Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File:                     4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier:          Btmovsnd+aK7cLIfp+NnneNf+GCnnWu1MUcwmGdXtHw=
Subject key identifier:   0E:22:6F:F2:F7:FF:21:8A:2A:E0:20:AE:E9:9C:D9:73:F1:3B:99:75
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer:       /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial:       52863C2C18ED83DDAA7A78C1A2CC6552E9BC41D4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number:          D0
Signing time:             Sat 10 Oct 2026 17:43:05 +0000
Manifest this update:     Sat 10 Oct 2026 17:38:05 +0000
Manifest next update:     Sun 11 Oct 2026 18:56:05 +0000
Files and hashes:         1: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
                          2: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
                          3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
                          4: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: 9/6j5b8uP0UwukYqqNAES0PdLeZq93lkT2JaAicm7Fc=)
                          5: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
                          rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:86:3c:2c:18:ed:83:dd:aa:7a:78:c1:a2:cc:65:52:e9:bc:41:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
        Validity
            Not Before: Oct 10 17:38:05 2026 GMT
            Not After : Oct 11 18:56:05 2026 GMT
        Subject: CN=0E226FF2F7FF218A2AE020AEE99CD973F13B9975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:f6:71:a8:f2:31:86:7a:f0:d5:83:d9:f2:
                    7c:2e:90:d0:09:f2:6c:e7:15:d3:26:1c:60:e5:1c:
                    f5:ca:44:dc:7c:3d:97:98:13:58:3e:09:26:cf:f8:
                    60:72:57:f8:94:31:67:b9:59:5e:26:e7:70:4b:3b:
                    3b:ce:83:b1:e8:1a:3c:6b:da:0c:39:8e:fc:2d:80:
                    d3:54:de:2d:4d:91:87:6d:62:0a:58:74:96:77:b8:
                    1b:88:20:f0:e5:44:0f:39:45:b1:70:47:ed:84:9b:
                    6c:8e:a2:07:9c:08:8a:52:43:e7:01:46:57:eb:89:
                    fc:2a:b7:cc:0a:2c:99:16:7a:c9:aa:61:65:43:a0:
                    d0:eb:8d:24:66:b9:e1:49:91:9e:df:40:84:69:e3:
                    e8:d8:c7:0a:80:d9:4d:f3:ec:ff:71:ac:10:50:a9:
                    d9:8b:33:98:56:60:d5:4f:3c:47:35:e6:8d:90:13:
                    a6:72:ae:00:e8:18:39:c0:66:cd:8c:03:fc:26:f3:
                    0e:cd:65:f1:ec:cf:5c:31:92:b2:fb:e3:e4:af:3d:
                    f1:1d:f9:4e:33:ec:fd:57:18:90:6a:0d:0f:62:6c:
                    7d:5b:17:93:3a:4c:7e:82:28:2a:12:0b:62:b2:5e:
                    fc:ae:58:0c:b3:78:d4:90:5e:01:00:96:65:f9:c9:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:22:6F:F2:F7:FF:21:8A:2A:E0:20:AE:E9:9C:D9:73:F1:3B:99:75
            X509v3 Authority Key Identifier:
                keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:71:e1:bb:af:74:1c:42:80:17:7e:5f:4a:40:eb:fd:5d:
         3e:50:e0:62:6d:d6:39:3b:a2:a1:46:8a:dd:7c:ec:2c:5d:a8:
         65:65:f9:8d:44:dc:f0:0a:79:25:d2:8c:b6:4c:ce:77:d6:28:
         95:74:76:ff:84:82:75:f1:98:33:c7:07:d9:68:04:0d:13:ef:
         c1:b2:e1:6b:64:a8:af:06:6e:6e:c9:29:f9:b6:b1:7b:f3:a4:
         2a:6d:b6:48:5d:9d:1e:7d:e2:36:9b:66:34:cd:3c:5a:9e:d4:
         59:12:8a:6a:52:e2:1d:5c:6d:97:97:83:98:30:43:b8:b2:0f:
         85:04:7a:17:7b:5a:fd:c4:88:c5:81:69:c7:6b:58:51:51:28:
         cb:6a:36:7f:dd:7f:8b:a8:8a:b2:c3:88:70:f5:83:10:16:63:
         9a:2b:e0:ce:36:c2:65:a0:e0:56:c1:97:91:a2:8b:44:96:f1:
         d6:a1:a7:c3:a4:61:c7:94:f7:da:00:63:11:68:71:e5:f8:a8:
         7b:d6:8f:f0:4b:7d:43:47:2c:25:bb:f1:67:ae:76:a0:53:4c:
         dd:1b:07:4e:c5:db:85:7e:c1:f1:c7:62:69:b7:23:9e:b7:43:
         43:fd:a3:b4:d7:ee:c0:6e:2e:59:c7:81:27:02:7e:88:35:83:
         b9:5d:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:40:49 2026 by rpki-client