Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
File:                     F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft (raw, json)
Hash identifier:          Sp2YRFQZ8l2g+4/zQl7QMIny2qRGt3RqnVFXNKX14kk=
Subject key identifier:   A4:28:2C:5E:9A:94:66:42:A7:35:7D:FA:7C:BB:39:2F:64:6C:DF:04
Authority key identifier: F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C
Certificate issuer:       /CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
Certificate serial:       55B76CFE5FEA78D57CB913F36B45E0B325ABDE81
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 19:41:37 +0000
Manifest this update:     Thu 23 Jul 2026 19:36:37 +0000
Manifest next update:     Fri 24 Jul 2026 23:13:37 +0000
Files and hashes:         1: 3230322e382e31342e302f32332d3234203d3e203138343130.roa (hash: tZyg6sWa2FgNEO9W1AtN8+txS3cqFlmDzyg2hHDPbYs=)
                          2: F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl (hash: PQIMh+nOIXGQ8FWK6Yy6+7Zy9nSv6RICroptRNWxN/w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl
                          rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b7:6c:fe:5f:ea:78:d5:7c:b9:13:f3:6b:45:e0:b3:25:ab:de:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
        Validity
            Not Before: Jul 23 19:36:37 2026 GMT
            Not After : Jul 24 23:13:37 2026 GMT
        Subject: CN=A4282C5E9A946642A7357DFA7CBB392F646CDF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:3d:c6:5b:91:af:8f:47:a8:5d:a9:6b:b5:
                    7a:aa:79:8d:ea:7b:0e:ff:b6:70:f7:81:3f:e2:71:
                    d7:09:4c:4e:e4:a3:ad:aa:35:e2:49:1f:77:2c:85:
                    be:55:6a:8d:45:7f:86:30:bb:5c:05:69:a3:60:a8:
                    d9:73:59:e7:10:6d:32:03:a4:5e:ea:a8:f1:4d:f5:
                    e9:08:d4:09:60:46:73:a3:3f:55:0e:ca:55:28:8e:
                    67:ea:81:f0:a0:3c:38:06:02:0f:05:f5:03:f4:d8:
                    15:cc:c0:00:10:17:b6:04:31:ae:a6:f6:80:a9:39:
                    f5:33:60:5b:49:a1:c6:2a:b7:ad:0d:9b:bc:58:68:
                    94:73:3c:35:55:78:a5:ef:46:6c:47:bc:33:9c:39:
                    d4:db:77:a7:ad:90:b9:31:8c:56:a6:25:a9:32:bf:
                    34:19:94:5c:b5:4c:36:de:b1:34:a4:6a:0e:6a:30:
                    72:26:af:c9:e9:8f:2c:a0:36:61:06:03:77:f0:3a:
                    7f:51:77:c7:d3:cf:2e:0f:3d:5c:48:3a:eb:75:08:
                    93:74:b5:7d:a5:42:72:08:6e:6f:06:b1:f4:25:99:
                    74:6d:0d:9c:50:b1:0e:65:b2:1d:f4:7a:c0:7b:40:
                    9e:3a:4a:90:92:6d:02:d6:d3:1f:d1:4c:6f:6d:e1:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:2C:5E:9A:94:66:42:A7:35:7D:FA:7C:BB:39:2F:64:6C:DF:04
            X509v3 Authority Key Identifier:
                keyid:F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:9f:fe:75:e2:9a:1f:83:0b:73:ab:a7:39:28:96:ae:3b:
         01:2b:3e:81:38:d4:52:f8:5d:bb:83:73:ab:bc:5e:c0:04:73:
         43:e0:56:5d:97:9c:31:0e:8c:44:04:ee:a6:e3:b2:30:08:c1:
         2d:1d:b2:e9:75:94:74:84:32:8c:fa:ed:d3:43:35:6a:dd:17:
         e5:84:71:4c:58:73:48:61:75:86:56:d1:48:53:b8:21:6e:45:
         69:7a:b1:6b:95:e8:8a:a6:95:3a:1f:13:bf:a2:e5:c3:45:9a:
         b7:29:0e:f9:9b:80:9d:c1:7a:00:78:96:67:f9:a4:18:93:64:
         57:f0:b1:06:98:5d:45:b6:d7:19:53:a4:4a:86:ec:f7:47:ef:
         bd:9e:59:4e:2c:04:8c:6a:5d:7f:f6:2a:a5:30:d7:cf:d9:21:
         40:9d:d9:df:94:ac:42:80:20:a1:6c:90:7d:46:7a:f4:91:2d:
         0a:2a:91:96:88:9a:22:25:17:5a:97:be:b8:47:86:11:a7:87:
         f6:13:90:53:03:d8:63:23:aa:56:c8:31:30:f3:84:d8:e4:7f:
         67:ea:a8:5e:32:20:be:bb:8b:68:da:76:60:b9:fb:af:90:bb:
         24:bb:cb:5a:ea:07:31:94:54:9b:92:da:a6:ef:1d:aa:ee:89:
         df:72:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:58 2026 by rpki-client