Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
File:                     4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft (raw, json)
Hash identifier:          3WMIMy0/qGRUd3Y9iGPegBmBZGNph4/1/lnX9EC+COQ=
Subject key identifier:   2D:3D:43:04:47:8F:4F:73:3E:3A:BE:B0:71:93:B2:BB:12:CE:77:A5
Authority key identifier: 44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09
Certificate issuer:       /CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
Certificate serial:       242B5066EE9BED997E921E2FB53F40AF58628AB7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 04:52:56 +0000
Manifest this update:     Sat 03 Oct 2026 04:47:56 +0000
Manifest next update:     Sun 04 Oct 2026 05:21:56 +0000
Files and hashes:         1: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl (hash: p/2D+l2+Xq2nFjBIowetexASNChiB4xUv8JyvqkjFHQ=)
                          2: 3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa (hash: q17bFdqrhMBLjmohT4EXtTiiL79HGPyDIQggw2a0Oyc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:50:66:ee:9b:ed:99:7e:92:1e:2f:b5:3f:40:af:58:62:8a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
        Validity
            Not Before: Oct  3 04:47:56 2026 GMT
            Not After : Oct  4 05:21:56 2026 GMT
        Subject: CN=2D3D4304478F4F733E3ABEB07193B2BB12CE77A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:20:f7:eb:a4:fb:1e:8e:87:11:b2:24:be:
                    0e:f6:87:29:12:e4:09:e1:32:71:96:93:97:68:3b:
                    3b:0c:5d:c5:ab:19:17:cf:56:e7:d3:0c:c4:d1:91:
                    f7:4e:3b:30:b1:9d:6a:48:27:c3:32:15:74:c2:f4:
                    36:10:cc:f0:0a:18:29:9e:98:5a:e3:55:d8:44:aa:
                    16:0b:28:93:b5:aa:21:89:f4:57:db:97:5c:3b:1a:
                    0e:b1:dd:e6:c3:ce:63:e8:b0:89:c9:26:56:79:b1:
                    74:d9:02:68:e0:6c:e2:41:93:14:65:12:37:fb:56:
                    b2:fd:d5:55:38:0e:e5:1f:42:c8:c9:be:5c:f7:40:
                    8a:78:fe:e5:38:09:5b:ad:ac:ac:b8:4b:72:6a:48:
                    d3:c7:6e:72:0a:fa:87:11:5a:07:6b:2a:43:f4:27:
                    3b:cf:a9:34:3d:76:d6:d3:54:b1:a1:25:ba:0c:45:
                    c1:2d:97:52:0b:92:d4:1a:29:5c:8d:10:e7:f9:e5:
                    1d:2b:36:67:9c:a7:34:5f:9b:f7:fc:80:de:cf:60:
                    5f:86:a6:ce:05:92:9f:54:29:8c:9d:78:d7:b7:99:
                    ce:49:a3:5d:8a:66:ba:6c:2f:c5:8e:ec:72:f6:3e:
                    36:24:a6:bc:f5:36:5b:f6:bc:ed:a3:d4:c3:ec:8b:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:43:04:47:8F:4F:73:3E:3A:BE:B0:71:93:B2:BB:12:CE:77:A5
            X509v3 Authority Key Identifier:
                keyid:44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:7e:dd:c6:70:c8:4d:12:aa:78:7b:a4:d0:7b:87:3f:36:
         b7:0f:2f:4e:c4:41:b2:34:84:40:58:74:0a:e0:10:5e:e5:45:
         90:aa:8a:61:ce:ca:06:77:0d:ce:fb:e0:d8:f0:25:d9:a8:3b:
         10:de:67:59:a4:1d:e2:38:74:9a:8e:97:a0:9c:6f:51:f2:5d:
         d1:8d:49:c7:16:0b:fb:4c:51:ac:25:ad:35:13:6d:a1:7f:3e:
         97:39:7f:90:77:4a:81:31:f2:8f:bb:84:6b:18:8b:71:5e:d0:
         6e:b9:fc:77:b6:3b:cf:4a:11:24:fe:85:24:fa:a6:da:80:ec:
         63:3d:ee:c6:d6:f2:67:99:90:80:e2:8c:61:18:bd:8a:97:2e:
         79:7e:e1:92:97:59:dc:46:5b:c4:f8:51:93:19:0e:15:84:89:
         04:e3:22:e1:85:b2:b9:69:f5:e8:fb:72:4b:cf:cc:c5:67:0d:
         47:ab:fc:8d:33:9e:14:05:b3:59:24:cf:6a:36:3e:72:5e:d6:
         0c:d6:1d:2b:89:d4:f7:f3:04:5e:f9:96:6f:2e:65:b7:4f:92:
         51:2f:a2:b8:d8:8e:c3:73:12:ec:c1:4d:7c:73:c2:4f:d7:23:
         b2:3f:be:a9:22:da:62:a7:9c:44:1a:ec:20:32:8a:2d:9a:ce:
         d9:a4:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:12:30 2026 by rpki-client