Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File:                     9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier:          izMnVZZMlBZ16sNyvBttpa0A5svCvu9FUCS9Kx04SzU=
Subject key identifier:   68:B3:10:68:AD:E0:5E:50:15:A8:52:47:3A:DA:10:C7:F6:E5:4F:E6
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer:       /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial:       4C62D5C0F937D80FF36F97250E2F2AF76F9543B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 06:47:27 +0000
Manifest this update:     Wed 13 May 2026 06:42:27 +0000
Manifest next update:     Thu 14 May 2026 08:48:27 +0000
Files and hashes:         1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: Zb78YRVezgai4VNVO3qn1BpsUgrkvg0mdZK+yQvT2yI=)
                          2: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
                          3: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
                          rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:62:d5:c0:f9:37:d8:0f:f3:6f:97:25:0e:2f:2a:f7:6f:95:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
        Validity
            Not Before: May 13 06:42:27 2026 GMT
            Not After : May 14 08:48:27 2026 GMT
        Subject: CN=68B31068ADE05E5015A852473ADA10C7F6E54FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:f2:9d:5b:2e:79:3e:51:d9:aa:46:d1:60:
                    8a:2b:a0:5c:61:dd:40:b3:79:b5:05:93:fd:7b:14:
                    95:64:ae:0a:04:bd:4f:e4:e5:2b:ae:40:7d:12:e9:
                    60:fc:ed:1e:23:d5:58:5f:d5:87:00:db:33:fa:f2:
                    0d:2a:42:73:9b:05:1f:35:d7:ae:88:ed:84:41:31:
                    11:72:e0:7e:b4:87:2b:42:f5:ce:ab:76:32:91:33:
                    ee:86:e3:5c:5e:86:a1:ef:3d:8c:cc:dd:e1:f9:d1:
                    83:1b:f6:69:6c:70:f1:9c:fb:7b:e2:1f:70:bd:e5:
                    33:7d:85:8e:1b:f3:f6:b5:63:13:74:fa:0a:e1:c4:
                    e6:19:7a:26:40:b7:1d:d5:51:00:d1:0e:db:5e:15:
                    7c:96:d2:c4:60:c0:dc:1d:16:7e:21:8c:90:f2:f1:
                    fb:bf:16:32:83:f0:03:f5:09:65:32:9b:78:7c:b0:
                    c3:5e:b2:9d:96:d2:30:c9:e7:03:2c:83:2a:7f:e8:
                    4c:a7:b3:29:f0:25:68:47:95:ff:eb:23:8a:a1:c5:
                    a2:70:9f:eb:5b:fc:c9:e1:22:7a:55:41:2b:72:d5:
                    72:50:3e:84:49:e8:8d:e5:43:54:c9:9f:d4:4c:03:
                    24:59:68:66:00:46:65:5d:50:cf:5a:c9:f5:e5:29:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B3:10:68:AD:E0:5E:50:15:A8:52:47:3A:DA:10:C7:F6:E5:4F:E6
            X509v3 Authority Key Identifier:
                keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:cf:ae:92:7a:ee:5e:78:0a:cc:d1:0f:ae:b2:ff:09:83:
         c7:20:cb:ce:99:18:d4:5c:42:3b:dc:6b:8e:3f:a0:2e:24:75:
         0f:ab:45:00:69:22:40:d0:fc:3b:70:47:78:93:01:e5:a5:bf:
         e7:01:29:8e:3b:4d:fc:13:d8:89:b1:90:4b:76:62:85:fe:b4:
         0d:da:30:91:b6:72:22:99:12:44:6a:19:9e:d9:6a:3a:38:40:
         cf:90:f0:f6:f7:71:21:9f:1d:aa:e8:2f:40:b3:0b:49:68:90:
         1e:5e:a8:c1:03:8c:eb:3f:8c:54:b9:a2:e7:45:42:3f:a4:e0:
         fd:2f:a1:22:31:bb:61:26:78:0e:99:0f:8e:73:3d:ce:4d:18:
         b9:78:66:1b:ef:48:d4:03:ed:bc:4f:5c:4b:3f:b1:10:a7:bb:
         b9:9d:dc:c2:20:15:94:fb:dc:d1:77:c9:f3:f7:dc:9e:25:2d:
         6f:5e:3f:5e:66:e6:c9:e4:24:93:91:05:ed:b3:ac:ab:8b:67:
         cc:6b:1d:47:7e:aa:e5:25:2b:58:6b:f9:80:2e:9b:1e:38:62:
         80:22:d1:5f:1a:cc:ed:53:40:a3:13:70:36:80:7b:c6:da:9b:
         6b:ac:a9:fc:79:24:cd:c0:b4:a0:96:8e:ac:5b:4b:13:4d:53:
         13:b5:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:10 2026 by rpki-client