eb:cc:64:
                    0f:f5:c7:3c:c4:17:54:f2:68:55:73:56:95:26:7a:
                    51:e4:f8:4d:a7:4d:74:e6:ae:21:ea:f9:02:6a:62:
                    12:23:37:87:ce:99:ea:ab:3b:07:d9:23:e1:64:91:
                    ca:02:56:c7:9a:c0:aa:01:74:c9:24:52:4f:c5:66:
                    b7:5c:89:df:aa:fe:de:c3:9c:6f:b6:a2:7c:cb:d2:
                    b9:28:4c:da:4e:a1:35:1b:2b:a5:ad:01:f0:c7:42:
                    01:a2:56:a3:72:39:00:5a:fb:c9:f3:bc:19:5b:69:
                    a9:46:35:36:57:08:8c:8b:9a:3c:63:5a:f1:e1:ac:
                    35:2f:49:0c:82:bc:f9:94:e3:c6:25:57:dd:38:67:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:9E:33:70:49:68:A7:EA:5C:01:1D:15:FF:C0:A1:A6:3D:B7:8B
            X509v3 Authority Key Identifier:
                keyid:11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:69:ef:6d:82:2d:97:d2:9e:c6:a0:fe:fc:ff:9a:cb:53:
         f2:f6:2a:67:14:c9:4f:bc:bf:51:24:1d:ee:ac:7c:26:2e:43:
         75:6b:8f:81:ef:a7:c3:9e:d9:ad:3e:9b:e9:22:1d:a6:e7:1c:
         56:55:66:07:2c:13:54:1a:43:95:80:11:35:7c:04:48:a8:fd:
         66:0b:71:f8:3c:50:97:8e:f7:09:06:d6:3d:d6:2d:6c:fe:ec:
         99:a0:8e:07:e3:e4:5c:29:30:38:b1:17:d5:f0:6f:4a:9b:e4:
         57:55:78:9c:cc:3f:e2:49:1c:6a:58:54:ef:6b:79:a0:d3:22:
         b9:fa:ae:e7:08:bd:16:f0:0c:28:e4:45:63:99:1c:a3:db:1e:
         73:72:f6:18:db:28:39:c2:a9:df:81:04:b2:1e:8e:32:58:91:
         21:28:02:91:76:70:dc:bf:71:28:ec:94:dd:22:ca:59:7f:53:
         ca:90:2e:61:2a:dc:f9:74:8a:27:4c:c2:d1:2b:19:cf:74:39:
         b8:c4:d6:94:dc:4f:b2:ea:4f:96:64:39:8c:7e:2e:54:ce:2e:
         38:aa:b5:4e:c7:1f:c8:22:ed:9a:10:54:42:17:c0:c9:6c:43:
         5a:86:10:08:fc:9a:55:d4:0e:59:04:c6:c0:65:d3:02:36:a2:
         48:e3:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:09 2026 by rpki-client