Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
File:                     3135985A244571EE521F17A73A1F0D6341A35ED5.mft (raw, json)
Hash identifier:          6qgbpzVs8roAFtyYE9hXg+9lCS1S4kH8Qova0isy2mk=
Subject key identifier:   9E:68:50:3D:EF:25:9A:9A:FD:34:2D:CD:DC:D5:73:1F:23:51:B1:35
Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
Certificate issuer:       /CN=3135985A244571EE521F17A73A1F0D6341A35ED5
Certificate serial:       3A3F0E011F9D7CA81A5D91C55CC2FAD3DEBAC70A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 19:16:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:11:33 +0000
Manifest next update:     Fri 24 Jul 2026 23:10:33 +0000
Files and hashes:         1: 3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (hash: 6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=)
                          2: 3135985A244571EE521F17A73A1F0D6341A35ED5.crl (hash: VDwHINBnAER5IautnkVwAhsHwK7znuC4GcCoVCA9yuY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl
                          rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:0e:01:1f:9d:7c:a8:1a:5d:91:c5:5c:c2:fa:d3:de:ba:c7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5
        Validity
            Not Before: Jul 23 19:11:33 2026 GMT
            Not After : Jul 24 23:10:33 2026 GMT
        Subject: CN=9E68503DEF259A9AFD342DCDDCD5731F2351B135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:c0:d2:70:ba:58:ba:2b:1b:40:52:d7:00:
                    c6:39:33:2a:cd:17:d4:82:c4:a6:f3:86:4f:05:9f:
                    59:2d:21:67:6f:5a:f3:bb:d3:a1:da:7c:d6:20:b1:
                    61:d4:52:94:ee:34:81:22:d2:8a:a1:d1:85:43:c9:
                    c3:d9:80:01:58:08:aa:d9:85:5c:50:98:04:22:5d:
                    58:04:dc:28:32:3a:45:db:7c:58:c7:3b:08:a6:be:
                    2f:91:7f:bc:2c:3b:93:f6:a3:73:a2:05:7f:2a:1f:
                    e4:b0:30:8f:81:09:2b:e5:d5:3a:1f:c4:d5:b4:36:
                    78:c4:f7:33:c0:c8:25:75:f5:f6:d2:6d:55:d0:16:
                    6c:05:32:ea:c1:09:65:08:ab:91:09:86:f7:47:9a:
                    4b:d3:87:b1:b2:1d:f8:bd:74:53:01:8a:cc:a6:0a:
                    19:29:66:65:33:61:2f:44:56:89:6a:14:5d:78:33:
                    12:a8:88:a0:f6:f3:ef:2f:01:cd:aa:3c:71:01:c9:
                    ef:d4:2e:62:05:f0:7b:2a:18:d3:0b:93:44:a4:8a:
                    be:a2:6a:89:51:aa:02:0f:61:8d:6b:42:b0:9b:e7:
                    bc:f9:a3:bc:0d:46:14:22:3d:be:7f:fd:db:03:28:
                    fa:e3:72:d0:43:2b:1b:5e:84:29:21:3c:13:00:3c:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:50:3D:EF:25:9A:9A:FD:34:2D:CD:DC:D5:73:1F:23:51:B1:35
            X509v3 Authority Key Identifier:
                keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:60:25:18:93:f3:49:2a:f6:6d:37:be:de:8b:e3:82:48:
         7b:03:24:13:02:c8:e8:bd:eb:d0:29:f3:fc:10:b8:5c:8e:79:
         d5:22:d2:a2:cd:48:ad:30:8c:9f:18:8c:b8:96:58:d7:20:47:
         01:bd:d0:58:68:82:5c:90:4d:cc:61:3e:21:8e:9f:78:86:0f:
         e7:92:36:01:62:83:c8:8e:c0:1a:be:7c:79:ac:cd:5a:ea:fb:
         9d:1f:dd:43:72:ef:a3:60:49:2f:55:7a:c9:52:b7:87:ac:8a:
         5a:9b:bb:5a:6c:ec:a1:a8:db:9d:d4:57:ef:73:dc:88:ae:af:
         80:14:e6:1b:7f:09:51:dd:64:76:3a:18:6b:a9:3c:ca:8a:d2:
         e1:3d:b0:ec:d3:0a:65:8a:a9:94:27:22:40:0d:5f:7b:e1:98:
         4e:73:11:69:d1:dd:46:09:7d:7b:9f:f6:1d:6b:a2:15:e4:88:
         29:3e:d2:c8:ee:fd:59:95:b1:0d:58:54:b1:b2:e5:26:3e:f1:
         0f:76:a4:03:59:2f:09:74:69:8c:1d:80:59:14:36:21:4c:af:
         03:19:ca:40:52:32:70:21:b1:27:b9:96:d2:76:47:07:12:bc:
         9b:62:06:af:56:c4:a5:1d:d5:09:03:05:1c:61:0c:54:e7:95:
         8d:5a:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:01 2026 by rpki-client