Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
File:                     0273304A820906A512D2F0D86CA293A77222962C.mft (raw, json)
Hash identifier:          taMHZEb6gxDpTqbSiO03OhuDAxN6lAO4bEDgqV0kqQQ=
Subject key identifier:   5E:CA:BA:20:54:74:20:FC:7E:3A:F5:A5:4F:79:03:B5:81:D7:52:B0
Authority key identifier: 02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
Certificate issuer:       /CN=0273304A820906A512D2F0D86CA293A77222962C
Certificate serial:       1F31B6CA9938E1C5EEBA51DD3EBEE541EC3F72B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
Manifest number:          CB
Signing time:             Mon 05 Oct 2026 22:20:19 +0000
Manifest this update:     Mon 05 Oct 2026 22:15:19 +0000
Manifest next update:     Wed 07 Oct 2026 00:22:19 +0000
Files and hashes:         1: 323430323a333065303a3a2f34382d3438203d3e20313331363338.roa (hash: 5S/0+5kTJSCJtjY+G5g70pY/TEYg4PSwgmkuSXQz62g=)
                          2: 323430323a333065303a3a2f33322d3438203d3e203633393030.roa (hash: M9ozTABbn9o/3o5HXGeGad6/WVPq5wFJDo/GvXVI9WA=)
                          3: 0273304A820906A512D2F0D86CA293A77222962C.crl (hash: UMgY0iP24tJFYkThWZqVDNvBmFKp7ouKvdvDOhjJHA4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl
                          rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:31:b6:ca:99:38:e1:c5:ee:ba:51:dd:3e:be:e5:41:ec:3f:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0273304A820906A512D2F0D86CA293A77222962C
        Validity
            Not Before: Oct  5 22:15:19 2026 GMT
            Not After : Oct  7 00:22:19 2026 GMT
        Subject: CN=5ECABA20547420FC7E3AF5A54F7903B581D752B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:ab:33:8e:f2:48:1c:9e:f4:b1:27:6e:2f:
                    48:f5:37:8d:41:d0:0f:7e:92:e5:21:ed:52:58:90:
                    ca:ee:e9:3b:42:8b:b4:bc:ae:79:dd:11:e5:5c:15:
                    01:9b:e8:ef:65:61:a6:78:5e:e2:41:12:de:cb:1d:
                    a7:bc:b6:05:cd:28:8d:90:46:a3:d6:86:e0:7f:0c:
                    48:3c:3a:f5:23:81:e5:09:3e:45:c0:cd:1c:68:7b:
                    d2:e3:2b:8b:92:38:db:33:b5:50:d4:22:d5:cc:e7:
                    6f:05:f1:ec:7d:3f:2d:15:2b:b4:f4:f1:a0:d5:b7:
                    92:82:31:c0:b9:c0:93:9e:1f:3a:10:84:54:89:d8:
                    77:f4:86:97:8c:a8:5e:ec:4b:c2:0a:8c:69:87:d8:
                    df:10:24:af:6e:2f:16:3e:83:d4:71:5a:45:3c:5c:
                    50:68:b8:fd:85:75:ab:10:17:ba:f3:33:a0:0c:b9:
                    d1:79:9e:23:87:76:17:4f:b8:6d:35:35:2d:1c:b9:
                    89:19:c4:68:5d:63:7d:95:f8:92:13:e3:a5:31:c7:
                    4e:e2:f1:1f:33:71:21:45:c2:0a:00:ec:0b:b7:cd:
                    27:54:ad:8f:fb:aa:a2:5a:c9:7f:7e:13:37:7a:b5:
                    32:cc:5c:88:d4:14:77:5c:4b:14:75:8f:fc:1d:c1:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:BA:20:54:74:20:FC:7E:3A:F5:A5:4F:79:03:B5:81:D7:52:B0
            X509v3 Authority Key Identifier:
                keyid:02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:c9:20:73:28:99:26:ef:d4:90:a4:a8:9d:a3:25:63:1f:
         f6:2b:f3:bd:6f:e7:3c:30:63:ed:a0:d1:52:44:a0:8c:b1:0c:
         18:7b:8d:5c:b8:cd:fd:eb:11:a5:bd:b8:78:a9:bd:03:f3:f6:
         3a:02:f8:74:22:50:d7:c9:3c:c8:bc:0d:ff:46:7b:5f:78:17:
         35:3b:f2:d4:38:a4:ca:37:9f:68:56:b5:88:16:64:bc:a7:61:
         53:0e:9f:3e:61:bc:56:17:65:cb:11:48:03:68:6e:6c:4c:62:
         ce:09:39:42:bd:07:cd:89:9c:f5:e6:75:70:e7:9e:59:fe:a7:
         d8:f9:14:52:be:38:b8:a3:d2:ae:70:cb:84:a7:8a:6e:f7:6d:
         20:ea:85:38:d2:81:18:7a:eb:43:13:3e:92:95:96:71:da:f5:
         a7:e5:3d:5f:73:fa:e7:04:0f:84:74:9e:70:57:25:a3:1b:51:
         56:98:ba:ae:b6:e7:61:57:a7:4a:6c:23:f3:b6:69:39:9c:8d:
         fc:e8:26:f8:d6:04:5f:0a:2b:f2:7a:ba:89:c0:eb:36:99:85:
         7d:88:68:7f:8d:7c:21:35:df:49:2e:5b:c3:96:7b:91:3c:b6:
         2e:23:c2:6f:2b:4d:70:76:7b:62:7a:9e:5e:da:a1:1b:08:43:
         16:58:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:56 2026 by rpki-client