Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
File:                     93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft (raw, json)
Hash identifier:          6QOs35Ip8RAJVhgxaJEA2BBGwt//+PC8UK8su53kcuE=
Subject key identifier:   34:00:FB:21:4C:53:4D:3E:60:D9:59:42:85:6E:0B:F0:D2:AC:12:5F
Authority key identifier: 93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55
Certificate issuer:       /CN=93A2D191271D101C8105C5AE462CDE7AD3DAC755
Certificate serial:       3087F20CA8429C1CB45908CE96A16FDC413E94CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
Manifest number:          C4
Signing time:             Sat 03 Oct 2026 08:34:12 +0000
Manifest this update:     Sat 03 Oct 2026 08:29:12 +0000
Manifest next update:     Sun 04 Oct 2026 09:33:12 +0000
Files and hashes:         1: 3130332e3131372e3232342e302f32322d3234203d3e20313331363237.roa (hash: 0KbglY0GHr9S6rCumvfC0BaXiJdDx41/gDWuUxEFBJs=)
                          2: 93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl (hash: PqM7tBySP8a3MzDTcBewrduozvXkgSxELkrZi5iSh8o=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl
                          rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:f2:0c:a8:42:9c:1c:b4:59:08:ce:96:a1:6f:dc:41:3e:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A2D191271D101C8105C5AE462CDE7AD3DAC755
        Validity
            Not Before: Oct  3 08:29:12 2026 GMT
            Not After : Oct  4 09:33:12 2026 GMT
        Subject: CN=3400FB214C534D3E60D95942856E0BF0D2AC125F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:bf:32:f4:2c:d3:9e:8d:be:3d:81:05:e9:
                    6b:18:aa:7e:21:c1:79:2d:f7:39:fb:41:06:dd:34:
                    79:6c:c0:cd:65:c9:00:7e:43:9b:2c:f8:b1:8a:21:
                    a3:8b:5b:ec:31:b9:12:44:4b:21:92:5b:fd:9e:07:
                    cb:3b:6d:29:ca:d6:57:63:e8:54:f9:e2:fd:ae:a0:
                    c7:60:bb:6e:02:13:a5:f3:c5:7b:b7:60:e0:a5:2c:
                    ba:c2:02:08:be:d9:10:6b:05:09:aa:5e:03:c3:ce:
                    f8:b5:b8:6c:1b:9c:b4:5a:75:18:e1:c1:b3:e0:40:
                    6d:eb:96:e9:0f:ba:7f:ff:35:5e:85:22:7c:ce:86:
                    a2:af:7b:b8:0c:3a:32:79:c6:f8:72:c7:de:2f:67:
                    2c:a7:bd:63:9a:71:7b:03:49:53:22:5d:ff:b5:d8:
                    bd:c1:95:fe:06:54:b9:b1:85:d4:d2:80:9e:16:a5:
                    60:f4:7b:23:54:73:37:f6:36:12:f2:fe:9c:87:7c:
                    ca:67:be:5d:d8:3c:1c:25:d5:ba:fb:ec:03:33:f6:
                    d3:ee:e2:0a:9e:2b:5b:a0:6d:c6:2c:cb:cc:cf:d6:
                    ab:0b:66:e9:9d:4e:0d:04:09:d1:fb:05:bc:67:a0:
                    19:45:7e:97:cd:5a:37:83:82:3e:47:ae:30:d0:9f:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:00:FB:21:4C:53:4D:3E:60:D9:59:42:85:6E:0B:F0:D2:AC:12:5F
            X509v3 Authority Key Identifier:
                keyid:93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:a7:4e:92:71:cc:25:2e:3f:9d:92:72:eb:85:3a:32:c4:
         a7:42:83:92:3c:c1:1e:70:2c:9b:20:cc:e3:35:a8:b2:de:af:
         9a:c5:a4:c6:f6:40:27:c1:ea:2e:3f:8a:37:cc:7f:04:75:b7:
         c0:9b:93:33:28:0b:02:40:50:a1:4e:e2:63:f2:4a:2d:1a:16:
         cb:36:ca:ae:99:3a:9c:dc:e8:6a:7c:ea:6d:fc:70:d7:29:b2:
         02:06:f0:8a:90:35:0e:0d:b6:c5:29:ef:3e:c3:2c:f7:a2:7c:
         20:07:6c:77:b6:ff:1c:3d:3d:84:8f:0b:cf:a7:e6:f1:c2:a3:
         b8:a5:df:b7:e9:a8:d1:ca:f1:7b:94:ff:d5:b2:a9:1b:2d:24:
         63:67:4f:ea:36:4a:0a:06:85:5f:aa:20:26:58:37:5e:ab:82:
         84:23:6c:13:9a:e6:87:35:3a:68:6a:90:2d:b9:9b:f5:48:6f:
         72:17:9a:81:0e:15:69:73:f6:49:91:7c:00:aa:95:14:48:37:
         fb:e2:99:a5:47:e0:db:97:e0:45:b2:d1:bf:18:d3:f9:5b:6d:
         fe:9c:3a:0d:d1:d9:6e:5d:9d:2d:f8:6a:8d:51:77:7d:1e:89:
         34:52:65:46:8d:27:fa:fa:05:4b:a5:c2:d5:cb:c6:eb:2e:a6:
         c7:57:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:28:06 2026 by rpki-client