Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          +MN9RbAc7rUqoVfp0PlgYaaJq7psB6xB4k/6HGNSSi0=
Subject key identifier:   27:EB:F9:CD:08:CC:C6:FE:31:95:30:A5:2B:F0:30:12:24:19:79:63
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       3BC43D82573A7E8088FF131C769CF5CB438D57B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          C8
Signing time:             Tue 06 Oct 2026 21:19:15 +0000
Manifest this update:     Tue 06 Oct 2026 21:14:15 +0000
Manifest next update:     Wed 07 Oct 2026 22:04:15 +0000
Files and hashes:         1: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: xVEeiD2WrP/GIdJvAAwoHJxLpx6XgIEZiUvi1D3tAmY=)
                          2: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 20:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:3d:82:57:3a:7e:80:88:ff:13:1c:76:9c:f5:cb:43:8d:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: Oct  6 21:14:15 2026 GMT
            Not After : Oct  7 22:04:15 2026 GMT
        Subject: CN=27EBF9CD08CCC6FE319530A52BF0301224197963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:46:59:2b:a4:dd:e4:3c:2e:15:63:dc:ce:
                    9b:50:34:52:68:77:c9:86:e5:f5:58:22:e5:31:db:
                    a2:9c:9b:c9:c7:66:0c:b9:59:5c:42:c8:cf:b1:85:
                    4a:d4:b1:fa:a3:71:f9:95:6a:11:9c:96:30:d9:7f:
                    49:fb:ee:c3:0d:fa:f0:5e:bb:d4:e5:0d:e2:c5:d9:
                    ab:5b:2d:d3:15:27:e9:96:6e:26:c7:ac:a6:9b:67:
                    16:9c:c5:d3:5b:a8:ae:32:49:61:ce:82:1e:de:ba:
                    20:5f:2e:a2:28:2a:06:98:62:82:ae:65:ad:89:75:
                    d6:d1:49:8a:bb:4a:c3:33:0a:83:52:77:3b:1a:94:
                    30:a0:aa:cd:b4:e6:7c:f6:30:c3:c7:3b:bc:2a:2c:
                    7c:28:d9:53:61:da:f0:a9:98:d7:cf:6e:0b:72:bb:
                    f0:c3:5b:2e:e6:ca:02:2e:6f:42:eb:1b:19:49:65:
                    5b:b0:7a:c8:df:54:d9:e4:1f:83:dc:da:2e:d8:c3:
                    5f:1b:c6:1d:66:e6:0b:7d:89:08:03:07:52:34:a7:
                    b4:39:e9:e7:2e:f9:14:b1:aa:df:e0:44:6b:ce:f0:
                    d2:ba:e8:a8:91:be:c6:e3:e2:5d:cd:af:9f:43:a6:
                    a9:2a:99:0f:d3:5e:e2:bb:40:b0:f1:3b:d6:20:f9:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:F9:CD:08:CC:C6:FE:31:95:30:A5:2B:F0:30:12:24:19:79:63
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:0f:d7:8f:b6:a2:be:8a:7c:87:c7:76:a2:ea:18:95:14:
         d8:af:95:e5:6d:31:f9:4c:f5:35:93:19:56:f9:f2:fe:09:72:
         6b:eb:2d:e1:fa:6f:53:89:c9:df:b1:ba:a3:56:02:56:43:f4:
         4e:92:e2:d1:54:c6:99:0d:a9:51:59:68:0f:a3:4d:2b:f6:92:
         c1:fb:6a:55:a0:49:6b:9f:36:83:64:40:4f:79:d8:6c:88:cc:
         a2:f3:02:42:26:c9:2d:2b:72:55:8d:d8:da:81:e0:ff:c7:31:
         dc:8b:72:71:e3:58:ff:7b:99:94:93:67:0d:12:35:43:f1:d7:
         53:ea:c0:ef:c0:ea:19:df:03:69:18:7f:b6:a7:f0:66:f6:c2:
         4b:10:33:17:79:67:de:bd:f1:d6:d1:8f:ce:15:f5:2c:8f:c7:
         6a:72:53:92:7c:13:c8:65:3e:3a:ba:64:da:dc:aa:9a:ed:f3:
         2c:c9:16:47:d2:55:57:0f:27:30:43:df:ca:8e:5b:e7:eb:53:
         00:32:75:e0:7e:ae:07:91:9d:16:9d:39:67:4f:9b:9b:b7:49:
         37:3e:10:b1:14:b2:0d:f5:b5:04:88:7d:a5:df:b8:4e:9e:30:
         70:c1:1b:ea:52:4c:a9:ce:64:a3:fb:6c:c9:ae:03:99:80:79:
         ee:ef:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:11 2026 by rpki-client