Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
File:                     F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft (raw, json)
Hash identifier:          /MO9G8gs8mDUkJTC79T0/tH+mtgeRuSjPyCdb4w3qdo=
Subject key identifier:   0B:A9:94:05:31:67:31:FE:6B:DD:08:9D:B0:27:D2:BA:50:F6:B0:23
Authority key identifier: F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4
Certificate issuer:       /CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
Certificate serial:       3815D4B14D15D7104518CA9755AD879794ADB5C2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 02:11:29 +0000
Manifest this update:     Sat 03 Oct 2026 02:06:29 +0000
Manifest next update:     Sun 04 Oct 2026 05:30:29 +0000
Files and hashes:         1: F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl (hash: 2q3pmNTputyFtf2eXxVJ6jPpP44bH48YJ+qVcMH8NI0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl
                          rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:d4:b1:4d:15:d7:10:45:18:ca:97:55:ad:87:97:94:ad:b5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
        Validity
            Not Before: Oct  3 02:06:29 2026 GMT
            Not After : Oct  4 05:30:29 2026 GMT
        Subject: CN=0BA99405316731FE6BDD089DB027D2BA50F6B023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:c6:f7:69:97:63:dd:5e:1b:f5:9c:28:a2:
                    7b:cc:1a:6d:14:c6:bc:49:ac:d3:61:8f:e6:cb:93:
                    dd:30:b4:86:41:b3:bc:73:c8:33:27:61:fe:34:7a:
                    82:78:b7:20:5c:1c:a2:51:5a:c2:d6:ce:1a:4c:c3:
                    36:a6:7d:98:2d:fc:41:f7:2c:e9:b8:b2:76:44:ba:
                    21:a9:fa:ca:5e:62:38:d8:03:37:53:67:4a:66:c8:
                    55:95:f6:75:de:35:ed:e6:22:ca:d7:12:30:5d:68:
                    62:44:1a:06:15:ff:b5:f1:7f:7b:ed:39:41:6b:2d:
                    d5:e2:cd:eb:b6:94:ea:b3:52:c9:88:a4:e4:34:fa:
                    ba:af:42:23:44:b7:6a:64:5a:04:d4:f0:3b:ee:e9:
                    5c:63:a0:ef:c6:33:8b:04:fc:7c:c6:26:ad:07:8b:
                    19:cd:cf:3d:84:de:ab:3b:12:4b:2d:69:b2:de:b3:
                    7b:b8:39:e7:87:52:7d:ee:af:95:e2:00:35:3b:ba:
                    78:02:e8:9c:b8:cf:6e:23:45:69:09:c9:95:cb:50:
                    1b:e8:2a:5c:07:41:e6:f5:0c:03:0e:3d:80:3a:bf:
                    9a:4b:e5:fc:53:98:86:44:5c:15:39:a9:c9:9e:6c:
                    f6:2c:d8:03:25:3d:30:ee:a8:15:e1:9b:63:b3:d7:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:94:05:31:67:31:FE:6B:DD:08:9D:B0:27:D2:BA:50:F6:B0:23
            X509v3 Authority Key Identifier:
                keyid:F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:0e:1b:75:79:53:dd:2c:89:56:ff:ce:b4:39:12:49:ce:
         4b:0c:c1:a2:17:f5:00:79:ed:e6:1c:5c:63:89:3f:f1:50:a8:
         7e:9b:00:a6:cb:35:08:ee:ca:8c:0f:5f:0b:d2:ce:67:60:73:
         b6:50:07:75:2b:1a:d8:0f:34:d2:0b:30:b7:55:ab:95:2f:cc:
         b1:0b:6f:b7:8d:9e:17:bd:5b:91:3d:6c:dc:d6:59:6c:93:bc:
         d6:83:c5:c3:b2:0c:0f:57:6d:be:68:b7:22:7e:4a:70:d2:db:
         fb:ac:4d:c9:15:85:a5:12:dc:f7:ff:84:81:51:4b:a7:a3:ae:
         ca:30:39:d0:99:c3:32:b9:bf:2c:2d:bf:72:ab:61:4b:57:f6:
         93:4a:af:28:eb:88:d2:22:15:4e:47:a1:ad:c1:0e:92:04:c1:
         ec:44:2e:d8:81:e9:bc:77:b5:f6:7b:36:ea:d7:2f:f3:ae:e7:
         34:8a:00:99:fc:6c:79:96:ff:7c:eb:b8:7c:aa:62:06:3f:a8:
         86:cd:a1:7e:66:91:b7:f2:f9:2d:26:cd:cf:36:06:25:2a:4f:
         79:ca:17:31:5f:b2:54:58:2f:10:1b:c9:b0:10:c5:2f:a5:91:
         f0:37:aa:b7:65:5e:3e:2a:6c:77:85:58:9b:db:4e:6b:03:ad:
         b8:39:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:39 2026 by rpki-client