Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
File:                     793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft (raw, json)
Hash identifier:          o2/6u1kV62gTAv6IkeKZ3Ke+K23BUmz8yZhclak4Sgk=
Subject key identifier:   21:DE:F7:B4:C8:DD:0C:13:3D:9B:3D:64:21:9D:F5:64:F7:82:7F:37
Authority key identifier: 79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1
Certificate issuer:       /CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
Certificate serial:       430EC3FB2139357B1CB0E522B435E59B25A657EB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
Manifest number:          C2
Signing time:             Fri 02 Oct 2026 14:48:02 +0000
Manifest this update:     Fri 02 Oct 2026 14:43:02 +0000
Manifest next update:     Sat 03 Oct 2026 15:03:02 +0000
Files and hashes:         1: 3130332e36342e32322e302f32332d3234203d3e203234313632.roa (hash: vp18jHFsymMwntPhKjDMhUA6YgN91sjf9Qxya1SYqUU=)
                          2: 3130332e36342e32322e302f32332d3234203d3e2037353336.roa (hash: hF+qaCD0mNB8NHiu7Y54C2GPDlGre0i9TzH42K6b29s=)
                          3: 793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl (hash: dwmdFP6BRwbNa4IURr+1cKYgfgpX7hbDuEcxAh7eV5M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl
                          rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:c3:fb:21:39:35:7b:1c:b0:e5:22:b4:35:e5:9b:25:a6:57:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
        Validity
            Not Before: Oct  2 14:43:02 2026 GMT
            Not After : Oct  3 15:03:02 2026 GMT
        Subject: CN=21DEF7B4C8DD0C133D9B3D64219DF564F7827F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:02:7c:af:3b:63:df:9e:cc:a7:6e:b9:3d:
                    a3:7f:68:07:8b:78:4a:ee:47:5b:f3:23:2c:b8:0b:
                    be:39:60:56:5f:6c:b4:2b:c9:c7:13:73:1f:05:35:
                    77:c5:10:09:19:ec:7c:fa:c9:60:34:c3:ce:bf:af:
                    20:ad:b5:9a:de:79:15:5d:d4:aa:d1:6a:1e:5e:fc:
                    35:01:31:25:c9:0b:5a:c3:0d:68:c1:57:2b:34:d2:
                    ef:99:69:90:cb:b2:81:9a:07:37:27:32:93:fe:f4:
                    1b:80:d9:71:82:ac:9f:fa:7b:92:7a:2d:77:fe:47:
                    56:36:9f:3d:ef:6d:5a:b4:00:d5:7b:17:6f:cf:ea:
                    c9:fe:8d:dd:b8:8a:48:2a:19:23:83:9c:77:58:fc:
                    d7:ac:45:b0:f2:d8:9e:c9:e2:08:ff:8a:64:7e:db:
                    d9:79:99:be:9c:6c:e9:05:14:f0:cd:3d:2f:00:b7:
                    7b:1b:d4:56:b4:76:d7:a7:6a:b6:4c:e4:ad:53:51:
                    93:3f:70:7e:b2:5f:04:ef:ac:e3:04:6e:1d:37:62:
                    7d:9d:97:a1:cc:81:7c:95:c7:45:aa:de:9c:08:15:
                    13:d9:4b:55:4f:1e:3e:2e:a4:bd:17:d8:31:49:88:
