Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
File:                     203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft (raw, json)
Hash identifier:          qfljcggMwKneHAV/+F8ABNMc8+ZsSOkbR57pGN6+pwc=
Subject key identifier:   80:34:FA:B4:03:75:4B:7A:F0:0A:5B:14:37:D5:40:8B:F8:2C:98:88
Authority key identifier: 20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52
Certificate issuer:       /CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252
Certificate serial:       1D4E9A939F4FF5E988227FCF55793DA55D375B7B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
Manifest number:          65
Signing time:             Fri 24 Jul 2026 01:47:15 +0000
Manifest this update:     Fri 24 Jul 2026 01:42:15 +0000
Manifest next update:     Sat 25 Jul 2026 03:18:15 +0000
Files and hashes:         1: 203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl (hash: k10xW3ZyeCCqYTT3VbUKXU+bEeoKISmQr4xd1yFkedM=)
                          2: 3135372e31352e33322e302f32332d3234203d3e203138303431.roa (hash: NbJQ5exevbZjAb1JTjXmsBF9cRuA1KI0zVWB1TfI//E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl
                          rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4e:9a:93:9f:4f:f5:e9:88:22:7f:cf:55:79:3d:a5:5d:37:5b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252
        Validity
            Not Before: Jul 24 01:42:15 2026 GMT
            Not After : Jul 25 03:18:15 2026 GMT
        Subject: CN=8034FAB403754B7AF00A5B1437D5408BF82C9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:78:3f:25:2c:08:10:f8:25:c2:a7:c5:7f:
                    b9:93:aa:be:3b:fd:86:4b:65:17:e4:ca:6a:d4:64:
                    e6:22:70:4c:b7:21:96:6c:43:67:62:ad:69:7d:ac:
                    1a:52:84:67:47:87:a9:a3:31:ab:9d:8a:8e:84:73:
                    f4:16:25:36:c6:de:e3:19:e5:45:d3:fd:60:0c:f3:
                    e5:8e:3b:d1:de:0b:25:79:82:51:f3:e4:9f:da:4c:
                    fb:b6:a9:9f:dd:cd:7d:36:d0:0f:20:6d:98:b8:27:
                    32:a1:c1:b0:aa:92:32:f8:81:7e:90:a8:40:ee:d7:
                    f8:11:12:d9:be:c2:c7:a8:49:a5:1d:fa:0e:27:0c:
                    bf:b5:1b:6c:b4:23:7e:24:88:b2:5e:76:38:15:00:
                    0b:65:60:5e:8c:a5:29:4c:75:b4:7c:81:ed:ff:fe:
                    b2:1c:f4:2a:94:65:81:79:a2:92:53:70:06:66:46:
                    58:28:ed:34:ae:ae:3e:db:fc:0f:c4:07:11:69:4e:
                    73:75:a7:2a:4a:af:a7:73:ad:a8:30:be:4e:39:47:
                    f1:43:cb:ef:d6:c5:30:17:98:96:71:4d:2e:2b:7a:
                    5c:7e:e4:fb:89:a3:cc:31:b3:cf:53:a9:86:2b:c5:
                    b9:93:6f:04:9c:30:79:64:c3:26:ea:0e:b3:27:a6:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:FA:B4:03:75:4B:7A:F0:0A:5B:14:37:D5:40:8B:F8:2C:98:88
            X509v3 Authority Key Identifier:
                keyid:20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:ce:3a:0d:1a:02:ce:e0:a5:d5:9a:f3:ba:d0:0d:3e:7d:
         d2:3f:bf:e8:2c:c7:8b:d7:07:5f:a4:29:26:ab:44:21:b4:ee:
         83:cd:6a:9e:23:8c:77:b7:fc:a1:c3:98:f6:f1:e2:52:fc:4c:
         27:d8:27:d1:5d:08:a3:81:56:6f:7b:a3:cd:8f:88:1f:be:dd:
         94:26:34:7e:ed:f3:24:f4:0b:e3:9f:b0:4d:64:9f:e3:5e:ff:
         70:73:da:e7:76:01:7d:16:cd:26:75:4f:54:ff:31:d5:a6:22:
         0e:4c:3d:b9:16:0c:c0:fe:71:23:bb:38:fa:52:ce:36:0c:16:
         4b:82:e4:ff:25:3d:58:57:b9:77:47:4d:18:4b:c7:e1:a8:ca:
         3f:5b:ff:2b:ff:fc:98:ba:2c:22:1a:a7:a9:6e:a4:1c:e5:e4:
         87:cf:a1:56:c0:71:e9:61:61:cd:df:f3:ab:65:12:97:82:08:
         04:38:88:fc:9e:50:3d:c7:d9:a9:5a:19:0e:48:79:23:2d:18:
         ab:32:1f:7b:25:4f:bc:10:0f:28:33:3d:47:d2:df:a0:12:e6:
         b3:ef:a7:d1:c9:65:71:49:25:af:96:12:fe:16:f8:bf:96:f8:
         8f:4d:20:a6:75:8f:de:81:0c:d6:40:e1:23:e6:2d:66:24:77:
         a3:c3:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:38 2026 by rpki-client