Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File:                     8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier:          YHrOIkoUCHuJSrgCp57nE9GJWaAXXDOm9hoMiW8kowE=
Subject key identifier:   E4:50:2E:8E:E6:C8:38:D0:D4:16:D8:52:7F:21:A3:DD:55:EE:11:E5
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer:       /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial:       632F1D07C60515646521ED60B792AA7266EEA34E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number:          C3
Signing time:             Sat 03 Oct 2026 17:16:19 +0000
Manifest this update:     Sat 03 Oct 2026 17:11:19 +0000
Manifest next update:     Sun 04 Oct 2026 19:20:19 +0000
Files and hashes:         1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: 6mOhEM4OwUSRwcUwcLkyVn2i6kNqYpeBR2mnPNIJi4U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
                          rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 19:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2f:1d:07:c6:05:15:64:65:21:ed:60:b7:92:aa:72:66:ee:a3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
        Validity
            Not Before: Oct  3 17:11:19 2026 GMT
            Not After : Oct  4 19:20:19 2026 GMT
        Subject: CN=E4502E8EE6C838D0D416D8527F21A3DD55EE11E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:22:8d:51:13:31:44:b0:a0:8b:20:b7:a5:
                    df:7f:72:c5:b8:28:4b:1e:8a:7e:02:f2:0c:67:5d:
                    12:70:55:0a:85:8e:71:09:08:67:8f:06:7c:3a:d0:
                    bd:af:2e:87:5c:3b:b5:5d:22:1d:1d:3d:c2:9e:56:
                    1b:3d:0c:16:b7:11:5f:21:07:05:41:77:f0:ac:46:
                    38:05:ac:70:3d:73:44:23:00:11:3d:a1:04:b1:5c:
                    94:38:5f:d6:ee:b8:e2:f1:bf:00:7c:6c:df:05:91:
                    45:16:6f:67:c5:92:11:aa:88:f3:6f:70:e2:ab:0a:
                    63:89:9a:7e:cf:cf:84:34:e6:4a:8e:6d:40:40:a5:
                    13:3e:f7:2b:3b:07:db:2f:fa:95:84:92:08:92:9d:
                    e0:dc:0b:d9:2a:e9:9b:15:6e:1f:85:19:a0:9c:44:
                    96:be:c2:f4:ef:9d:7e:73:14:b0:20:31:4f:32:b2:
                    82:9c:3f:69:01:d0:17:f1:af:6b:73:5f:2b:4b:ec:
                    c6:80:8b:64:ba:b4:f8:0f:de:46:52:a6:b2:31:ac:
                    18:cb:d9:13:5d:ae:5b:c3:a5:c2:b8:82:2c:99:15:
                    e2:0b:65:ed:07:0a:d5:f5:e8:d7:a2:c1:63:d5:9a:
                    8d:53:e8:82:86:7a:c3:c6:d7:93:07:e5:d3:b6:c5:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:2E:8E:E6:C8:38:D0:D4:16:D8:52:7F:21:A3:DD:55:EE:11:E5
            X509v3 Authority Key Identifier:
                keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:12:ff:94:a1:71:8d:c8:86:59:fc:11:7c:41:98:6c:06:
         21:49:84:48:92:5b:50:2c:ba:9c:aa:9b:eb:4a:62:e7:a1:5d:
         50:97:7e:08:d3:be:7e:74:7e:c8:63:9d:43:e1:04:68:fe:6d:
         fa:95:39:a0:bf:37:92:0c:05:92:20:47:1d:1a:79:e7:5f:68:
         b2:9b:ce:18:84:42:c7:f2:0b:41:02:10:5a:1e:36:b5:c8:f7:
         02:04:91:36:ea:04:a2:f2:4e:ed:47:44:bb:1b:6a:89:a5:2a:
         71:9c:56:58:12:93:5c:ab:eb:0c:87:4e:94:f8:18:f6:b8:f5:
         1a:e2:00:65:e1:f3:48:91:65:81:c3:b0:b8:47:d0:98:1d:20:
         73:e3:23:c4:9f:15:49:8d:f1:7d:f8:11:62:31:6b:7d:d0:56:
         a6:56:c4:f6:ae:c2:5a:f3:8b:0e:a9:cb:9a:c3:6f:65:c5:a9:
         19:a4:78:d9:95:0a:2b:bc:dc:9f:18:1b:e6:40:88:96:d4:ba:
         4f:ab:15:d2:71:33:9d:ce:a1:47:a5:54:bc:e8:29:08:41:39:
         ee:3b:87:3e:cb:50:79:02:a3:84:e4:cf:c4:e1:b5:be:d1:d6:
         50:b9:88:b1:3b:4f:41:c0:08:a9:ef:b4:1b:31:ca:45:e3:c0:
         97:b4:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:51 2026 by rpki-client