Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File:                     C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier:          Z5owgiZn03ZZgYwhvK/7Acj4h7l8XD5dmarBBZ9J1dE=
Subject key identifier:   95:18:C1:52:92:E8:A2:B2:A3:F6:BC:D5:D8:51:A6:CE:41:E6:C9:92
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer:       /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial:       66C3262CF8B7FA465F03887E48E6953085603EB3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number:          02AF
Signing time:             Sun 11 Oct 2026 06:46:28 +0000
Manifest this update:     Sun 11 Oct 2026 06:41:28 +0000
Manifest next update:     Mon 12 Oct 2026 09:51:28 +0000
Files and hashes:         1: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
                          2: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
                          3: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
                          4: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
                          5: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
                          6: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
                          7: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: 6rTp3by+VwoQ6tEFncxFr1jtq0sWsrE18R6o41pv/9A=)
                          8: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
                          9: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c3:26:2c:f8:b7:fa:46:5f:03:88:7e:48:e6:95:30:85:60:3e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
        Validity
            Not Before: Oct 11 06:41:28 2026 GMT
            Not After : Oct 12 09:51:28 2026 GMT
        Subject: CN=9518C15292E8A2B2A3F6BCD5D851A6CE41E6C992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:27:8b:d8:6e:50:bf:cc:0d:39:2c:3a:eb:
                    5c:53:81:ec:24:86:39:1f:41:85:df:57:75:b7:56:
                    39:ea:09:34:74:eb:d1:1d:dc:36:3f:a3:6e:13:d4:
                    26:bb:fd:3b:af:11:05:52:e0:b5:f9:a9:cd:ff:a0:
                    07:0d:c5:04:ad:87:6b:2a:1e:00:a9:06:e8:6c:6c:
                    1e:bc:18:9d:bf:7c:43:af:07:f8:a7:e2:59:58:bc:
                    de:da:00:d7:f8:7c:88:8e:ce:31:73:45:9c:28:b5:
                    3f:2c:70:2b:3f:61:5b:d6:64:bc:78:6d:43:67:10:
                    bf:ef:ac:41:f9:f9:d4:3b:90:c4:e5:9c:98:04:42:
                    1e:94:ae:31:73:f2:40:3e:d4:63:9f:1b:e2:b8:52:
                    66:f0:15:3c:18:45:92:4f:57:99:fb:ac:b3:c5:97:
                    eb:55:1f:c3:6e:0c:ed:dc:e1:1d:e3:13:ca:86:03:
                    3d:cd:df:35:e1:10:49:66:fc:17:18:61:d8:8b:d5:
                    2c:0f:1c:d5:3a:56:2a:34:61:83:df:6f:15:f9:93:
                    bc:60:99:7d:a6:63:35:2e:c1:1d:b0:19:40:0e:9d:
                    f8:a5:cc:65:e5:bf:9c:85:fc:3d:9d:fd:61:48:b5:
                    83:fd:db:36:b9:f6:d8:60:07:49:bf:65:14:de:93:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:C1:52:92:E8:A2:B2:A3:F6:BC:D5:D8:51:A6:CE:41:E6:C9:92
            X509v3 Authority Key Identifier:
                keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:34:d4:93:cf:28:8d:73:71:59:8d:e0:5a:a4:31:14:88:5c:
         13:80:c5:ab:54:b4:1f:f9:6b:a3:d9:3f:dc:f7:b8:9c:fb:f7:
         76:8c:8a:d6:cc:a5:50:e1:3e:f6:4e:a8:68:c6:a8:ae:d0:b6:
         27:9d:d0:5a:98:52:f0:a9:48:13:53:d0:ce:20:f5:61:c3:71:
         ba:9d:35:d0:4e:3b:f6:40:55:77:05:0b:1b:f8:e8:ee:8c:09:
         55:ee:ed:fe:c8:7c:37:c4:1d:66:24:75:b2:f4:91:32:91:ea:
         18:db:db:c6:dc:61:eb:f1:34:d7:6e:d7:ff:bc:3f:44:f8:52:
         1d:86:d5:f3:44:d3:06:86:ce:a6:f8:14:bb:e6:a6:bd:56:e1:
         94:2d:f4:b5:43:06:1a:91:ab:cb:63:14:51:39:fc:6a:b0:e7:
         e7:79:87:d5:5a:82:02:49:50:86:ed:86:c7:95:b0:36:85:6e:
         83:2f:bd:f0:ad:cd:f5:9c:4a:7c:57:c9:6f:a9:de:62:e8:77:
         36:71:91:95:a6:6d:d0:5b:48:00:a9:bd:4d:f5:0e:1f:8d:2b:
         c9:37:55:90:c8:e9:12:ca:3e:63:09:fe:42:62:97:99:a8:b3:
         88:7c:54:25:97:29:50:17:9c:3c:aa:10:ae:95:f3:32:97:45:
         25:b0:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:03:02 2026 by rpki-client