Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
File:                     2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json)
Hash identifier:          W6rA192ACAc9KdW8HNkzHFN70KSKmAhpfzGeMlNYaT8=
Subject key identifier:   05:C1:57:3F:58:89:EC:81:49:63:A4:84:B9:5A:C7:26:7F:29:F2:2F
Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43
Certificate issuer:       /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
Certificate serial:       55A563A23A90F09020831BA47D516C9DFB61C587
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
Manifest number:          FD
Signing time:             Sun 15 Nov 2026 15:49:49 +0000
Manifest this update:     Sun 15 Nov 2026 15:44:49 +0000
Manifest next update:     Mon 16 Nov 2026 16:19:49 +0000
Files and hashes:         1: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=)
                          2: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: wB+qk8Z78FzCPb+OuauCMr4V5q4LVVU9rHFs9dDA9mk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl
                          rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a5:63:a2:3a:90:f0:90:20:83:1b:a4:7d:51:6c:9d:fb:61:c5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
        Validity
            Not Before: Nov 15 15:44:49 2026 GMT
            Not After : Nov 16 16:19:49 2026 GMT
        Subject: CN=05C1573F5889EC814963A484B95AC7267F29F22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:6e:c3:b4:6c:c4:98:b0:c4:29:d3:19:5d:
                    b2:52:63:c8:0d:bf:93:ea:b5:44:ed:79:39:46:eb:
                    15:10:c4:88:c1:67:93:40:5b:fc:70:09:a4:73:c3:
                    73:49:68:49:5d:37:55:0d:9d:f5:ae:44:81:3c:15:
                    e3:0a:ef:6c:c1:29:07:ef:73:e4:8a:cc:d0:05:55:
                    a0:79:c2:95:7e:ca:2b:b9:ef:cd:6d:64:85:a8:96:
                    01:92:08:60:9d:d9:3c:97:87:a5:16:96:63:4c:46:
                    c8:1d:4c:35:ab:f9:f7:bb:0b:53:b9:5d:37:05:1f:
                    1b:b3:28:b3:41:3e:cb:c3:21:de:78:e3:c6:58:cc:
                    52:ea:43:0c:6a:22:42:2c:1a:41:ba:c1:5d:f8:76:
                    50:9c:53:d4:d6:42:a8:d8:de:08:15:e1:1b:9b:14:
                    7d:cc:9c:18:f4:b3:cc:78:a9:21:2c:c6:c4:4c:8e:
                    01:cd:b9:38:ac:cc:d2:36:05:3c:ac:36:30:9d:95:
                    2f:a8:d7:9e:cb:3b:d5:e4:f7:8e:f7:aa:66:a3:e4:
                    cc:d5:5e:61:06:cb:7d:73:2c:87:46:ba:e1:4e:97:
                    ca:95:a0:fe:ef:d9:6d:a3:e1:38:bb:94:dd:c9:37:
                    5a:25:99:87:64:57:db:cf:1f:f4:02:37:8f:b0:0d:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:57:3F:58:89:EC:81:49:63:A4:84:B9:5A:C7:26:7F:29:F2:2F
            X509v3 Authority Key Identifier:
                keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:92:89:b8:bd:a7:47:39:de:d3:54:1a:0f:d4:39:c3:34:
         be:fc:c2:86:4b:99:70:04:10:c8:e3:c4:46:4a:a3:04:4e:f8:
         26:4b:39:77:48:0f:cd:d6:69:d8:d8:96:79:a1:e8:7f:5e:14:
         e1:c5:cb:10:b5:35:15:46:3d:77:33:72:58:cb:e5:60:6a:c9:
         78:6d:ee:bc:4b:fe:7b:90:0c:65:4b:e6:d6:e6:58:6c:70:93:
         aa:b1:46:45:ba:c6:28:49:29:6a:43:88:55:64:c4:ec:66:ac:
         08:70:13:31:98:8a:0e:b9:6f:98:a5:59:0c:86:af:96:80:94:
         06:44:2b:16:d9:9b:56:6e:a2:24:bb:63:0c:b9:1c:18:d7:69:
         6f:42:c0:f7:b4:93:23:e8:2a:32:07:57:74:7f:f4:3e:39:ae:
         c7:e5:fc:3a:da:24:25:38:dd:8d:f3:ea:10:e1:63:96:a1:39:
         bc:69:65:49:71:67:8d:ee:da:1e:59:23:85:b4:b4:6d:68:66:
         06:7e:ca:20:a7:13:15:6d:a8:26:94:56:d8:91:47:a3:17:7f:
         71:47:c9:6a:06:52:3a:20:e4:6a:0e:c5:6b:be:7c:f7:96:ee:
         fd:b5:21:2e:d7:58:77:bb:39:41:7d:4f:1a:f1:cf:46:ca:f0:
         5b:5e:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:12 2026 by rpki-client