Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
File:                     1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft (raw, json)
Hash identifier:          Tv+OdlBGWd+KdjMej7Eu2q4FWXAq7pUW3Xz1GqzjAXQ=
Subject key identifier:   33:B6:1B:CC:D3:95:D2:91:B9:95:B0:EE:D2:6E:EE:F0:E6:3C:7F:83
Authority key identifier: 1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F
Certificate issuer:       /CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
Certificate serial:       5B27505A16D6F0E8FB155C4D38577EE2C0215FB4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
Manifest number:          C9
Signing time:             Tue 06 Oct 2026 15:25:25 +0000
Manifest this update:     Tue 06 Oct 2026 15:20:25 +0000
Manifest next update:     Wed 07 Oct 2026 15:42:25 +0000
Files and hashes:         1: 3130332e3137352e3235342e302f32342d3234203d3e203633383937.roa (hash: 6nO2CjoyKQ++7F8uQmuPvL80F94N0DTmwguikTzVJW4=)
                          2: 1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl (hash: Zgdn0GUPy8m2Zpt1ri6heL6KJmDvBpJqukn6H4/y85I=)
                          3: 3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa (hash: U+U3TE1+aqEG2dNbLEwYnuusmfUHp3Crw3DZOdcMWq4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl
                          rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 15:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:50:5a:16:d6:f0:e8:fb:15:5c:4d:38:57:7e:e2:c0:21:5f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
        Validity
            Not Before: Oct  6 15:20:25 2026 GMT
            Not After : Oct  7 15:42:25 2026 GMT
        Subject: CN=33B61BCCD395D291B995B0EED26EEEF0E63C7F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:f2:2c:85:ab:5c:31:b6:18:f9:1b:9e:74:
                    5b:78:fd:71:3b:12:a6:aa:fc:8a:4f:7e:c5:18:27:
                    11:fd:85:64:7a:18:e2:94:29:0b:03:f9:ca:a9:fa:
                    90:f2:ae:96:25:ac:73:f6:9b:7e:6a:82:e0:1f:3b:
                    22:eb:db:59:7d:4d:13:b8:87:83:ee:89:f0:dd:23:
                    33:89:44:c2:e2:df:48:c9:dc:ff:21:ec:db:1f:11:
                    e2:e0:ed:55:74:53:97:70:e7:f3:01:e3:e3:f9:36:
                    e2:a3:87:0a:59:dd:a6:ad:81:6d:43:35:21:1f:6e:
                    f5:05:54:9a:6a:71:d2:d2:bf:98:b1:54:cd:85:17:
                    fb:63:6e:f5:7c:2d:0c:52:27:61:68:b4:a5:c0:65:
                    4f:a3:ff:56:6d:75:71:9d:fd:e4:1a:91:df:7a:bd:
                    8a:29:48:2a:81:1c:8b:22:a2:9e:0d:39:98:c4:ae:
                    0a:7a:8f:0c:6b:89:ca:a4:66:9a:01:75:c3:04:27:
                    e0:ad:15:ee:ad:ee:95:11:7e:e9:4f:78:1f:53:5b:
                    34:30:b3:ba:d4:4f:64:c9:c0:2a:90:bf:78:bd:ea:
                    fe:ca:de:ff:14:54:7f:c5:5b:a9:d9:a1:17:8f:25:
                    f7:5f:f9:80:d5:79:7c:e0:1a:69:b8:25:58:0a:66:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:1B:CC:D3:95:D2:91:B9:95:B0:EE:D2:6E:EE:F0:E6:3C:7F:83
            X509v3 Authority Key Identifier:
                keyid:1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:b3:03:f1:c8:f2:a4:1d:b9:7b:0c:a4:c6:01:55:36:c1:
         ed:96:e9:b0:ca:2c:98:4f:2f:73:5a:27:cb:71:5f:a1:7a:fc:
         a7:77:02:66:c5:6e:1b:06:26:eb:8d:33:58:90:68:2f:fa:a3:
         d0:b5:f8:05:e9:c2:5c:95:85:17:f5:ab:77:05:f2:2f:26:1d:
         ff:b7:4f:eb:89:bb:5d:57:52:57:3b:e3:46:ef:c6:28:ad:a2:
         e6:47:a6:1b:7a:cf:1e:b5:8f:81:8f:6b:8b:c7:43:86:80:d0:
         d7:a1:74:4f:cf:17:51:3a:76:76:17:61:2b:8a:b9:83:75:ca:
         f4:60:40:fe:29:7f:d5:8d:97:1f:b9:d2:a4:dc:e9:07:1c:0b:
         6e:6d:0e:d2:f7:9c:0d:fe:8e:c1:1b:c3:f7:7b:fa:d8:84:7d:
         4b:02:79:c7:92:fb:3a:6b:5c:fc:8c:75:01:56:d4:bd:91:89:
         a0:7e:7d:ae:26:b9:e9:f0:ec:98:da:a4:6d:f0:6a:a9:54:66:
         f0:6f:d3:a1:3e:97:b0:41:bf:73:b3:06:0f:68:76:42:6a:f3:
         da:42:c6:7a:66:37:f6:de:34:7b:c0:d1:f7:a6:20:68:8f:84:
         df:2d:90:ed:41:33:bf:9a:f3:cb:12:bf:0f:29:28:c7:62:7c:
         a3:3d:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:33 2026 by rpki-client