Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File:                     273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier:          GfvBoeL0KSbwbqL8zfPR9Mems0Dv1OMxI6cOTkB9DCs=
Subject key identifier:   57:AB:38:83:18:F8:97:3A:93:85:22:5B:11:E3:E2:EF:3A:AA:2A:BD
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       1303E2AFB194D6BE540D8A3BE5EE98C5E10278BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number:          CD
Signing time:             Wed 07 Oct 2026 07:22:18 +0000
Manifest this update:     Wed 07 Oct 2026 07:17:18 +0000
Manifest next update:     Thu 08 Oct 2026 07:50:18 +0000
Files and hashes:         1: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
                          2: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: tPqHuGhGoXNpHC9TlTdYw7n/ItX2Cuust6nAD61KfBY=)
                          3: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
                          4: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 20:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:03:e2:af:b1:94:d6:be:54:0d:8a:3b:e5:ee:98:c5:e1:02:78:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: Oct  7 07:17:18 2026 GMT
            Not After : Oct  8 07:50:18 2026 GMT
        Subject: CN=57AB388318F8973A9385225B11E3E2EF3AAA2ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:7e:36:59:cc:8b:8e:56:27:18:5b:00:0d:
                    5e:30:0d:3d:17:0e:69:4e:1d:bb:07:79:52:cb:be:
                    8a:61:bb:ce:41:b3:a7:e1:72:8f:af:fc:48:2d:0d:
                    fa:6e:d7:c4:aa:34:a4:38:26:65:35:9b:0e:c2:00:
                    32:9e:16:87:35:be:eb:fe:98:ef:dd:af:52:0f:89:
                    8e:bb:be:94:9e:b9:67:6f:25:3f:da:ab:66:4d:39:
                    fd:9f:f0:c7:d2:7d:36:a8:48:b5:7d:e5:5c:04:54:
                    b6:5f:17:85:91:93:6a:ec:8e:db:d8:2f:b8:16:3b:
                    0a:b7:db:3a:df:62:ce:9a:db:bd:89:f9:98:f1:7e:
                    24:07:28:23:ca:e1:26:44:2e:a3:29:64:f1:8f:eb:
                    99:d3:a1:88:2e:20:9a:fd:e4:5e:44:87:fd:bb:33:
                    22:df:32:c6:1c:7c:fb:55:11:e3:5c:1b:73:f2:dc:
                    e3:4e:d5:4e:25:4e:41:fc:a5:3b:e7:d0:ed:89:ae:
                    2a:88:d5:e5:e7:9c:f6:98:68:fe:75:81:99:ae:b5:
                    9f:30:2c:cc:3a:28:61:41:3d:2f:e8:96:12:28:46:
                    2a:f9:d4:8d:46:9f:1c:a1:c4:76:b7:0a:03:2b:a8:
                    2f:64:bf:19:c6:ea:68:e4:51:a4:10:22:fa:e0:5d:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:38:83:18:F8:97:3A:93:85:22:5B:11:E3:E2:EF:3A:AA:2A:BD
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:b5:31:8e:20:77:7d:93:6e:7b:04:2a:b0:bf:90:a7:72:
         ba:97:fe:70:14:03:5c:4a:64:8a:88:3a:54:e1:58:94:8c:8b:
         1d:1a:39:1a:bc:7d:d6:41:19:12:60:9a:87:db:22:4a:81:e4:
         a7:a5:7f:74:28:71:a3:f3:12:b7:58:01:c5:9c:62:b4:a0:64:
         62:b6:d2:1c:55:bd:8f:47:24:31:80:90:79:d4:af:c0:d9:13:
         94:6d:7f:eb:9e:f8:f9:72:4b:fa:19:d9:03:b3:7d:eb:59:c3:
         3d:d9:b9:d6:a4:b5:f2:3d:67:81:e7:fe:54:79:3e:75:4b:21:
         85:6a:86:e8:5d:f9:c9:a8:68:d4:e2:3b:8c:8c:78:fd:a5:fd:
         16:9e:a2:ff:12:e7:e4:da:ee:de:1d:c8:d3:1e:1d:0e:25:ae:
         7e:63:ea:2f:1e:d4:f5:c0:78:d1:5e:84:b7:55:94:97:ab:9d:
         73:6e:ef:98:1c:f8:d3:3f:11:30:61:7d:62:6b:e5:f9:a8:5a:
         0a:00:1c:d2:44:3b:1a:b9:b8:36:03:29:0d:e0:af:51:b6:b9:
         5d:15:75:d6:4d:4b:43:a4:e2:ce:2c:72:93:1b:cd:c9:f4:69:
         7b:64:46:c1:d7:84:e4:57:1a:95:31:de:55:ac:e4:d0:f1:c9:
         92:1f:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:53:20 2026 by rpki-client