Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File:                     CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier:          M07l+RomCWbOnKwINaYnMXFNwRU5YfplJQFQsswIQ+I=
Subject key identifier:   09:8D:84:F9:1E:5C:46:E3:DC:4A:BE:29:81:9A:41:3B:C6:1D:C6:E5
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer:       /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial:       334D5648F30FE512F5D3B9AC67988C379CBBBE0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number:          82
Signing time:             Sat 15 Aug 2026 01:39:02 +0000
Manifest this update:     Sat 15 Aug 2026 01:34:02 +0000
Manifest next update:     Sun 16 Aug 2026 05:25:02 +0000
Files and hashes:         1: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: 5obaGn0zNyKuCs4BTB7GWST57mpsn026lJp2YOj+I4Y=)
                          2: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
                          3: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4d:56:48:f3:0f:e5:12:f5:d3:b9:ac:67:98:8c:37:9c:bb:be:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
        Validity
            Not Before: Aug 15 01:34:02 2026 GMT
            Not After : Aug 16 05:25:02 2026 GMT
        Subject: CN=098D84F91E5C46E3DC4ABE29819A413BC61DC6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:86:a7:4b:1c:24:a7:66:be:3d:88:79:9a:
                    c6:9d:b4:aa:8c:c0:13:0c:64:55:23:c8:0b:a6:e0:
                    e6:e5:d9:bf:5b:e1:40:4f:8b:69:4e:67:0e:a6:98:
                    c2:1f:88:30:b1:c4:f9:17:a1:17:f2:2c:2a:70:01:
                    ac:ec:c2:80:71:b0:4f:53:8b:ed:4d:d7:c6:71:f7:
                    59:43:ee:cd:3b:fa:c8:74:74:d4:8d:b3:07:3f:28:
                    ba:5b:32:be:ec:bd:89:13:e7:59:33:3a:06:54:2d:
                    21:b7:59:d8:a1:e8:ab:ca:e2:1e:5f:78:1a:b4:3f:
                    a6:22:4a:8d:d7:78:02:03:00:b9:7c:c5:f6:ac:d2:
                    78:81:a2:3c:55:a8:39:22:72:48:e5:b1:ae:41:ea:
                    07:01:c2:15:78:07:04:5a:0f:64:29:aa:aa:91:c9:
                    be:98:1b:6b:74:c4:c5:57:2e:d4:3d:63:1b:f5:c3:
                    f5:73:e3:ef:63:aa:3d:33:d2:a6:bd:6d:91:5f:92:
                    ea:ae:ff:1b:d7:36:2f:17:e0:86:64:ed:1d:f2:0e:
                    fe:47:b5:2c:31:d5:cc:fa:71:77:b5:3c:5d:7c:49:
                    45:1e:e8:a3:d3:ba:48:96:67:f7:77:f4:1b:96:ad:
                    e4:c3:cc:cd:13:a5:98:04:93:18:84:3c:3c:10:fd:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:84:F9:1E:5C:46:E3:DC:4A:BE:29:81:9A:41:3B:C6:1D:C6:E5
            X509v3 Authority Key Identifier:
                keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:6c:6b:aa:b5:45:b0:e6:34:a7:71:a5:02:27:b5:9c:1c:
         8f:cd:9e:e4:db:1d:83:8a:1e:87:3c:42:7b:08:cc:f0:81:fa:
         e3:68:42:5d:30:82:a3:eb:c1:08:a6:80:31:50:31:28:fb:5b:
         82:d3:d2:17:b5:d3:1a:4c:68:8f:13:0f:93:d5:30:dc:eb:ee:
         ef:ae:6e:52:2a:89:cf:f2:34:6a:d5:5d:09:bb:66:b8:57:e8:
         1f:e1:55:a3:2d:0e:45:b1:2e:64:25:5a:b1:a6:24:7f:78:a2:
         71:93:4e:4d:a7:52:e2:ac:b6:62:6e:f8:25:bb:39:e3:0b:70:
         c8:4b:af:6a:15:c9:0b:45:82:99:31:45:2e:08:eb:87:46:e4:
         74:2b:ab:1d:dc:df:d4:af:c3:bc:22:8f:75:82:ae:de:1e:dd:
         bb:a5:61:2b:57:75:73:2d:7b:a3:b4:0d:83:68:77:62:25:86:
         35:6a:11:a1:97:01:f5:5b:c2:ad:3f:bb:e6:ef:dd:77:df:a9:
         ac:16:93:42:d5:16:02:77:1e:c2:ba:fc:af:06:9e:2b:54:3c:
         15:bf:8c:14:b2:6a:46:fe:5d:c6:5b:56:51:d8:c9:c5:a2:ff:
         84:5a:b7:bf:5e:ca:0f:bc:9b:93:e4:c1:00:01:95:f3:90:33:
         32:be:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:40 2026 by rpki-client