Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
File:                     EC1DB3CB7CE6162748BA2956BC1706446561D664.mft (raw, json)
Hash identifier:          +EFSBip9jgYEl1Pm6SIJhcemb+4hBbBJzqd+bLnVcXg=
Subject key identifier:   4B:7D:0D:CE:0E:B0:CC:23:D2:40:F3:10:6F:59:6A:14:12:F3:17:AA
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Certificate issuer:       /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial:       3EBC360720BAEBAB84FEA97F7EE17D3980CBE78A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
Manifest number:          C1
Signing time:             Fri 02 Oct 2026 03:30:02 +0000
Manifest this update:     Fri 02 Oct 2026 03:25:02 +0000
Manifest next update:     Sat 03 Oct 2026 05:35:02 +0000
Files and hashes:         1: EC1DB3CB7CE6162748BA2956BC1706446561D664.crl (hash: G0lKNGMZggsFxuyRLc01C755ynyeXn8GzgrXjXZSeSg=)
                          2: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (hash: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
                          rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 05:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:36:07:20:ba:eb:ab:84:fe:a9:7f:7e:e1:7d:39:80:cb:e7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
        Validity
            Not Before: Oct  2 03:25:02 2026 GMT
            Not After : Oct  3 05:35:02 2026 GMT
        Subject: CN=4B7D0DCE0EB0CC23D240F3106F596A1412F317AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:01:06:27:f3:83:94:66:8f:21:c7:ed:b5:
                    3c:ea:6e:cb:e8:fd:a2:7d:89:04:da:21:6f:26:7d:
                    5e:22:b2:67:14:1b:2c:67:37:15:72:2f:6f:59:1f:
                    58:b0:34:d5:01:6f:1c:f7:e0:a0:e7:f3:bc:6e:04:
                    ec:88:54:ab:06:5a:e1:94:12:73:64:a6:d6:73:5e:
                    10:04:a5:12:1b:10:12:4b:cd:c6:e0:3d:a0:fc:fd:
                    08:8a:be:62:78:d4:7c:3b:fe:74:6d:f0:96:a1:e0:
                    36:5e:63:a4:56:46:76:9d:26:34:ab:14:6f:84:63:
                    be:31:35:a5:c7:3d:b4:1d:ed:b0:ac:8a:a6:6a:26:
                    e6:d6:30:79:f0:3b:f5:0c:68:fb:df:cf:2d:f4:e8:
                    4a:9c:bb:e6:ee:1a:bf:65:5c:d0:3a:52:48:78:bb:
                    5d:4f:54:4f:7c:13:17:fc:39:b0:21:d7:67:41:1f:
                    f3:a5:39:de:87:b6:93:64:08:07:7c:ee:2e:56:9a:
                    84:47:e5:68:ae:e1:40:ba:54:b0:9b:0a:6e:49:20:
                    04:f3:88:7f:d5:a7:0a:ec:bb:22:49:95:a4:b6:77:
                    df:9c:2f:81:aa:21:c8:73:10:4d:6e:30:8c:36:eb:
                    6c:96:61:c0:a3:9a:ba:2f:c6:44:d5:b4:75:da:4e:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7D:0D:CE:0E:B0:CC:23:D2:40:F3:10:6F:59:6A:14:12:F3:17:AA
            X509v3 Authority Key Identifier:
                keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:de:e0:22:e1:b3:58:2b:0b:24:cb:2e:84:aa:56:53:83:
         23:0f:2b:12:a3:d5:ce:ff:30:7e:eb:95:bc:26:93:2b:8f:44:
         ab:46:ff:42:76:6c:7e:fd:f2:1f:b7:23:a8:ea:a9:b5:df:e3:
         61:ad:ec:ea:e4:0b:27:04:7c:af:9d:f4:8b:cc:ec:bd:48:46:
         04:60:07:8c:68:64:d2:bb:f6:b7:47:7b:b0:73:51:e6:bc:3e:
         b1:93:de:9b:d4:c6:84:45:30:86:aa:7b:7f:63:eb:27:6a:f2:
         94:a0:02:51:98:fa:bb:f7:58:14:ba:89:c2:68:b5:83:a8:24:
         9b:33:8f:24:30:26:bc:8d:1d:51:6b:44:c1:68:0d:d9:b1:c5:
         1f:50:fd:4b:91:cf:c2:13:b0:18:af:5c:68:c7:ef:0a:12:45:
         dd:dc:7c:f8:bd:c1:1a:89:49:b5:de:4b:59:c9:2c:a9:6a:98:
         f0:67:e6:cd:8a:2a:b7:27:b4:4f:f2:53:9b:bf:cd:93:49:10:
         39:76:59:1c:88:e2:a2:7d:99:17:c9:8c:c8:41:a8:f6:1c:73:
         95:33:ce:84:2d:76:de:c7:aa:95:f4:c4:f1:c5:43:4c:16:b5:
         5a:ad:3d:74:ae:32:0b:54:63:16:47:fc:21:38:68:c8:2c:22:
         5a:f5:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:23:19 2026 by rpki-client