Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
File:                     4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft (raw, json)
Hash identifier:          bHhp8U/bR9B0GewlgiDlXbzCfw5Sv42H5IMhc/RPDpA=
Subject key identifier:   6F:BA:CE:04:62:E3:B3:EA:EE:CE:BE:5B:0E:6C:D0:D0:8B:93:3F:9C
Authority key identifier: 4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A
Certificate issuer:       /CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
Certificate serial:       25C4613807FD2F0368675968E9935EFF5D5CC8F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
Manifest number:          C4
Signing time:             Sat 03 Oct 2026 18:26:32 +0000
Manifest this update:     Sat 03 Oct 2026 18:21:32 +0000
Manifest next update:     Sun 04 Oct 2026 20:56:32 +0000
Files and hashes:         1: 3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa (hash: LmwwUpuv8Sdk8tENdd/b/+ib5Yq3yrtpL7doLISV6t0=)
                          2: 4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl (hash: 4rUcGZ5Lrj4IAt89b1I5FgvbokBZ5z2r3Y87Yo1MVBI=)
                          3: 3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa (hash: TV/kkKGDNzLBj39V9Lo72jKALKU5eFiuvbJ+dNiiqVM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 20:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c4:61:38:07:fd:2f:03:68:67:59:68:e9:93:5e:ff:5d:5c:c8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
        Validity
            Not Before: Oct  3 18:21:32 2026 GMT
            Not After : Oct  4 20:56:32 2026 GMT
        Subject: CN=6FBACE0462E3B3EAEECEBE5B0E6CD0D08B933F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:31:3d:e5:95:7a:df:74:be:ca:f2:d6:b7:
                    ae:7a:32:33:a0:6f:91:80:91:ea:37:f7:52:0d:f3:
                    3b:b1:55:ee:07:ae:86:bf:f6:4d:5f:9e:7d:60:da:
                    4f:cb:71:a3:f2:52:3c:bf:b4:f9:46:f2:3b:a4:ce:
                    72:df:1c:b2:40:21:53:e6:f6:0c:4a:7f:21:bf:d6:
                    0e:82:b9:a3:37:e4:0b:f2:d6:12:4b:c6:57:fc:87:
                    4a:6d:63:07:58:b6:9a:0e:03:fe:48:be:06:02:15:
                    df:a5:9d:98:9d:86:59:2e:fa:64:a3:03:d2:a8:b9:
                    08:14:86:d8:91:9c:57:7a:30:bc:dd:79:65:79:c0:
                    a0:11:12:b3:3c:30:e2:f7:80:70:d9:29:f8:94:3f:
                    76:db:a9:bd:7e:f6:f5:ef:cd:db:19:00:3c:1b:fb:
                    53:54:10:43:fa:5b:56:33:32:88:f5:0b:17:7e:a8:
                    22:26:66:87:0f:43:9c:b1:71:13:73:55:ae:a1:f6:
                    10:a7:b3:63:c4:71:1a:d9:f6:89:e6:9a:5e:56:32:
                    6f:2b:71:cd:88:9c:79:d1:1b:18:4e:02:ae:57:74:
                    38:ca:c9:5d:ee:49:c3:e5:22:49:bb:9e:6c:40:73:
                    ce:33:e4:dc:60:c9:f8:9f:a5:de:e9:d3:fd:12:49:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:CE:04:62:E3:B3:EA:EE:CE:BE:5B:0E:6C:D0:D0:8B:93:3F:9C
            X509v3 Authority Key Identifier:
                keyid:4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:87:d1:88:74:5e:52:13:64:e3:5a:f0:f0:e9:03:e2:9e:
         e6:98:cf:a4:33:12:18:48:ec:a9:ea:0a:54:f7:16:bd:1f:b6:
         a4:36:6f:c4:e3:e2:35:68:35:9a:05:c6:7e:e7:07:b0:6e:48:
         65:c7:0d:56:63:f6:9c:54:e3:b4:10:26:32:49:c7:41:28:f1:
         7b:d7:d7:fd:fc:9c:52:70:c3:86:96:66:b3:6f:46:15:37:46:
         00:3b:dd:bc:19:ff:ad:b8:0e:8f:47:0d:f5:3a:0e:4a:3b:10:
         9f:da:04:ce:0c:ee:ee:5c:ab:b5:d6:e1:64:15:fc:39:87:54:
         d6:ee:d4:4d:08:97:0e:dd:28:2d:d7:20:08:6f:3e:7e:5c:49:
         31:7e:3c:d0:24:4b:28:24:c2:15:12:20:65:10:60:f7:05:6b:
         bb:64:fd:60:76:29:c7:1a:71:3b:a5:de:48:8a:67:22:6b:fc:
         7a:ca:a3:b2:97:77:dd:3c:33:36:84:d5:7e:9c:c8:90:43:5e:
         4a:df:ad:03:b8:3a:b1:47:64:27:95:3d:e1:d1:ca:b2:5f:e0:
         10:6c:6d:43:7b:d7:54:f1:0d:fe:5c:45:b6:9e:51:6d:a8:ee:
         2e:61:c0:03:c5:dd:ed:41:9a:4b:04:f7:44:a5:87:d9:af:f4:
         10:a5:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:34:51 2026 by rpki-client