Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File:                     21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier:          sz+t5k46iyay2nKxC+edWStAdL+BObus7vLgUhy9A/A=
Subject key identifier:   BC:7B:01:99:04:50:2A:F6:84:F2:80:69:CA:33:A0:B8:97:C3:CD:06
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer:       /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial:       3F4F88D5839FFB9B33FF08A91E65B0BABB5EB0F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number:          C4
Signing time:             Fri 02 Oct 2026 08:51:15 +0000
Manifest this update:     Fri 02 Oct 2026 08:46:15 +0000
Manifest next update:     Sat 03 Oct 2026 11:20:15 +0000
Files and hashes:         1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: V6eZmaJPP/GWetInu9pbjoMfbOq0Hypr4d2W+492qlM=)
                          2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 10:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4f:88:d5:83:9f:fb:9b:33:ff:08:a9:1e:65:b0:ba:bb:5e:b0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
        Validity
            Not Before: Oct  2 08:46:15 2026 GMT
            Not After : Oct  3 11:20:15 2026 GMT
        Subject: CN=BC7B019904502AF684F28069CA33A0B897C3CD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:e7:d0:d1:48:e2:d5:8c:de:ec:52:73:40:
                    9e:0b:de:3c:6b:62:d9:25:42:c6:31:fd:fd:8a:fb:
                    96:9c:8f:45:39:df:84:d8:bb:62:6c:cc:cc:b3:cf:
                    93:2a:c4:cb:f4:23:42:b7:cb:0c:6e:08:5f:94:61:
                    8d:f5:e1:df:91:f6:7d:79:b1:18:9e:69:4e:e8:0a:
                    d1:9f:02:1a:91:de:2e:00:0b:ae:99:41:80:23:14:
                    b6:29:db:a4:0c:32:59:73:c0:5a:20:e5:6a:b9:3b:
                    18:dc:1a:ad:c0:c7:84:2e:45:7b:f8:4f:5e:f8:f7:
                    81:d4:91:f7:99:b1:b8:e0:9f:85:97:5b:40:90:b0:
                    ea:b2:5c:b4:82:d4:ed:35:93:a2:cb:20:3e:e2:32:
                    02:eb:a2:09:12:f3:c4:e6:1b:95:f3:75:79:c8:bc:
                    ff:ab:c6:81:1d:de:f1:55:ab:f4:34:a0:2c:54:4f:
                    9f:58:93:fc:0e:6b:e0:97:b9:23:60:6a:54:fb:54:
                    40:3e:43:fa:13:82:d8:60:67:f4:42:d8:bc:e7:3f:
                    fe:8c:ed:68:14:18:e1:3b:7e:8e:07:a4:17:75:ff:
                    46:ec:d1:28:54:05:69:99:1f:83:73:28:e1:b5:60:
                    fc:4a:97:83:84:80:97:e6:12:be:7c:a1:e0:c1:28:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:01:99:04:50:2A:F6:84:F2:80:69:CA:33:A0:B8:97:C3:CD:06
            X509v3 Authority Key Identifier:
                keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:bf:f3:1c:a6:be:b2:86:fa:3a:50:8c:9b:78:6c:68:e3:
         ec:5d:e6:36:fa:4f:af:0b:37:ef:d4:85:26:7b:d2:14:4a:fa:
         5e:4e:5e:c4:be:fe:66:77:ce:7d:dc:d0:b2:3f:90:53:ea:9b:
         8b:58:01:fe:67:b7:1b:b2:2e:79:2c:0b:2a:db:db:87:a6:83:
         1b:f5:2a:91:c9:67:2e:85:fc:2c:42:07:a5:c4:73:2c:01:98:
         57:dc:82:c4:ac:b7:37:85:22:b4:cb:63:a6:74:03:40:4e:17:
         be:ed:5f:0b:4f:c9:d5:d9:31:b6:c1:69:80:32:56:b0:2a:25:
         3c:46:a9:16:55:01:2e:9a:94:8b:9c:3c:7e:58:63:38:48:7c:
         b7:42:0c:c9:c3:21:b3:26:37:c7:82:6f:da:b5:9f:32:3d:f3:
         f0:af:b9:1b:9d:3c:07:52:34:09:65:01:a3:7c:df:75:4c:84:
         ef:d0:97:66:29:5d:f5:02:d0:6d:fa:1b:9c:f6:f2:fb:90:4b:
         85:a2:75:88:c0:11:fe:cc:92:44:72:37:7a:e6:5a:85:f3:c0:
         84:00:38:53:1a:4c:1e:51:67:d8:12:43:24:39:16:78:51:96:
         3c:fd:e4:05:c0:34:6c:56:49:00:ce:6e:59:35:0a:4e:e2:e6:
         10:4e:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:55:27 2026 by rpki-client