Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft
File:                     F6C5469B49682AFB105330FD4510981DC05154B0.mft (raw, json)
Hash identifier:          ine/dA5w0JIuqPem0fXqGqs2vS7R6csSCbgjz5jn7jk=
Subject key identifier:   D6:61:B4:9C:CB:A7:97:BD:5F:9A:C7:CA:93:D3:F7:D0:39:CB:41:25
Authority key identifier: F6:C5:46:9B:49:68:2A:FB:10:53:30:FD:45:10:98:1D:C0:51:54:B0
Certificate issuer:       /CN=F6C5469B49682AFB105330FD4510981DC05154B0
Certificate serial:       0E597F9A07C188313441CCCF8621EE0470ADD7CD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft
Manifest number:          65
Signing time:             Fri 24 Jul 2026 11:38:21 +0000
Manifest this update:     Fri 24 Jul 2026 11:33:21 +0000
Manifest next update:     Sat 25 Jul 2026 14:16:21 +0000
Files and hashes:         1: 3130332e3136302e38362e302f32332d3233203d3e2034373832.roa (hash: GRhSIbyJPAbQUnesG8A33zSz+yXABdlL/f8zNkiDVII=)
                          2: F6C5469B49682AFB105330FD4510981DC05154B0.crl (hash: 6PHKpJqQYmh6/OTmscX64oq3CJ7UqPaC2pNlqO/WIsc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.crl
                          rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:59:7f:9a:07:c1:88:31:34:41:cc:cf:86:21:ee:04:70:ad:d7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C5469B49682AFB105330FD4510981DC05154B0
        Validity
            Not Before: Jul 24 11:33:21 2026 GMT
            Not After : Jul 25 14:16:21 2026 GMT
        Subject: CN=D661B49CCBA797BD5F9AC7CA93D3F7D039CB4125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:96:78:c3:f7:ec:12:b9:d6:eb:68:1c:17:
                    28:2d:4d:6a:ee:0a:d6:c1:18:6b:0b:cf:b4:9e:e8:
                    76:04:02:b6:b2:b7:31:b1:a6:26:83:87:15:b0:a8:
                    ab:58:c6:92:a1:dc:bc:7a:4b:31:4b:3d:e9:6b:fa:
                    e2:74:e9:e8:33:f8:74:e8:f7:f5:66:3b:a2:34:6e:
                    70:6d:24:9c:2f:4c:22:23:bb:a2:c3:dc:8f:10:f3:
                    c8:f0:07:ec:54:d8:11:e6:2a:d6:12:b2:ea:8e:eb:
                    07:dc:b8:14:62:d0:8c:35:ef:d1:73:72:32:40:52:
                    76:f9:d4:2c:40:31:d3:0a:5a:c7:94:59:64:9b:b6:
                    1d:8b:a4:16:fb:fa:b2:6b:5d:8d:d2:65:56:be:46:
                    22:08:51:8c:5e:ae:d9:bb:ca:ec:6f:6b:37:26:b5:
                    0b:ab:d2:ee:24:38:bd:b2:18:8f:2f:8f:e1:84:db:
                    54:1b:5f:83:17:07:ad:fb:b0:df:9a:88:c7:37:5b:
                    c8:37:25:de:09:4b:18:4d:45:14:56:2f:8b:44:4a:
                    ce:9f:6e:95:af:eb:ac:a8:88:e3:ea:49:70:5b:47:
                    d8:83:ef:cc:f2:7a:3a:76:9b:d3:f0:bf:4e:6a:2e:
                    eb:0c:d6:eb:67:4b:02:8b:7f:37:e3:66:b2:ed:41:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:B4:9C:CB:A7:97:BD:5F:9A:C7:CA:93:D3:F7:D0:39:CB:41:25
