Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File:                     809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier:          Dl6YNtEgd5sBkw6sUEFcshx6VIXtnkv/y2poHtSZftQ=
Subject key identifier:   86:79:AD:B6:FF:D2:03:B9:0C:A8:0E:9C:59:19:0A:76:50:DE:46:C2
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer:       /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial:       5F6052C004D298EABBBC5E3CAF7BBDA4AB626728
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 21:46:48 +0000
Manifest this update:     Thu 23 Jul 2026 21:41:48 +0000
Manifest next update:     Fri 24 Jul 2026 22:41:48 +0000
Files and hashes:         1: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
                          2: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: 2DIs1LMhaP8vT0LWtDA5smolZ4mJ+UtE/XVrhZPpyto=)
                          3: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:52:c0:04:d2:98:ea:bb:bc:5e:3c:af:7b:bd:a4:ab:62:67:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
        Validity
            Not Before: Jul 23 21:41:48 2026 GMT
            Not After : Jul 24 22:41:48 2026 GMT
        Subject: CN=8679ADB6FFD203B90CA80E9C59190A7650DE46C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:61:27:07:9f:b3:7e:59:0c:fa:3a:4e:71:
                    7b:cc:cd:80:55:1d:9f:19:a3:b9:83:88:20:26:f5:
                    9a:a7:d1:3b:1f:8f:8f:4e:0e:69:17:85:74:c7:d6:
                    fd:f4:19:bb:66:61:21:b1:43:56:2c:b8:10:df:2c:
                    7b:c5:95:20:69:9d:6a:2d:40:7d:5e:1d:32:f5:a9:
                    a7:5e:0b:58:45:a4:98:48:2e:ab:04:ef:0a:7a:2e:
                    b6:1a:11:99:7a:ad:2e:de:b1:f9:da:2e:24:1c:14:
                    f4:f8:03:2a:01:ed:c4:0d:1a:b3:17:91:65:b2:c5:
                    da:85:be:16:b5:cb:0b:f9:a6:c8:04:59:e3:42:5b:
                    6f:10:67:41:ac:01:ab:aa:09:a0:76:ef:04:9e:0c:
                    ac:de:d8:60:d9:10:27:31:71:2f:ba:55:17:db:3b:
                    b1:7d:d9:e0:53:e0:44:3c:83:ae:64:ad:7e:68:b7:
                    7f:35:ea:2e:34:4f:a1:ef:f3:e7:50:2d:be:2a:08:
                    4a:c8:7d:23:15:38:60:30:19:53:48:71:2a:e5:5e:
                    75:f9:63:1d:22:20:46:72:6e:0c:37:0b:81:a0:5b:
                    ad:d6:b8:b0:92:be:75:26:05:f9:08:0d:e6:5f:07:
                    20:d8:a2:a1:dc:36:37:f3:e4:a3:90:ab:b4:53:5f:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:AD:B6:FF:D2:03:B9:0C:A8:0E:9C:59:19:0A:76:50:DE:46:C2
            X509v3 Authority Key Identifier:
                keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:7b:ec:72:f8:9d:c2:ba:45:70:19:91:e6:d6:de:31:38:
         db:2a:15:81:a0:67:81:33:5a:50:64:0b:96:a5:fa:5e:f9:99:
         52:35:9c:aa:7f:b4:1e:33:82:7e:cd:75:25:68:7a:28:53:26:
         31:12:1f:94:6d:91:93:6a:f3:e5:6d:55:40:5e:0d:42:30:32:
         da:b1:bf:91:85:e8:15:c9:9b:bd:af:e2:fe:c5:5d:24:b7:08:
         21:18:f0:1e:84:9a:bb:69:56:8f:71:8c:15:a3:5d:a6:11:5d:
         29:d0:0b:8e:3f:0d:de:9e:5e:8f:c1:d7:cf:36:8b:83:48:0c:
         db:f9:58:33:86:48:98:96:87:cb:53:8c:df:61:90:80:b8:80:
         74:fa:a1:bf:0a:2b:ca:9a:3e:0a:29:40:d7:1b:4f:9b:fb:c4:
         6d:b8:40:7b:48:b9:f4:1d:55:2d:56:1a:31:f0:38:43:cd:93:
         e4:94:fe:0e:b5:95:42:93:92:91:5b:da:7c:47:f4:63:d9:ad:
         e2:30:5b:26:a6:73:09:78:c3:0d:2f:75:62:7c:95:3e:fd:02:
         72:a1:8f:6d:8e:3a:da:84:e3:bf:d7:74:73:a9:33:af:e6:dd:
         da:5e:cc:3a:bd:6a:d5:b9:78:b5:c2:82:9c:ea:28:5d:61:fc:
         51:e1:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:45 2026 by rpki-client