Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File:                     164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier:          +FN6PuUNAGTcLebedNymMhIegWirCRVhLiZXT1OhVA4=
Subject key identifier:   2F:C2:B9:DF:08:C1:DA:D7:C9:13:B1:A7:AA:89:74:BC:06:54:45:6A
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer:       /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial:       314C53BD400E655D629AC8BFFE2236E3375A4EFA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number:          C1
Signing time:             Fri 02 Oct 2026 11:11:33 +0000
Manifest this update:     Fri 02 Oct 2026 11:06:33 +0000
Manifest next update:     Sat 03 Oct 2026 13:48:33 +0000
Files and hashes:         1: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
                          2: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: QR0YpdZKupxhQZXcMnATUeVG3LpvaMKyx036diVvf64=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
                          rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 10:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:53:bd:40:0e:65:5d:62:9a:c8:bf:fe:22:36:e3:37:5a:4e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
        Validity
            Not Before: Oct  2 11:06:33 2026 GMT
            Not After : Oct  3 13:48:33 2026 GMT
        Subject: CN=2FC2B9DF08C1DAD7C913B1A7AA8974BC0654456A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:c4:b7:a8:d0:43:2d:8d:83:22:2e:96:23:
                    6c:2f:98:a2:29:c4:90:b5:d4:f4:ad:8e:a3:f6:0f:
                    96:81:e2:09:c3:bb:48:c7:5c:a3:06:90:3a:ae:7b:
                    04:7c:df:a2:9b:b0:f6:eb:be:b8:ac:9f:bb:84:c1:
                    03:03:cb:97:c1:82:dc:8a:bf:61:ef:f3:99:28:28:
                    8d:fb:79:42:d1:9e:0b:0c:18:d9:56:59:88:ee:b6:
                    28:b9:17:c3:aa:e2:4c:68:a3:45:0f:ac:6a:51:a5:
                    86:08:06:c2:47:2a:ce:4b:ef:cf:f7:54:e5:28:11:
                    dc:cd:45:ee:d9:99:11:7f:62:3a:7c:3a:11:d2:b0:
                    be:f2:bd:47:a3:55:79:42:00:d9:80:9a:53:fc:16:
                    f8:1a:2e:79:94:ec:75:4e:ef:b5:e0:fc:4b:4d:70:
                    35:26:e3:4b:db:89:f3:a9:14:75:17:b3:7f:6a:26:
                    db:8a:2f:7a:c4:a4:2e:ed:b4:7b:46:3c:8c:da:06:
                    31:3d:5e:ea:a2:53:18:34:fc:a5:32:dc:b9:f2:4b:
                    53:75:23:6c:e9:59:9a:d0:dc:b7:fb:2e:b0:28:80:
                    05:6c:36:d7:6c:5d:d8:b5:bb:fb:0c:a7:bc:b3:f2:
                    e6:03:e5:13:1a:d7:9a:34:4b:61:ee:60:7e:91:ea:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:B9:DF:08:C1:DA:D7:C9:13:B1:A7:AA:89:74:BC:06:54:45:6A
            X509v3 Authority Key Identifier:
                keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:2c:02:46:07:ec:af:96:66:ea:19:f2:84:70:3a:06:29:
         28:e2:b4:e6:20:fb:c1:58:7a:30:55:ac:7b:a1:cd:6e:d1:e1:
         99:ae:93:bb:88:6f:67:7b:8f:ea:d7:19:57:1b:39:8e:76:22:
         4e:cf:88:c8:90:db:4a:fa:9e:46:cd:2d:e0:3f:68:0c:f3:7b:
         b4:ad:6e:c4:cd:eb:11:61:4d:d4:92:96:40:1d:94:b3:8f:3b:
         b0:cf:ab:44:21:d0:29:b6:15:2b:27:46:32:dc:db:14:e2:0a:
         d4:ec:92:6a:8d:f8:ce:81:a3:e2:da:e3:d5:5a:d5:f6:4a:b7:
         77:4d:e7:db:f7:9a:2e:32:e3:90:78:4e:ee:9c:a0:1e:8b:83:
         56:7c:e5:fc:94:50:33:ce:f7:55:b2:25:b8:1e:26:61:ba:0f:
         72:32:53:df:59:27:f7:3e:a4:1d:b0:36:2e:f2:26:2e:35:e9:
         71:f4:37:c5:e3:27:38:b1:db:32:d4:5d:be:c9:b4:7c:f4:46:
         2f:4a:e1:52:c3:0c:cf:cd:5e:cc:5a:f9:13:46:6a:3e:84:fd:
         b0:01:2b:8d:fe:10:3a:75:1c:3b:b2:24:d5:e9:3f:d5:7f:4c:
         3e:1d:5f:dc:24:29:0a:02:de:b7:c4:22:a8:94:dc:85:35:b9:
         3d:ac:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:37 2026 by rpki-client