Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File:                     19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier:          dUFjOMWwWd9d8tiNxb4gQY6CYMarCkhW83O+KJoSYZI=
Subject key identifier:   5F:17:3A:BA:33:18:71:CA:B5:8D:04:12:45:A3:28:91:0D:F9:0D:2B
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer:       /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial:       6B94AB0ADD3F1F9A9E27706F8F1473E214E13F18
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 18:36:29 +0000
Manifest this update:     Thu 23 Jul 2026 18:31:29 +0000
Manifest next update:     Fri 24 Jul 2026 20:31:29 +0000
Files and hashes:         1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: w58awCLDo6ixRu+9oY9mKlclcU99uYIJFRSdcfMxQYQ=)
                          2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
                          rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:ab:0a:dd:3f:1f:9a:9e:27:70:6f:8f:14:73:e2:14:e1:3f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
        Validity
            Not Before: Jul 23 18:31:29 2026 GMT
            Not After : Jul 24 20:31:29 2026 GMT
        Subject: CN=5F173ABA331871CAB58D041245A328910DF90D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:1c:a6:b9:16:7f:79:5c:a7:73:49:d3:cc:
                    aa:3d:8a:92:4a:cd:43:af:c4:db:96:69:4f:ef:84:
                    e8:36:d6:9f:c9:3c:0c:66:5f:32:20:0f:c8:dc:17:
                    f0:85:8b:c4:fe:75:cf:d3:08:14:b6:12:d9:17:a6:
                    68:be:42:df:cd:99:23:97:7e:52:00:99:3d:39:3f:
                    6d:24:27:25:66:c0:48:4a:72:bb:0d:99:7a:b5:9c:
                    00:d1:03:33:91:dd:11:ec:02:ab:85:0f:02:f6:6b:
                    95:82:29:eb:2e:b3:c8:8c:3f:cd:8c:90:91:15:47:
                    43:10:08:93:46:34:78:b9:07:23:22:28:2a:75:0b:
                    13:58:27:3e:02:4b:3a:e4:5d:fc:7e:85:63:fb:24:
                    47:be:b6:7b:21:8c:2a:a7:3c:4c:50:f5:15:2f:28:
                    a1:7d:9b:e3:82:5d:99:4a:d6:a7:d6:05:be:c0:ba:
                    8e:75:9d:99:9e:51:e9:78:dd:ad:df:60:06:aa:b8:
                    b4:de:c4:b9:ba:2a:19:c3:d0:cc:c1:ee:51:e1:99:
                    f8:65:f5:0f:4d:ca:c8:64:17:61:bc:cc:8d:0a:c8:
                    f4:5a:36:99:ad:21:1f:0a:7e:7a:b3:53:8e:0e:81:
                    0c:eb:e1:ae:10:06:5b:f5:b8:29:21:69:7c:bc:4e:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:3A:BA:33:18:71:CA:B5:8D:04:12:45:A3:28:91:0D:F9:0D:2B
            X509v3 Authority Key Identifier:
                keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:f8:8d:19:39:04:a1:53:f3:97:4e:64:d1:29:93:4e:3c:
         c3:b7:47:2f:89:c1:ec:ea:7c:11:70:b0:19:f8:8d:54:4e:6c:
         b8:37:a3:81:fd:5f:fe:83:da:ba:17:2b:e8:e4:df:17:be:9c:
         02:df:de:17:08:ee:15:bb:7d:85:f0:e2:a0:3b:1b:25:ce:82:
         14:44:a5:50:0a:f4:bb:6b:38:18:50:23:03:ae:e3:df:8a:57:
         27:c6:5a:81:b3:50:31:3f:38:30:33:0f:07:f1:94:00:29:6b:
         8c:0b:91:a4:92:04:89:89:18:0e:ad:e7:ce:6e:04:de:60:da:
         71:0e:52:e0:93:87:84:e8:59:db:87:d9:16:a6:57:f9:41:b9:
         b7:8f:ca:54:63:e8:be:8d:4c:74:45:a6:3b:c5:08:95:55:6c:
         7b:b9:09:06:52:f8:cd:ef:c9:8b:f5:aa:10:11:82:62:a9:3f:
         52:e5:4e:2d:f2:be:ea:e9:f9:68:92:d4:4e:4b:5f:79:0c:05:
         66:f1:de:a4:85:52:6a:50:6d:54:97:c5:0f:03:d0:4d:b0:c1:
         64:95:37:c1:dd:f6:9f:57:55:4b:b2:52:26:47:48:ca:0d:1e:
         99:e8:54:ef:8a:5a:c0:5d:a0:81:f0:b7:68:09:34:0c:b1:76:
         a3:56:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:02 2026 by rpki-client