Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.mft
File:                     553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.mft (raw, json)
Hash identifier:          PO45fQnTAeuLkSQSYVtUM+3domJngleIkglMFM6Y80o=
Subject key identifier:   FF:FE:4E:3D:5C:FC:9E:67:7B:35:86:23:64:19:D9:44:AD:F4:AD:F7
Authority key identifier: 55:3E:BE:63:E3:11:17:EE:F3:2A:81:EC:4E:56:A0:B3:95:DF:8E:CB
Certificate issuer:       /CN=553EBE63E31117EEF32A81EC4E56A0B395DF8ECB
Certificate serial:       3DBFAD288DCC4582F0CBAAAA5E165CAC47F14543
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.mft
Manifest number:          C1
Signing time:             Sat 03 Oct 2026 05:38:05 +0000
Manifest this update:     Sat 03 Oct 2026 05:33:05 +0000
Manifest next update:     Sun 04 Oct 2026 08:11:05 +0000
Files and hashes:         1: 3230322e362e3130342e302f32332d3233203d3e203138343231.roa (hash: KxQuIDKSFQNd8rtHTjADbix78GqzF6+pdin6lpuqL2Y=)
                          2: 553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.crl (hash: NITKssyGU+Ut7GbnmM0SWvTpoeY+SwfFhqJglvZKDxQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.crl
                          rsync://rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bf:ad:28:8d:cc:45:82:f0:cb:aa:aa:5e:16:5c:ac:47:f1:45:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553EBE63E31117EEF32A81EC4E56A0B395DF8ECB
        Validity
            Not Before: Oct  3 05:33:05 2026 GMT
            Not After : Oct  4 08:11:05 2026 GMT
        Subject: CN=FFFE4E3D5CFC9E677B3586236419D944ADF4ADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:bd:1a:06:c3:f3:d2:03:cc:98:26:10:8d:
                    a5:be:0e:ad:20:f6:82:fc:22:24:b7:37:37:f9:d5:
                    3b:71:6a:de:26:93:2a:e2:78:50:9f:dd:b1:aa:fa:
                    21:5c:b1:c1:f6:be:80:e8:37:66:4b:c2:92:6a:3e:
                    e1:19:af:73:2e:9b:40:78:83:c8:88:de:59:9c:64:
                    ba:04:65:8e:03:71:fe:7b:8f:f9:85:91:52:55:ea:
                    a2:31:e5:f5:d0:f9:69:4b:c3:28:89:67:13:41:66:
                    39:84:c5:a8:c4:71:86:41:06:50:13:9b:b4:e1:a1:
                    dc:b8:04:75:f6:a7:bb:18:3b:0d:1c:57:1e:e4:05:
                    c6:02:b0:8a:cd:ec:f6:b8:6f:75:b5:8d:a8:b6:b4:
                    ef:9e:b3:94:4a:65:de:ba:73:68:76:d8:e7:8d:28:
                    14:f8:c1:36:08:f6:4c:3f:30:72:9f:09:fe:3f:e6:
                    9c:17:41:a5:e1:a2:46:6b:b3:22:61:53:5b:51:50:
                    20:e9:8d:27:49:9f:4f:9a:c9:04:10:8e:ee:2f:76:
                    7e:05:df:84:9e:9c:74:c5:d9:5f:38:17:cb:3c:e6:
                    05:40:bc:48:23:91:cb:b8:78:ec:3b:68:c2:69:6d:
                    4a:9a:84:81:34:c1:af:b8:23:40:45:0b:83:9d:ac:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:4E:3D:5C:FC:9E:67:7B:35:86:23:64:19:D9:44:AD:F4:AD:F7
            X509v3 Authority Key Identifier:
                keyid:55:3E:BE:63:E3:11:17:EE:F3:2A:81:EC:4E:56:A0:B3:95:DF:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAISHINBANK/0/553EBE63E31117EEF32A81EC4E56A0B395DF8ECB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:00:89:d4:09:5b:da:ba:9e:21:96:a4:76:e7:d0:a3:ae:
         23:07:54:ef:6a:31:35:e1:54:28:1b:c0:f9:50:f3:ca:f4:da:
         21:dd:27:ef:09:fd:99:cb:86:df:20:2f:d2:db:4a:aa:84:08:
         ac:63:43:0a:c5:fa:b3:17:de:1d:da:53:ec:89:41:dd:96:4f:
         ef:65:7d:fe:fc:6e:7a:c6:c2:e6:bd:81:67:18:c0:2a:8f:13:
         a3:f6:80:a7:80:6f:a2:93:b4:1b:cd:be:6f:54:2b:45:f1:46:
         dc:15:ad:4b:1b:0e:c5:30:5e:c0:3b:6c:5a:fd:c7:21:ef:dc:
         11:df:b3:4d:24:df:69:94:f4:14:59:c6:5f:cd:f2:c5:57:18:
         06:47:b8:93:2f:0e:f3:f2:d9:b8:ba:37:a9:60:2b:c6:7f:a7:
         97:df:94:bf:c1:a5:b9:60:79:3a:83:fa:5e:45:1f:15:94:4f:
         43:1a:56:c4:b6:ec:9b:eb:6c:78:85:77:ab:ab:ff:46:69:c8:
         c7:7f:e8:72:8e:a3:8e:3b:cf:83:bf:ea:95:0d:e3:ff:d8:e4:
         9a:c3:e0:26:d2:20:53:ee:cb:17:5b:9b:89:c5:6a:c6:ae:8e:
         b1:2b:97:b9:71:ca:65:6d:ac:54:2e:70:69:4f:5b:79:ed:e3:
         4e:89:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:52 2026 by rpki-client