Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft
File:                     5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft (raw, json)
Hash identifier:          52P/4mxLGrp4YscOryI/oKXjvN0pIEE4mvIspBuSels=
Subject key identifier:   67:DC:B4:67:C9:73:F6:B3:B6:70:A6:C5:57:55:36:CC:17:73:5B:A6
Authority key identifier: 5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9
Certificate issuer:       /CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9
Certificate serial:       0C01D22D511F0E0EC80809728C61C8DEA2F260B3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft
Manifest number:          B7
Signing time:             Wed 23 Sep 2026 11:02:19 +0000
Manifest this update:     Wed 23 Sep 2026 10:57:19 +0000
Manifest next update:     Thu 24 Sep 2026 11:48:19 +0000
Files and hashes:         1: 3132322e35302e31342e302f32332d3234203d3e203231383539.roa (hash: NUTSczzO1jBlL3ynQG4ErzB2wpeQoaGOQ6PppTSNjqg=)
                          2: 3132322e35302e31342e302f32332d3234203d3e2037353336.roa (hash: vVJHt/f1AMl0GaECltUazq9tAkyL9lzn9YdVIEJwFWc=)
                          3: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl (hash: YcpYDDtsALlocu/NN8p/nt9gHq+0m1na8UP97WD6VX0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl
                          rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 11:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:01:d2:2d:51:1f:0e:0e:c8:08:09:72:8c:61:c8:de:a2:f2:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9
        Validity
            Not Before: Sep 23 10:57:19 2026 GMT
            Not After : Sep 24 11:48:19 2026 GMT
        Subject: CN=67DCB467C973F6B3B670A6C5575536CC17735BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:3e:47:68:79:aa:cc:e2:84:76:c2:f8:5d:
                    6a:9a:97:06:19:30:4b:d8:b3:12:dc:55:9a:09:d9:
                    6b:02:e8:6a:1e:08:67:48:bb:bc:1a:40:a7:cf:e9:
                    fc:b6:e2:9d:0a:74:71:e1:da:04:5f:a9:8e:2d:99:
                    33:4a:ee:e0:40:3a:ad:de:9f:2e:82:56:18:b3:25:
                    57:2f:c2:a7:d2:71:e8:80:66:24:b3:c6:42:4e:bf:
                    76:48:e5:da:50:55:4c:17:04:bb:d4:31:08:80:e3:
                    c6:d9:a8:70:8d:b3:39:86:ed:5d:8d:b1:98:29:ec:
                    1c:80:fc:09:df:1d:0b:55:5a:60:a9:7f:00:36:f7:
                    ca:61:c8:27:8c:55:83:6c:05:f0:b0:22:d4:5f:16:
                    87:62:30:cd:10:67:83:0b:a3:b6:b2:46:fa:0a:04:
                    46:cd:8c:85:82:13:db:26:66:c0:6c:9f:30:e0:5c:
                    22:3a:0e:4d:8d:5b:3b:a6:58:d4:06:06:ce:9f:f5:
                    1c:a6:e5:04:e8:de:10:1c:97:e0:38:cf:fc:6c:1e:
                    ba:8b:19:d0:20:b2:5b:46:f8:fc:e1:ec:70:26:5c:
                    f7:57:36:65:8a:32:37:2a:74:3b:28:13:1c:b6:c4:
                    31:00:d2:c8:66:cb:36:ab:de:f7:8f:27:f4:c4:7c:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:B4:67:C9:73:F6:B3:B6:70:A6:C5:57:55:36:CC:17:73:5B:A6
            X509v3 Authority Key Identifier:
                keyid:5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:82:28:14:57:6e:7c:a3:68:1f:c8:0e:30:59:7f:94:fc:e2:
         b7:0e:02:59:6a:46:02:68:2f:a5:40:06:04:a4:ec:a6:c4:0e:
         cf:52:b1:86:1f:d9:14:ed:53:9e:b8:9d:94:ed:bb:0e:4d:57:
         51:ac:14:02:82:f9:4c:99:75:bd:78:bc:4c:a7:d9:b7:9f:f1:
         d0:99:9e:12:27:a9:43:87:47:3b:35:ac:95:07:5e:67:34:f8:
         94:22:6e:a0:79:fe:99:1b:24:20:51:8a:ff:49:03:e6:d2:38:
         47:d0:2b:5d:c9:e0:30:4b:47:a7:1b:1b:13:7e:01:c9:c6:54:
         2f:43:9e:3b:19:d9:8b:13:34:49:a1:6b:65:1f:8f:19:2f:61:
         8b:ee:59:f2:9f:e2:36:47:ed:6d:48:a5:73:0c:9b:91:d8:12:
         61:f5:42:48:bf:2f:78:35:28:9c:26:cb:29:7c:63:76:47:71:
         f1:df:f3:cc:17:1c:fc:43:66:3e:7a:65:1d:96:35:78:b1:a7:
         09:00:57:04:a0:7b:83:3c:51:f3:44:bb:c8:d1:0c:ce:9e:5d:
         8b:65:92:e8:af:d4:d0:a3:d6:1d:7e:a6:7d:d2:02:69:19:6a:
         60:e3:e8:99:28:f6:f3:67:de:0f:1d:3a:7d:81:7b:f2:46:42:
         3d:76:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:20 2026 by rpki-client