                    a2:d1:a2:62:f8:c4:aa:86:88:95:ce:38:4e:5c:de:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:F7:B4:C8:DD:0C:13:3D:9B:3D:64:21:9D:F5:64:F7:82:7F:37
            X509v3 Authority Key Identifier:
                keyid:79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:22:40:c6:10:9c:03:10:a3:47:82:a8:e0:de:01:2e:87:3c:
         00:61:63:41:30:0e:4d:8a:2e:d8:00:f7:33:63:02:6e:88:01:
         d9:e6:cd:40:31:50:13:2b:7c:52:a2:15:66:9a:a5:50:8a:b4:
         be:d3:0d:3a:d4:58:07:73:15:9b:2b:2c:e3:e4:5c:72:4a:31:
         49:ee:d4:35:c5:d5:2a:e5:30:3a:59:cd:a8:43:db:b1:28:15:
         39:de:97:a7:4a:33:af:26:1f:78:0c:e2:d6:d7:83:cb:78:8e:
         67:92:a1:37:be:b6:37:54:7d:98:e1:e7:b8:cb:3c:24:d3:07:
         7c:bf:48:38:37:04:98:a1:0a:26:fc:32:e0:ba:58:e0:d5:5a:
         4e:7f:29:77:d7:60:54:99:49:dc:2e:1a:7a:ef:41:a4:c7:1f:
         69:d3:70:ec:91:32:d9:60:15:f2:82:f4:f2:db:28:06:ad:2a:
         d4:c5:b2:8c:f6:c6:46:0d:81:ec:9c:d1:d3:1f:47:8f:d1:5a:
         28:4b:9a:e4:97:f9:2f:97:b0:14:ed:29:02:2c:19:96:eb:d9:
         e9:74:6c:a2:2d:95:42:31:e3:6d:88:7b:da:8d:77:11:9a:eb:
         1c:05:84:62:a8:d9:18:c5:54:62:70:69:b9:12:ac:0f:c5:e4:
         eb:37:b2:7f
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUQw7D+yE5NXscsOUitDXlmyWmV+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzQkZBNzdDQTFFNjA2RURENDNCQTRERjJDOEVBQjZG
MzhFNjJBMTAeFw0yNjEwMDIxNDQzMDJaFw0yNjEwMDMxNTAzMDJaMDMxMTAvBgNV
BAMTKDIxREVGN0I0QzhERDBDMTMzRDlCM0Q2NDIxOURGNTY0Rjc4MjdGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlgJ8rztj357Mp265PaN/aAeL
eEruR1vzIyy4C745YFZfbLQryccTcx8FNXfFEAkZ7Hz6yWA0w86/ryCttZreeRVd
1KrRah5e/DUBMSXJC1rDDWjBVys00u+ZaZDLsoGaBzcnMpP+9BuA2XGCrJ/6e5J6
LXf+R1Y2nz3vbVq0ANV7F2/P6sn+jd24ikgqGSODnHdY/NesRbDy2J7J4gj/imR+
29l5mb6cbOkFFPDNPS8At3sb1Fa0dtenarZM5K1TUZM/cH6yXwTvrOMEbh03Yn2d
l6HMgXyVx0Wq3pwIFRPZS1VPHj4upL0X2DFJiKLRomL4xKqGiJXOOE5c3hDTAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUId73tMjdDBM9mz1kIZ31ZPeCfzcwHwYDVR0j
BBgwFoAUeTv6d8oeYG7dQ7pN8sjqtvOOYqEwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVBUk5J
TkczNi8wLzc5M0JGQTc3Q0ExRTYwNkVERDQzQkE0REYyQzhFQUI2RjM4RTYyQTEu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNzkzQkZBNzdDQTFFNjA2RURENDNCQTRE
RjJDOEVBQjZGMzhFNjJBMS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xFQVJOSU5HMzYvMC83OTNC
RkE3N0NBMUU2MDZFREQ0M0JBNERGMkM4RUFCNkYzOEU2MkExLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
MiJAxhCcAxCjR4Ko4N4BLoc8AGFjQTAOTYou2AD3M2MCbogB2ebNQDFQEyt8UqIV
ZpqlUIq0vtMNOtRYB3MVmyss4+RcckoxSe7UNcXVKuUwOlnNqEPbsSgVOd6Xp0oz
ryYfeAzi1teDy3iOZ5KhN762N1R9mOHnuMs8JNMHfL9IODcEmKEKJvwy4LpY4NVa
Tn8pd9dgVJlJ3C4aeu9BpMcfadNw7JEy2WAV8oL08tsoBq0q1MWyjPbGRg2B7JzR
0x9Hj9FaKEua5Jf5L5ewFO0pAiwZluvZ6XRsoi2VQjHjbYh72o13EZrrHAWEYqjZ
GMVUYnBpuRKsD8Xk6zeyfw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 10:35:53 2026 by rpki-client