Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
File:                     46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json)
Hash identifier:          gi0PkN0SZ87HxCs9BrkNLTPfavWJvScgOiQRiBfcJiU=
Subject key identifier:   BE:D0:1E:A4:62:71:20:7D:97:FD:AB:9F:17:25:DB:94:39:48:C4:E7
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Certificate issuer:       /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial:       1F1CD4486E3867970104B01E1F30DA2F0AD38C68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 17:06:12 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 17:15:12 +0000
Files and hashes:         1: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=)
                          2: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=)
                          3: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: 3Rtn7tmJxPT5otYQUtAVSWC8R1Nhx5NQ2AGKZ2OfISc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1c:d4:48:6e:38:67:97:01:04:b0:1e:1f:30:da:2f:0a:d3:8c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
        Validity
            Not Before: Jul 23 17:01:12 2026 GMT
            Not After : Jul 24 17:15:12 2026 GMT
        Subject: CN=BED01EA46271207D97FDAB9F1725DB943948C4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:94:70:69:87:cc:2a:3f:ce:bf:09:67:42:
                    9b:fa:81:b6:61:64:e0:e5:81:63:f5:8e:80:2b:d5:
                    7e:e1:da:55:1e:dd:4b:d5:96:ca:17:45:1a:a6:85:
                    51:e0:84:6b:d7:f2:1c:5c:0b:4a:05:1c:7e:a2:2d:
                    e1:62:70:84:09:eb:1d:15:c9:a3:cc:75:13:3f:48:
                    a3:34:4a:c0:d2:e4:16:8c:bc:26:d9:73:93:fe:5a:
                    c9:3d:5b:3c:ed:0f:cd:89:62:91:1d:31:2a:93:2e:
                    03:2d:fa:16:e3:fd:28:0a:df:68:ba:db:07:63:d0:
                    45:66:4d:f2:23:c7:19:2a:db:fb:71:65:57:71:23:
                    19:13:fe:55:16:7e:6a:ed:33:ea:e7:9f:82:a4:68:
                    33:47:f7:c7:7a:fa:27:a0:d9:18:1a:0d:8d:26:a0:
                    13:52:39:d3:76:3c:a5:3a:8c:64:ee:9b:10:ce:d4:
                    88:e6:ff:28:35:a0:3f:d5:5b:92:2e:15:b8:02:d9:
                    74:6a:82:72:13:33:d7:76:ab:a0:b7:12:50:24:31:
                    6a:7b:01:81:db:86:90:5a:4b:fb:a4:01:ea:a9:7e:
                    13:10:cb:e3:eb:dd:91:0a:a3:91:ee:47:81:67:ff:
                    d8:af:64:eb:7f:a7:82:e3:e8:6f:79:94:ef:9d:0d:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:1E:A4:62:71:20:7D:97:FD:AB:9F:17:25:DB:94:39:48:C4:E7
            X509v3 Authority Key Identifier:
                keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:57:27:c3:b5:6e:af:7a:c0:32:df:50:01:49:03:5a:87:be:
         ad:dc:34:4c:55:12:9b:a5:3a:7e:ef:18:46:e7:c8:d8:47:14:
         4a:e6:d2:6e:e6:fa:82:3d:4b:5e:19:ac:39:34:51:9d:ff:1d:
         8a:25:0b:b5:d6:21:b2:5a:dc:37:0c:9e:2f:1e:57:ce:6d:cb:
         a0:e1:eb:4f:01:e6:b7:94:eb:5e:f4:d9:cb:26:a6:a7:4d:25:
         11:bc:99:14:0b:a6:47:87:14:6e:81:46:f4:7c:bf:7c:f9:4a:
         e7:de:d7:e2:4d:40:c7:f8:0a:bc:67:47:aa:09:ff:22:36:dc:
         84:6e:95:55:b4:e8:3f:46:39:a5:9c:8c:72:91:1e:ea:85:f7:
         ce:e2:ed:13:6c:bb:f6:b1:7b:15:92:17:41:ab:8d:1d:42:d1:
         36:1f:c7:8b:f8:ab:29:97:2f:4e:e8:1b:9c:76:08:72:d6:84:
         c8:2e:ab:5c:87:82:d3:e9:03:3d:8f:94:b2:2d:75:53:6e:44:
         b5:8b:62:77:51:1e:1a:89:02:3e:63:d3:f7:e4:8d:80:fc:f5:
         4d:4b:aa:6e:8e:db:3d:78:9f:22:d4:71:2e:b7:12:06:e3:72:
         25:b3:cc:6a:78:fd:bc:62:38:62:b6:4b:94:2e:af:db:70:51:
         76:32:71:49
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUHxzUSG44Z5cBBLAeHzDaLwrTjGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3
NDFGQjNBMzAeFw0yNjA3MjMxNzAxMTJaFw0yNjA3MjQxNzE1MTJaMDMxMTAvBgNV
BAMTKEJFRDAxRUE0NjI3MTIwN0Q5N0ZEQUI5RjE3MjVEQjk0Mzk0OEM0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGpRwaYfMKj/OvwlnQpv6gbZh
ZODlgWP1joAr1X7h2lUe3UvVlsoXRRqmhVHghGvX8hxcC0oFHH6iLeFicIQJ6x0V
yaPMdRM/SKM0SsDS5BaMvCbZc5P+Wsk9WzztD82JYpEdMSqTLgMt+hbj/SgK32i6
2wdj0EVmTfIjxxkq2/txZVdxIxkT/lUWfmrtM+rnn4KkaDNH98d6+ieg2RgaDY0m
oBNSOdN2PKU6jGTumxDO1Ijm/yg1oD/VW5IuFbgC2XRqgnITM9d2q6C3ElAkMWp7
AYHbhpBaS/ukAeqpfhMQy+Pr3ZEKo5HuR4Fn/9ivZOt/p4Lj6G95lO+dDUqhAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUvtAepGJxIH2X/aufFyXblDlIxOcwHwYDVR0j
BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz
ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw
MUE3RUU3OUM3NDFGQjNBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0ODAvMC80NkIz
QkVENDA2QzFDOTYwRjVDRkFDQzAxQTdFRTc5Qzc0MUZCM0EzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
MFcnw7Vur3rAMt9QAUkDWoe+rdw0TFUSm6U6fu8YRufI2EcUSubSbub6gj1LXhms
OTRRnf8diiULtdYhslrcNwyeLx5Xzm3LoOHrTwHmt5TrXvTZyyamp00lEbyZFAum
R4cUboFG9Hy/fPlK597X4k1Ax/gKvGdHqgn/IjbchG6VVbToP0Y5pZyMcpEe6oX3
zuLtE2y79rF7FZIXQauNHULRNh/Hi/irKZcvTugbnHYIctaEyC6rXIeC0+kDPY+U
si11U25EtYtid1EeGokCPmPT9+SNgPz1TUuqbo7bPXifItRxLrcSBuNyJbPManj9
vGI4YrZLlC6v23BRdjJxSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:24 2026 by rpki-client