Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
File:                     86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json)
Hash identifier:          jiCf3fQoT+ZG1YXa8T64XIcX9DRivDcxPHrZI2P1YDo=
Subject key identifier:   B8:A2:5D:56:CD:98:D2:19:1F:FB:72:79:8F:A3:5C:0D:73:96:F5:E0
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Certificate issuer:       /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial:       435FCF134356CB10AB2B56A4023A2AA5C9134ABB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
Manifest number:          C5
Signing time:             Mon 05 Oct 2026 00:21:09 +0000
Manifest this update:     Mon 05 Oct 2026 00:16:09 +0000
Manifest next update:     Tue 06 Oct 2026 03:10:09 +0000
Files and hashes:         1: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=)
                          2: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: 9XsScMKKDYvyyRlV1OG8oBdCkMt5CXqPPqGGNQxXQy4=)
                          3: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
                          rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 03:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5f:cf:13:43:56:cb:10:ab:2b:56:a4:02:3a:2a:a5:c9:13:4a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
        Validity
            Not Before: Oct  5 00:16:09 2026 GMT
            Not After : Oct  6 03:10:09 2026 GMT
        Subject: CN=B8A25D56CD98D2191FFB72798FA35C0D7396F5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:e5:ce:ef:46:ad:66:fb:22:bd:6d:b8:74:
                    fb:50:58:78:d5:e6:6d:02:c9:8c:cf:14:e1:13:0c:
                    6b:49:6f:e3:09:f7:e8:eb:fe:1e:37:74:a3:33:91:
                    53:49:7c:af:3e:f5:1b:12:c1:fd:34:4b:0a:0d:d2:
                    84:c2:95:4e:81:83:b4:18:a5:ab:64:a2:d4:70:42:
                    15:2d:a5:b7:8e:cc:a0:01:92:ba:2b:a7:a0:93:8a:
                    4f:fe:6c:30:a7:8a:e0:a8:b0:5b:0c:80:00:05:a1:
                    a1:fc:9f:2e:4a:34:48:2b:37:88:65:cb:e0:d2:1b:
                    c4:7a:17:c7:ff:02:fc:0e:05:7e:27:12:a6:63:37:
                    fe:eb:68:a5:e6:83:42:22:e9:99:10:0c:2c:ed:7b:
                    4f:b4:b6:66:29:2b:a2:66:81:d9:9e:5a:0a:40:bd:
                    1c:22:f8:d0:aa:4a:f4:3c:2f:f5:28:b2:8f:d8:74:
                    b3:9d:c8:ba:8e:48:0e:61:63:70:73:f2:e7:b0:fe:
                    62:1b:06:33:72:2e:74:71:ce:34:ef:bf:ec:64:d9:
                    cc:97:20:2d:17:3d:6b:6c:fb:18:7b:95:72:72:34:
                    42:06:34:7e:71:f8:4b:bc:95:e5:1d:30:4f:2f:2a:
                    9e:21:58:3e:23:59:a7:50:4d:b0:0c:fa:b4:e4:cf:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A2:5D:56:CD:98:D2:19:1F:FB:72:79:8F:A3:5C:0D:73:96:F5:E0
            X509v3 Authority Key Identifier:
                keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:53:80:a9:2c:4f:4a:77:33:fa:69:0a:6a:ba:25:e3:96:
         03:98:81:78:dd:90:f4:04:2d:31:35:92:45:60:91:8d:03:76:
         f7:bd:56:f1:4f:c3:6b:34:c1:36:0e:b8:b2:d2:0d:2a:f1:d1:
         f4:2e:40:f0:11:54:2b:aa:03:d8:6e:9f:4e:8e:f1:f7:80:95:
         04:83:83:bc:cf:f5:75:18:ab:94:68:c1:3b:d7:3d:bd:5c:3e:
         7b:69:6d:cf:ba:04:0f:30:7d:6e:a3:4a:52:0a:d4:87:78:95:
         bd:d3:81:7c:e6:9d:ef:50:cf:e3:a5:40:3f:e2:1f:4f:83:e5:
         fa:45:75:c9:da:3e:2e:20:88:3f:19:8d:27:d8:16:c8:35:9a:
         0f:9e:de:cf:33:2b:66:00:ba:dd:bc:7e:14:b1:7a:2e:05:92:
         97:3a:d1:fa:2e:e2:cd:c4:f5:4d:dc:ae:2a:af:b5:0f:49:3f:
         46:5f:17:73:92:d5:ab:08:d9:9c:94:46:6b:de:54:d6:fc:70:
         06:89:70:3b:94:00:ec:3f:d0:2b:6b:1c:51:37:0b:a3:af:64:
         d7:fc:a4:5c:4b:32:22:4e:81:b0:64:f9:6d:0d:28:07:39:62:
         bf:83:c9:40:dc:4c:fa:77:99:74:fd:f5:0e:2d:7f:17:b1:c8:
         9e:0a:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:31:50 2026 by rpki-client