Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File:                     95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier:          6GGaBhP4G2rDBZVFMEkILc/j96niRX+MxoZbdbrsxbE=
Subject key identifier:   FD:C7:BA:41:B0:AA:85:98:F1:69:21:6C:2E:2B:B5:37:70:C8:7A:F3
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer:       /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial:       23C046EBF03D3076BA5F48851C321271AA8D6C1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number:          0D
Signing time:             Tue 12 May 2026 09:51:16 +0000
Manifest this update:     Tue 12 May 2026 09:46:16 +0000
Manifest next update:     Wed 13 May 2026 12:32:16 +0000
Files and hashes:         1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
                          2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: HNDgaZI6KTrW8/gj4k/Ff+z5wrypEXCTRN0SThDHzzo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c0:46:eb:f0:3d:30:76:ba:5f:48:85:1c:32:12:71:aa:8d:6c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
        Validity
            Not Before: May 12 09:46:16 2026 GMT
            Not After : May 13 12:32:16 2026 GMT
        Subject: CN=FDC7BA41B0AA8598F169216C2E2BB53770C87AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:7d:90:10:86:bb:72:3a:da:c0:c1:bb:1b:
                    cd:f2:a1:a8:fd:09:24:6d:37:1e:df:74:68:32:e8:
                    b1:61:dc:f1:d9:f0:b8:8b:e6:d7:d3:9c:d2:dd:b2:
                    6f:f1:d8:c9:07:ae:a5:83:62:a3:cb:bf:99:ef:f4:
                    ed:ad:49:4b:3d:91:4e:03:8c:22:86:c9:8f:69:b2:
                    3b:30:ab:c6:e4:cf:c1:69:ff:f8:a6:35:a7:1c:a5:
                    c8:2f:24:d4:20:08:e1:52:dd:e7:1d:db:b4:c8:fc:
                    a1:23:e6:82:9c:9d:e2:4e:ea:29:38:7f:49:fb:9d:
                    fa:c1:40:f7:2c:51:17:d9:68:08:cf:a9:98:5b:3e:
                    7d:ff:4c:fa:88:13:9b:67:24:28:cb:70:22:56:d9:
                    93:52:5e:17:be:2a:27:53:09:3d:84:c9:7f:e8:38:
                    2b:d5:33:2d:f0:3d:43:44:b9:6f:e0:ca:c2:b2:e3:
                    ac:02:6f:ec:20:3f:e1:d6:31:05:27:84:9a:81:35:
                    05:1e:80:2f:06:a4:5c:de:1d:bf:d9:c2:66:b7:c7:
                    91:62:a3:08:b1:28:38:17:47:c3:a1:d7:bf:21:94:
                    70:60:b4:7e:11:5f:4f:cd:c4:e7:4c:4a:4b:bf:02:
                    aa:92:3a:db:1c:6e:12:57:2a:ad:15:6c:5e:93:6d:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C7:BA:41:B0:AA:85:98:F1:69:21:6C:2E:2B:B5:37:70:C8:7A:F3
            X509v3 Authority Key Identifier:
                keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:38:17:89:5a:0c:35:a4:ee:04:36:ae:85:96:fa:f5:ad:
         9b:24:d3:ec:b0:de:40:0e:d1:c9:1d:19:36:40:e4:c5:b1:4e:
         b4:bc:40:5b:b4:64:07:a8:72:92:a9:ca:04:36:83:a0:21:58:
         c0:7b:78:47:c6:c6:4b:1f:e7:54:c9:c3:db:04:dc:6e:87:53:
         79:c4:04:08:be:b3:4e:e6:b9:d7:a2:44:6f:f9:37:cb:fe:a6:
         f7:64:2b:70:e3:6d:61:24:b5:2a:3f:1e:fc:3f:9d:af:08:b5:
         5e:ff:5c:a2:30:f7:2f:84:ce:08:31:01:63:1f:12:02:72:ad:
         ae:df:0e:17:83:e5:76:85:28:b1:e8:27:02:cb:a3:21:cd:e0:
         52:cc:78:10:7b:1f:df:e1:9b:b0:4b:e9:2a:5f:56:5e:f8:3b:
         c9:a9:33:a8:2f:e3:90:e0:45:9a:8a:cb:54:96:5f:72:06:4f:
         2d:f4:28:21:95:95:08:e5:97:04:f6:c9:b6:87:80:ac:e2:67:
         b7:f2:96:82:99:18:cf:e4:f6:27:91:45:b4:8c:eb:04:17:f8:
         46:38:a3:f5:f3:ca:d4:c3:00:f7:02:a2:89:8d:cf:03:54:f9:
         7b:be:33:65:fa:af:07:d6:87:03:72:69:16:67:ff:1e:62:03:
         51:5d:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:02 2026 by rpki-client