Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
File:                     980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft (raw, json)
Hash identifier:          tqKZ2YiwtlGS60C5WycOJ10eSAi0tJ9Bh0Z/noydaQU=
Subject key identifier:   BA:23:8E:30:00:4F:14:69:83:0E:98:38:66:06:66:5A:F7:2F:8D:2C
Authority key identifier: 98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01
Certificate issuer:       /CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
Certificate serial:       687CAE04B605C7F84FF892416EDB6C4B340D874D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
Manifest number:          C2
Signing time:             Thu 01 Oct 2026 20:54:07 +0000
Manifest this update:     Thu 01 Oct 2026 20:49:07 +0000
Manifest next update:     Sat 03 Oct 2026 00:14:07 +0000
Files and hashes:         1: 980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl (hash: tYexkDfsRi4ergPXZDiaXWCgHzFg/nBEFxkEs6iMHIU=)
                          2: 323430303a666536303a3a2f33322d3634203d3e20313530373730.roa (hash: EhLj+m0MkuzmmwvkxkJNFTonhVd1K264TpTCs4vZ774=)
                          3: 3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa (hash: sfd0XACvVXb+UD6MWhg3l8P8g9Qo3omITYOEYKEM2cQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl
                          rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 00:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:ae:04:b6:05:c7:f8:4f:f8:92:41:6e:db:6c:4b:34:0d:87:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
        Validity
            Not Before: Oct  1 20:49:07 2026 GMT
            Not After : Oct  3 00:14:07 2026 GMT
        Subject: CN=BA238E30004F1469830E98386606665AF72F8D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:9a:66:9f:b4:15:f6:e6:a9:01:5c:73:c9:
                    20:4a:c3:e3:22:35:ad:4c:79:c2:59:9b:ad:e4:27:
                    c2:4f:f9:a7:8d:2a:69:01:93:28:83:df:d3:69:cf:
                    3c:c4:9b:bf:7b:44:d2:bd:04:5a:2d:b3:f9:1f:09:
                    ba:b6:d3:90:0e:25:d5:61:05:36:cd:a8:2e:22:8c:
                    3b:38:52:d7:d3:1a:54:e4:50:ce:25:83:a5:f9:50:
                    fb:97:9d:41:ab:eb:16:12:28:17:6c:b1:bc:20:73:
                    bf:47:59:79:f7:f3:1e:e1:48:e9:85:3c:39:92:39:
                    4f:de:e3:9d:4b:1d:9c:b4:72:36:9d:79:54:69:ce:
                    2f:fd:4b:3c:76:fc:e8:25:3c:ca:53:cc:e6:5b:34:
                    47:8a:9a:d9:b5:65:67:c1:d3:ad:2f:70:43:49:a0:
                    75:47:e5:69:54:48:aa:ea:3b:bf:f8:67:ad:86:6a:
                    7b:0a:21:3d:c2:d0:4a:65:ef:eb:c7:0f:95:99:2c:
                    7d:1e:45:e2:a1:52:03:7d:59:3c:45:8b:dc:2a:90:
                    d8:4a:22:c7:08:33:21:80:4a:96:74:e8:68:a3:dd:
                    3d:2c:9d:b7:5a:b4:36:5e:e6:8b:2d:69:34:c6:a9:
                    16:76:61:dc:c6:88:60:c8:df:3b:13:7a:9f:a3:b2:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:8E:30:00:4F:14:69:83:0E:98:38:66:06:66:5A:F7:2F:8D:2C
            X509v3 Authority Key Identifier:
                keyid:98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9e:77:0a:59:7a:46:a0:45:68:5d:c8:c4:22:ae:2e:96:36:
         c3:8f:fa:cb:44:46:35:f3:36:e3:53:00:1c:21:53:2e:3d:9a:
         73:4a:95:9e:8e:1e:16:51:9c:52:52:46:40:49:7d:30:3c:33:
         9e:b0:f4:ca:5e:d0:09:f4:8d:56:b9:8f:9d:eb:7c:f1:b3:60:
         ef:88:18:04:d9:5e:da:77:a9:d3:cc:f4:c5:26:ce:f4:ac:4b:
         9b:21:57:65:64:52:d4:d1:7e:5f:ca:84:89:b6:78:d9:cf:c7:
         0c:55:ea:4f:d5:9d:e9:8a:4f:31:6f:2d:e7:71:bd:07:3e:e4:
         7b:1d:6f:80:74:a4:8e:4b:14:58:7f:d3:ab:6c:74:bf:6a:86:
         82:2e:e4:7b:7e:cb:94:73:67:9a:8b:12:1f:d6:e2:f6:41:b7:
         4c:0c:74:35:f2:f6:e0:15:29:ea:6d:c8:5b:d0:41:c9:1a:88:
         0c:c1:f5:51:b7:9d:c0:25:f9:1b:e3:ef:41:f5:be:48:d5:bd:
         bf:0e:76:b4:3e:a1:be:f9:fc:23:c8:ad:13:e2:0c:2d:29:dc:
         00:fb:e4:fe:3f:75:70:cd:e3:f4:69:9f:a5:e4:29:49:f9:b0:
         23:ae:7c:ef:b1:06:5f:22:1b:85:8b:6c:ea:0c:98:da:44:a1:
         6b:b9:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:28:28 2026 by rpki-client