Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File:                     866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier:          OKRwkKLn7p3F9R9BL9ib3iOL0uoshOAxhau5mUzc/cY=
Subject key identifier:   C1:08:EE:73:61:E9:09:7B:92:79:3D:B4:32:7D:1F:4C:3C:10:2E:00
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer:       /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial:       41D769EB995ED21B0086BCD0330572B3C9A9A4B5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number:          CC
Signing time:             Sat 03 Oct 2026 07:43:51 +0000
Manifest this update:     Sat 03 Oct 2026 07:38:51 +0000
Manifest next update:     Sun 04 Oct 2026 08:45:51 +0000
Files and hashes:         1: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
                          2: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
                          3: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
                          4: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
                          5: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
                          6: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
                          7: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
                          8: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
                          9: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
                          10: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
                          11: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
                          12: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: hwJo5c4sNhfxfMFuYCwMapoDn9wdpRi3UchJD6rw9A8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:69:eb:99:5e:d2:1b:00:86:bc:d0:33:05:72:b3:c9:a9:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
        Validity
            Not Before: Oct  3 07:38:51 2026 GMT
            Not After : Oct  4 08:45:51 2026 GMT
        Subject: CN=C108EE7361E9097B92793DB4327D1F4C3C102E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:b6:d5:a3:7d:c2:e2:9d:0f:77:3a:54:fd:
                    98:94:4d:56:3d:50:73:5f:ef:a1:36:92:42:2a:52:
                    9a:9a:0d:2e:27:db:42:ad:d3:2c:71:12:f6:69:0d:
                    da:6c:48:42:b1:c6:94:22:08:f2:cd:74:e9:5c:1d:
                    fd:ef:93:b1:5d:91:d8:f2:d7:de:32:80:54:cd:31:
                    37:5a:40:9d:62:5f:04:69:b2:0b:26:23:b3:88:aa:
                    87:40:fb:00:8d:f7:f6:b4:15:70:e2:11:f0:07:a5:
                    ca:a1:19:b1:60:da:df:fb:66:43:06:8e:43:ac:22:
                    2a:81:6b:f6:9c:00:f8:41:97:f8:31:65:42:18:14:
                    ab:33:14:70:0f:86:3f:38:52:6e:12:30:5f:10:ce:
                    da:89:21:6a:88:81:88:4f:ca:f9:b0:00:f9:65:28:
                    44:62:9c:b0:9e:4d:43:fc:f7:51:e2:d8:66:bb:f9:
                    b0:6a:a9:82:94:b4:4a:dc:be:b7:e7:b5:af:4b:d4:
                    2b:27:2e:f9:a8:2a:64:9f:b6:31:5d:0d:83:d3:1a:
                    35:47:1a:0c:fb:93:43:9f:75:25:84:74:72:93:22:
                    9d:0b:ff:7c:fb:b3:5a:1c:07:fb:a9:d4:75:81:9e:
                    4d:40:d3:bd:65:f9:fd:6b:72:20:72:21:a3:a6:88:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:08:EE:73:61:E9:09:7B:92:79:3D:B4:32:7D:1F:4C:3C:10:2E:00
            X509v3 Authority Key Identifier:
                keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:47:3f:f9:5d:10:f8:45:f4:dd:d7:07:ed:7d:70:37:e4:ab:
         10:f2:fe:13:05:3e:f9:41:09:2b:b6:dd:39:26:18:2b:0e:85:
         e9:9f:62:38:3a:dc:38:04:22:59:87:78:8c:3f:e6:8f:6e:72:
         a9:57:99:6a:f7:11:ee:17:4c:1d:a2:bd:12:d9:21:28:5f:13:
         79:37:49:43:0e:a9:17:25:59:41:ae:e6:78:07:b0:2a:56:0e:
         0a:45:e6:69:29:bd:70:72:1a:5b:51:96:9e:e5:65:f5:59:43:
         b7:83:30:a5:3d:0c:c3:6b:73:14:d0:b3:db:36:4a:16:f2:05:
         df:ab:d6:ca:ae:d2:34:2c:8e:65:91:ec:24:97:c8:5e:7d:b9:
         3d:2e:28:e4:97:80:ad:e0:5f:77:54:ec:34:1d:6d:3e:63:d4:
         07:bb:75:4e:15:91:a3:a6:89:10:2b:f0:c9:9e:b9:0a:fd:2d:
         9f:4d:dd:65:1c:71:dd:b7:66:06:a0:a7:e6:12:8f:3f:cc:62:
         b7:ce:81:df:ea:0b:4d:60:27:d2:54:24:54:1c:c3:19:02:15:
         d3:fa:3f:ee:40:12:0a:38:89:21:bf:72:c0:0b:27:7f:85:80:
         bb:47:7e:72:73:72:03:34:0f:4e:4b:9a:cc:d5:76:47:d7:e6:
         3a:fc:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:28:00 2026 by rpki-client