Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File:                     3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier:          5kP+FrlGc00onKcdmF6tD4ZjpKD2UJGVLCtjkWjVMzY=
Subject key identifier:   75:78:A9:E0:80:E2:76:5B:9F:E9:2D:BE:B2:49:FA:C3:09:A0:FB:38
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer:       /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial:       448F3C855E238793F3D35D6ED24D53BB88B3C9EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number:          C5
Signing time:             Mon 05 Oct 2026 16:54:40 +0000
Manifest this update:     Mon 05 Oct 2026 16:49:40 +0000
Manifest next update:     Tue 06 Oct 2026 17:34:40 +0000
Files and hashes:         1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: Spi12lsXK6xOFKj6PteidkUmVoj38tApwlsPw1wwY38=)
                          2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
                          rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:3c:85:5e:23:87:93:f3:d3:5d:6e:d2:4d:53:bb:88:b3:c9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
        Validity
            Not Before: Oct  5 16:49:40 2026 GMT
            Not After : Oct  6 17:34:40 2026 GMT
        Subject: CN=7578A9E080E2765B9FE92DBEB249FAC309A0FB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:9a:b2:7b:d6:37:05:7b:b9:5f:d9:82:d3:
                    a9:58:ba:10:90:5a:bd:be:96:f6:6c:ec:3d:1f:f3:
                    68:70:0c:4b:e5:7f:a8:4b:48:bb:d3:aa:84:1e:37:
                    2b:d4:85:b6:b1:7c:03:47:d8:ce:04:5c:81:c7:0b:
                    ce:8c:f9:4f:c2:24:1e:df:52:50:8d:53:3f:d7:7a:
                    2c:2b:be:6b:25:35:22:71:38:1f:b7:30:28:56:c7:
                    05:04:9f:14:61:ff:b8:37:56:24:18:7c:22:34:53:
                    86:d1:58:9b:5a:89:78:ce:74:b6:67:93:61:8b:72:
                    89:2a:2d:ad:85:1b:5a:76:b5:45:b9:8a:0e:a8:23:
                    85:9d:54:fb:a5:77:a9:ee:c4:c4:d2:9c:a2:8f:a5:
                    c9:19:8c:06:f3:59:73:38:61:94:64:68:d1:9b:40:
                    d8:29:83:47:6b:59:fa:a3:d2:95:f1:23:47:d9:59:
                    28:ff:97:d4:f2:22:eb:2a:9a:71:46:63:d4:38:40:
                    6c:ef:20:10:26:7a:2f:92:88:db:27:4c:32:dd:28:
                    ff:66:ec:a6:c9:0c:f9:96:6e:c9:f7:42:05:56:5f:
                    5a:77:47:81:ab:c6:c0:92:ce:a1:5f:2f:83:a1:9a:
                    8a:b7:dc:4b:14:fd:02:e6:3a:d3:61:7d:29:9c:79:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:A9:E0:80:E2:76:5B:9F:E9:2D:BE:B2:49:FA:C3:09:A0:FB:38
            X509v3 Authority Key Identifier:
                keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:38:3d:e0:80:58:41:b8:a8:42:cf:68:d8:66:a4:27:0d:
         0c:9c:e4:c4:46:60:59:ff:e8:66:89:03:85:9b:3a:36:36:ea:
         4c:9b:54:2c:85:2e:7b:de:12:b0:dc:c0:93:68:d5:7f:0c:49:
         b1:1e:1b:4e:17:5d:08:03:27:dd:1f:17:18:5c:92:17:1b:fb:
         61:9e:bc:f4:06:09:25:8d:5e:fb:68:97:79:65:89:cb:49:99:
         aa:60:98:8e:0f:32:fe:c6:aa:53:10:e6:f7:b1:fa:d4:92:05:
         96:92:d1:a2:f0:35:df:6c:cf:cd:6d:22:07:fc:9f:8b:02:e7:
         23:f2:aa:50:97:a3:44:3a:ea:7c:66:e8:7c:2d:a4:d5:af:6b:
         e9:e1:7a:4a:72:bc:16:25:b0:d3:5c:e6:f1:3c:0b:09:6b:94:
         c9:66:b2:ad:77:b5:1d:92:83:f1:47:98:f5:96:82:15:a1:a0:
         cd:cd:88:9e:d5:da:02:5d:29:19:10:96:37:80:bd:d5:44:eb:
         fc:b2:8a:f1:41:88:b1:15:46:08:18:6c:91:f2:7e:64:bc:68:
         de:ab:5d:b2:77:d7:14:50:67:c9:68:38:ef:03:61:e3:cd:c2:
         18:17:43:a2:d0:78:7d:4c:98:78:26:3a:29:ed:cf:4c:55:a6:
         39:2f:86:1f
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIURI88hV4jh5Pz011u0k1Tu4izyewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQwNzYw
Q0MwMkVFQTAeFw0yNjEwMDUxNjQ5NDBaFw0yNjEwMDYxNzM0NDBaMDMxMTAvBgNV
BAMTKDc1NzhBOUUwODBFMjc2NUI5RkU5MkRCRUIyNDlGQUMzMDlBMEZCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoN5qye9Y3BXu5X9mC06lYuhCQ
Wr2+lvZs7D0f82hwDEvlf6hLSLvTqoQeNyvUhbaxfANH2M4EXIHHC86M+U/CJB7f
UlCNUz/XeiwrvmslNSJxOB+3MChWxwUEnxRh/7g3ViQYfCI0U4bRWJtaiXjOdLZn
k2GLcokqLa2FG1p2tUW5ig6oI4WdVPuld6nuxMTSnKKPpckZjAbzWXM4YZRkaNGb
QNgpg0drWfqj0pXxI0fZWSj/l9TyIusqmnFGY9Q4QGzvIBAmei+SiNsnTDLdKP9m
7KbJDPmWbsn3QgVWX1p3R4GrxsCSzqFfL4Ohmoq33EsU/QLmOtNhfSmceaaBAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUdXip4IDidluf6S2+skn6wwmg+zgwHwYDVR0j
BBgwFoAUPgq3hquGxNJae+hk3dFAdgzALuowDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RUVi8w
LzNFMEFCNzg2QUI4NkM0RDI1QTdCRTg2NERERDE0MDc2MENDMDJFRUEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQw
NzYwQ0MwMkVFQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEVFYvMC8zRTBBQjc4NkFCODZDNEQy
NUE3QkU4NjREREQxNDA3NjBDQzAyRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb04PeCAWEG4qELP
aNhmpCcNDJzkxEZgWf/oZokDhZs6NjbqTJtULIUue94SsNzAk2jVfwxJsR4bThdd
CAMn3R8XGFySFxv7YZ689AYJJY1e+2iXeWWJy0mZqmCYjg8y/saqUxDm97H61JIF
lpLRovA132zPzW0iB/yfiwLnI/KqUJejRDrqfGbofC2k1a9r6eF6SnK8FiWw01zm
8TwLCWuUyWayrXe1HZKD8UeY9ZaCFaGgzc2IntXaAl0pGRCWN4C91UTr/LKK8UGI
sRVGCBhskfJ+ZLxo3qtdsnfXFFBnyWg47wNh483CGBdDotB4fUyYeCY6Ke3PTFWm
OS+GHw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:11 2026 by rpki-client