Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
File:                     A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft (raw, json)
Hash identifier:          Xte2H62e1V9PeMH6+kl6JV4c/YfCiLMcnk3uEGJpx1k=
Subject key identifier:   A0:F0:42:D0:04:B0:7F:27:64:EA:8C:7D:43:CA:84:01:61:E5:96:80
Authority key identifier: A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A
Certificate issuer:       /CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
Certificate serial:       5219A8138ABD4E01C921EB762F6852DC53483C08
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
Manifest number:          BA
Signing time:             Mon 05 Oct 2026 21:55:16 +0000
Manifest this update:     Mon 05 Oct 2026 21:50:16 +0000
Manifest next update:     Wed 07 Oct 2026 00:11:16 +0000
Files and hashes:         1: A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl (hash: UnB5wZ0F0QxvfugrsbQOlJDBElyVRQKWTiVLaHCFMrk=)
                          2: 3136322e342e3131362e302f32332d3234203d3e20333936393832.roa (hash: fT2QEB2EreHbWWRvrSr8grinnLRhG3E/TvTvBPKkl5w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl
                          rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 00:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:19:a8:13:8a:bd:4e:01:c9:21:eb:76:2f:68:52:dc:53:48:3c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
        Validity
            Not Before: Oct  5 21:50:16 2026 GMT
            Not After : Oct  7 00:11:16 2026 GMT
        Subject: CN=A0F042D004B07F2764EA8C7D43CA840161E59680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:2e:0e:f7:cb:2e:77:c4:c6:f1:74:76:75:
                    08:0a:ab:35:7e:68:53:31:cf:fb:63:56:ff:37:ec:
                    1f:f5:28:62:8f:ab:ac:71:0c:ab:7a:99:eb:ac:52:
                    2b:63:e8:1e:e4:05:3c:f8:63:82:af:7d:e8:69:fc:
                    7b:03:19:00:d2:bc:1e:ba:46:09:0a:8b:05:18:28:
                    16:43:a7:3d:9b:e6:8a:aa:fb:3a:a8:fd:8e:25:8c:
                    9b:01:d5:fc:75:7d:44:0c:ae:a0:4e:74:71:c8:85:
                    7b:de:76:d6:44:6f:2f:cd:38:ad:18:82:16:f5:b2:
                    7b:70:29:10:11:90:68:0d:4e:86:61:44:34:0d:b8:
                    48:b2:31:95:72:d2:a3:97:e6:bd:6d:e6:79:94:3c:
                    c7:1d:e2:43:b0:6c:97:c2:60:7e:52:68:4c:dd:2a:
                    ce:74:94:60:d8:29:75:8f:fa:42:22:9c:41:a7:67:
                    ef:82:41:28:2e:57:1f:54:71:21:c9:68:05:29:08:
                    7a:9e:a7:bd:a8:fa:ca:fb:61:26:57:e2:66:d9:50:
                    d6:34:a4:ee:71:0b:a5:45:83:65:36:81:62:98:d3:
                    6e:60:f6:87:3b:9f:5d:97:b9:00:c7:b0:6f:ad:31:
                    d7:27:96:59:da:79:fb:35:03:96:37:d6:d0:1e:16:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F0:42:D0:04:B0:7F:27:64:EA:8C:7D:43:CA:84:01:61:E5:96:80
            X509v3 Authority Key Identifier:
                keyid:A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:53:ab:60:50:a4:c3:bb:9e:34:9d:8b:e9:13:3b:a1:c2:
         46:9a:4d:e4:db:ec:23:79:cf:f4:d8:29:3c:68:67:34:d6:8b:
         0a:a8:8e:0e:23:54:6d:47:70:2e:51:21:c5:40:01:a1:b2:53:
         38:27:8b:51:98:2d:91:cb:aa:14:57:c0:2d:a0:f5:8f:c0:0e:
         a9:3f:73:bf:95:b8:1b:75:02:4b:f9:9a:a4:2a:e8:64:8c:07:
         51:f0:aa:e9:17:f2:16:f4:2f:9d:29:22:89:85:f7:bb:a2:62:
         66:45:88:bc:8e:23:45:a2:d9:54:ac:b0:4d:24:4d:44:4a:3d:
         98:1a:3b:3d:9b:a6:10:13:5c:6b:db:5f:b4:11:3b:f0:6d:43:
         c4:86:3b:69:0b:1c:9d:da:53:fb:f3:f6:a9:32:e0:96:60:cf:
         6a:e9:df:12:f6:b6:06:40:80:0b:af:88:99:09:a5:c8:52:62:
         5c:d0:34:bb:54:9d:0a:5c:2e:5f:ac:c6:c0:85:a5:db:de:97:
         30:cd:6d:91:1d:df:46:74:79:a5:bb:37:de:b6:05:99:d2:e5:
         62:94:08:d6:5b:82:58:16:eb:36:2a:84:00:db:c7:59:9c:5e:
         0a:ca:cf:30:b9:46:b3:d8:cd:a1:6d:eb:77:a3:aa:fe:2d:c4:
         1f:18:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:27:56 2026 by rpki-client