Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File:                     71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier:          06VIMy3b9MywvTCkepSEeIQ4q3RM3iGQbtlnKx7uHsM=
Subject key identifier:   EE:A9:7D:DC:AD:8B:ED:BB:B3:E3:77:C6:77:8A:0C:CB:E1:99:09:50
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer:       /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial:       0C041500016475CC116BFD5A1074040E8322D9FC
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number:          02BE
Signing time:             Sun 25 Oct 2026 04:48:41 +0000
Manifest this update:     Sun 25 Oct 2026 04:43:41 +0000
Manifest next update:     Mon 26 Oct 2026 06:16:41 +0000
Files and hashes:         1: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: HDEw83V21CVUDZI0nXNFM5Oa5zfPONEfhHvB2e9XyEs=)
                          2: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
                          3: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
                          4: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 06:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:04:15:00:01:64:75:cc:11:6b:fd:5a:10:74:04:0e:83:22:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Validity
            Not Before: Oct 25 04:43:41 2026 GMT
            Not After : Oct 26 06:16:41 2026 GMT
        Subject: CN=EEA97DDCAD8BEDBBB3E377C6778A0CCBE1990950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:6d:cf:68:dc:4e:cc:d3:d5:fa:a5:86:42:
                    6b:bd:03:a8:f0:f8:23:8c:31:5a:0b:e4:e9:b9:ee:
                    d9:72:1c:4f:1f:16:42:15:97:87:a3:31:7f:aa:46:
                    38:8d:6e:10:9a:ee:90:1e:8d:04:29:86:1c:d8:bd:
                    5f:7c:60:db:96:83:ed:3b:9e:45:c4:7b:22:0c:24:
                    18:5f:82:25:42:d3:7f:0b:17:91:a8:47:34:c4:13:
                    fb:b7:24:ec:58:b2:d2:41:92:a3:7a:d4:2b:6e:04:
                    a5:c6:e2:65:db:ed:d1:eb:62:06:50:95:28:33:9b:
                    a0:4b:89:41:0c:bd:05:d0:86:96:65:12:eb:90:f8:
                    94:86:02:ff:27:b4:e8:8f:06:9a:c6:b7:b2:1a:cb:
                    9f:61:40:fb:7c:36:eb:56:50:b2:d2:f8:31:d3:4f:
                    a7:1e:b8:44:63:ba:4a:bd:79:de:d4:6b:68:60:af:
                    c2:8b:79:4c:e0:81:5a:8d:62:c0:99:0a:61:09:ab:
                    94:4d:1d:65:da:98:b8:e4:11:a4:4b:db:60:68:23:
                    cf:bb:a5:e6:8d:35:fe:0e:d7:1c:06:c0:08:30:49:
                    f2:08:68:a5:b2:78:c1:e4:ac:f4:5c:23:1b:1e:e9:
                    e0:4d:6d:56:1f:8c:b2:82:82:9a:34:d0:63:97:84:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A9:7D:DC:AD:8B:ED:BB:B3:E3:77:C6:77:8A:0C:CB:E1:99:09:50
            X509v3 Authority Key Identifier:
                keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:56:eb:8b:f2:58:20:b7:88:44:3c:e2:65:22:f2:06:65:
         9f:e9:c3:b5:a9:88:b8:59:c7:f9:92:a2:59:4a:a2:4f:56:7c:
         5d:70:17:97:aa:31:2d:9d:9c:94:e4:4c:d4:46:ae:c7:18:82:
         71:e2:6c:c6:96:6e:d1:bc:c3:ea:e9:44:21:92:1f:83:08:fe:
         2a:48:a0:a6:05:51:6b:79:3b:78:04:7c:d2:5b:3c:62:a5:5a:
         5d:fa:72:2d:2f:73:14:26:bf:c4:41:e0:7d:7f:5e:6a:99:52:
         80:8d:ec:c4:12:d6:8f:aa:ce:ee:27:72:59:4e:96:fe:34:8e:
         70:a4:23:15:ab:7a:35:13:6e:56:7b:f0:1e:e8:b5:c4:8a:2c:
         07:d9:77:f0:cf:e4:5d:da:3e:92:54:c9:32:d6:4d:6d:0d:d8:
         62:81:0b:0f:6c:c8:10:bd:31:b0:0d:71:d1:53:6d:87:d8:47:
         50:40:e6:36:f6:f4:65:07:54:a5:c7:de:50:97:fd:49:4c:0e:
         19:9b:01:a1:4c:0a:6a:64:f0:19:a6:1d:48:f5:e2:c9:15:5b:
         fc:cb:ef:0f:01:25:5e:5e:d8:c5:cd:86:ae:d7:61:eb:cf:fe:
         31:78:42:20:64:cb:77:05:ab:00:ad:b3:e6:46:15:26:09:a5:
         da:dc:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:51:05 2026 by rpki-client