            X509v3 Authority Key Identifier:
                keyid:F6:C5:46:9B:49:68:2A:FB:10:53:30:FD:45:10:98:1D:C0:51:54:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:fb:3b:2c:9c:c6:8b:b9:30:54:b5:10:8e:56:78:7f:f2:
         12:b7:d6:78:83:ad:8a:f6:79:7d:44:37:4d:c0:1d:2d:ad:80:
         42:5e:aa:3e:dc:01:b1:19:57:68:a2:87:13:81:59:89:0d:27:
         70:5a:07:3a:be:5c:6b:37:e5:87:8e:55:95:7d:9a:17:98:d7:
         6d:67:82:89:7d:4b:81:a7:39:fe:0e:4e:fc:37:df:66:8c:e6:
         4a:d0:4b:c1:aa:d1:17:12:3e:12:2f:b3:c5:4e:93:bf:53:3d:
         fe:18:95:91:04:74:c6:14:6e:08:be:46:c2:d0:25:bc:61:92:
         fd:f5:bd:a6:b0:85:fc:70:a1:ac:c2:d8:05:79:02:90:ef:09:
         14:82:3e:aa:ed:87:af:d8:66:90:f0:76:d5:50:86:59:83:93:
         2a:9b:4e:ed:f4:52:44:09:46:c5:de:e6:12:f5:db:f4:77:1f:
         85:f8:66:a7:97:b0:e0:27:78:08:9b:c7:ed:d2:32:04:c2:d8:
         73:1e:8f:6e:8a:27:b3:f6:03:99:f2:9a:8c:5f:4d:2c:da:93:
         5f:14:da:be:f6:b3:76:57:ba:c7:46:58:40:7f:30:aa:bc:fb:
         7e:49:55:0e:6a:68:d8:cc:75:cb:4c:0a:b6:8b:25:0a:fd:06:
         09:b6:69:a2
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUDll/mgfBiDE0QczPhiHuBHCt180wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDNTQ2OUI0OTY4MkFGQjEwNTMzMEZENDUxMDk4MURD
MDUxNTRCMDAeFw0yNjA3MjQxMTMzMjFaFw0yNjA3MjUxNDE2MjFaMDMxMTAvBgNV
BAMTKEQ2NjFCNDlDQ0JBNzk3QkQ1RjlBQzdDQTkzRDNGN0QwMzlDQjQxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCou5Z4w/fsErnW62gcFygtTWru
CtbBGGsLz7Se6HYEAraytzGxpiaDhxWwqKtYxpKh3Lx6SzFLPelr+uJ06egz+HTo
9/VmO6I0bnBtJJwvTCIju6LD3I8Q88jwB+xU2BHmKtYSsuqO6wfcuBRi0Iw179Fz
cjJAUnb51CxAMdMKWseUWWSbth2LpBb7+rJrXY3SZVa+RiIIUYxertm7yuxvazcm
tQur0u4kOL2yGI8vj+GE21QbX4MXB637sN+aiMc3W8g3Jd4JSxhNRRRWL4tESs6f
bpWv66yoiOPqSXBbR9iD78zyejp2m9Pwv05qLusM1utnSwKLfzfjZrLtQf69AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU1mG0nMunl71fmsfKk9P30DnLQSUwHwYDVR0j
BBgwFoAU9sVGm0loKvsQUzD9RRCYHcBRVLAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9JVC8w
L0Y2QzU0NjlCNDk2ODJBRkIxMDUzMzBGRDQ1MTA5ODFEQzA1MTU0QjAuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvRjZDNTQ2OUI0OTY4MkFGQjEwNTMzMEZENDUxMDk4
MURDMDUxNTRCMC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPSVQvMC9GNkM1NDY5QjQ5NjgyQUZC
MTA1MzMwRkQ0NTEwOTgxREMwNTE1NEIwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg77Oyycxou5MFS1
EI5WeH/yErfWeIOtivZ5fUQ3TcAdLa2AQl6qPtwBsRlXaKKHE4FZiQ0ncFoHOr5c
azflh45VlX2aF5jXbWeCiX1Lgac5/g5O/DffZozmStBLwarRFxI+Ei+zxU6Tv1M9
/hiVkQR0xhRuCL5GwtAlvGGS/fW9prCF/HChrMLYBXkCkO8JFII+qu2Hr9hmkPB2
1VCGWYOTKptO7fRSRAlGxd7mEvXb9Hcfhfhmp5ew4Cd4CJvH7dIyBMLYcx6Pboon
s/YDmfKajF9NLNqTXxTavvazdle6x0ZYQH8wqrz7fklVDmpo2Mx1y0wKtoslCv0G
CbZpog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:16 2026 by rpki-client