Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          R/7bTtReCmfaqqXakNG5RqL83fRejEaSrMOoL86xDaQ=
Subject key identifier:   8A:32:DF:09:04:8A:DC:12:57:B5:29:47:BD:49:79:81:19:C6:9E:A4
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       6F90C685B715D88B6F527A3AA23E0E6246ADD9E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 12:25:02 +0000
Manifest this update:     Sat 03 Oct 2026 12:20:02 +0000
Manifest next update:     Sun 04 Oct 2026 16:03:02 +0000
Files and hashes:         1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
                          2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: fwJKZxqfN2zQ3QJsGTIRYXmBl/7W7Ffm16nsLWUUzos=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:90:c6:85:b7:15:d8:8b:6f:52:7a:3a:a2:3e:0e:62:46:ad:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: Oct  3 12:20:02 2026 GMT
            Not After : Oct  4 16:03:02 2026 GMT
        Subject: CN=8A32DF09048ADC1257B52947BD49798119C69EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:ed:83:61:83:71:6e:79:ee:2a:15:69:e8:
                    13:b1:e4:bd:01:ec:56:57:ae:df:f1:eb:59:dd:ac:
                    57:e8:eb:29:c8:8f:ac:87:54:02:9e:4f:f4:9c:5e:
                    97:89:d0:9e:f5:90:f2:ff:a3:ac:3e:be:b3:85:2f:
                    7c:ad:c4:bc:93:f4:4e:48:c2:8a:3e:35:e7:41:3c:
                    78:d9:5e:d3:b6:a2:57:ea:f5:1c:9e:37:8d:d4:e2:
                    aa:47:62:23:eb:90:c0:fa:00:90:bc:e1:41:59:f8:
                    12:b4:16:ae:45:2f:c1:ed:d3:66:fa:6b:4f:fb:55:
                    1c:27:f5:e7:a6:30:ad:fb:bd:e0:54:ae:27:88:5a:
                    5a:26:5e:b2:f0:71:c8:d6:32:92:9e:02:42:a4:92:
                    89:9c:07:c6:e4:87:36:18:7e:a1:44:0a:17:17:ab:
                    88:aa:95:04:58:9a:76:35:39:90:47:81:91:ab:81:
                    85:22:c4:99:5b:82:fa:e3:6a:7e:c5:c7:01:b4:c1:
                    51:d1:5c:89:84:e6:77:74:a7:8e:ec:be:b5:b2:e6:
                    fb:4d:7f:f5:53:3e:67:65:d5:5a:28:19:c5:e4:58:
                    b1:96:d1:c3:7c:74:d2:bf:7f:5c:c9:2a:d2:f5:cd:
                    26:a4:b8:9b:ed:4c:21:60:8d:fb:ec:e9:09:e6:2d:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:32:DF:09:04:8A:DC:12:57:B5:29:47:BD:49:79:81:19:C6:9E:A4
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:83:d6:6f:a2:53:74:74:78:9b:e7:d0:0d:6a:36:c7:77:
         5a:a3:eb:25:e1:6e:dd:dc:74:20:ca:c7:03:d3:b7:ac:cd:d6:
         96:05:24:9b:de:40:36:68:db:36:05:93:f9:14:6f:6c:2c:7f:
         a7:d7:a4:d1:87:25:11:5a:de:31:73:b5:98:9a:75:4f:f0:82:
         0d:dd:ad:78:ac:1e:c4:f8:0a:b0:17:1e:36:f5:5e:9d:2f:62:
         a6:97:71:d3:7a:de:2c:0e:12:61:06:0a:8a:37:ba:68:8b:15:
         fc:4d:ab:08:b5:b6:c8:9d:48:81:dc:1d:1e:03:07:06:ab:03:
         cc:a0:bc:16:b2:50:e6:74:9f:1b:5a:2a:9e:46:1e:d8:e5:95:
         96:ab:02:cf:33:b7:8e:38:28:19:fc:77:53:0c:da:8b:12:53:
         14:13:b4:d1:ad:0d:d0:f0:e7:50:00:8f:4f:62:01:0b:a7:e2:
         1b:b2:30:2c:8b:e1:38:2c:a2:a6:bc:b9:de:3a:42:5d:20:f8:
         63:91:0d:12:f0:41:95:8c:8d:9c:c2:11:ac:47:28:6a:9a:1d:
         cf:e5:ff:bc:1f:7d:57:51:90:36:68:55:3d:b5:47:6f:2a:05:
         cb:26:08:7a:cc:22:74:69:64:c5:7f:e5:3f:0f:3e:57:19:dd:
         84:7a:1c:87
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUb5DGhbcV2ItvUno6oj4OYkat2eIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1QUNBMDk2Q0VGQ0VC
Q0VENUQxMjAeFw0yNjEwMDMxMjIwMDJaFw0yNjEwMDQxNjAzMDJaMDMxMTAvBgNV
BAMTKDhBMzJERjA5MDQ4QURDMTI1N0I1Mjk0N0JENDk3OTgxMTlDNjlFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkO2DYYNxbnnuKhVp6BOx5L0B
7FZXrt/x61ndrFfo6ynIj6yHVAKeT/ScXpeJ0J71kPL/o6w+vrOFL3ytxLyT9E5I
woo+NedBPHjZXtO2olfq9RyeN43U4qpHYiPrkMD6AJC84UFZ+BK0Fq5FL8Ht02b6
a0/7VRwn9eemMK37veBUrieIWlomXrLwccjWMpKeAkKkkomcB8bkhzYYfqFEChcX
q4iqlQRYmnY1OZBHgZGrgYUixJlbgvrjan7FxwG0wVHRXImE5nd0p47svrWy5vtN
f/VTPmdl1VooGcXkWLGW0cN8dNK/f1zJKtL1zSakuJvtTCFgjfvs6QnmLSlZAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUijLfCQSK3BJXtSlHvUl5gRnGnqQwHwYDVR0j
BBgwFoAU0LRYzgvljiF3nVrKCWzvzrztXRIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElBTkdD
QUkvMC9EMEI0NThDRTBCRTU4RTIxNzc5RDVBQ0EwOTZDRUZDRUJDRUQ1RDEyLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5
NkNFRkNFQkNFRDVEMTIuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8wL0QwQjQ1OENF
MEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiqoPW
b6JTdHR4m+fQDWo2x3dao+sl4W7d3HQgyscD07eszdaWBSSb3kA2aNs2BZP5FG9s
LH+n16TRhyURWt4xc7WYmnVP8IIN3a14rB7E+AqwFx429V6dL2Kml3HTet4sDhJh
BgqKN7poixX8TasItbbInUiB3B0eAwcGqwPMoLwWslDmdJ8bWiqeRh7Y5ZWWqwLP
M7eOOCgZ/HdTDNqLElMUE7TRrQ3Q8OdQAI9PYgELp+IbsjAsi+E4LKKmvLneOkJd
IPhjkQ0S8EGVjI2cwhGsRyhqmh3P5f+8H31XUZA2aFU9tUdvKgXLJgh6zCJ0aWTF
f+U/Dz5XGd2EehyH
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:27:53 2026 by rpki-client