Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
File:                     50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft (raw, json)
Hash identifier:          rKRNKTi8z53qVLksofWCPprJj37dW3+i8SqygzPv79Y=
Subject key identifier:   CD:3B:02:C6:C5:28:A7:A1:CA:50:8A:FA:BC:D1:A1:66:7C:AF:7C:4C
Authority key identifier: 50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93
Certificate issuer:       /CN=50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93
Certificate serial:       28D61D0D7CDE9FE22AA345280442EB77C8D74788
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
Manifest number:          BB
Signing time:             Sat 26 Sep 2026 03:25:09 +0000
Manifest this update:     Sat 26 Sep 2026 03:20:09 +0000
Manifest next update:     Sun 27 Sep 2026 03:52:09 +0000
Files and hashes:         1: 3230332e39392e3134362e302f32332d3233203d3e20313530373536.roa (hash: kxqeMvj9SMA3KN5KBGnRd9mFH2/eeTLIig6/4ywFNPg=)
                          2: 50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.crl (hash: II/aoTiRgaICgodyiwOtHdrJL6Em19Wc3dhGVoFyKVI=)
                          3: 3230332e39392e3134362e302f32342d3234203d3e20313530373536.roa (hash: 1mVzFE0Yeqtk+4oiTWS5hur4VitYCCBHVCF0UE5DP5I=)
                          4: 3230332e39392e3134372e302f32342d3234203d3e20313530373536.roa (hash: kBqzHoM9yVuaeAKWj85ztpSA5nEMtL1hcA1SNhlfG4A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.crl
                          rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d6:1d:0d:7c:de:9f:e2:2a:a3:45:28:04:42:eb:77:c8:d7:47:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93
        Validity
            Not Before: Sep 26 03:20:09 2026 GMT
            Not After : Sep 27 03:52:09 2026 GMT
        Subject: CN=CD3B02C6C528A7A1CA508AFABCD1A1667CAF7C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:e8:1f:d0:1a:7b:92:59:57:fe:2a:4d:36:
                    11:87:12:33:b5:4e:fb:2e:81:1c:54:64:7d:f0:94:
                    94:e1:1a:9b:0d:58:c9:01:84:a0:fc:9e:b1:d0:fc:
                    ab:61:a3:fe:b5:7c:c4:85:fd:d3:31:8d:1e:f1:67:
                    f3:41:4d:2b:03:83:f5:07:66:38:fb:f8:0a:1d:e8:
                    07:d3:2b:f2:27:d0:c5:a2:76:34:87:26:59:9f:86:
                    59:c3:c6:bc:b7:08:e5:89:84:c7:9d:9d:e6:59:94:
                    f3:f5:e3:d4:60:b2:f3:2c:25:30:f5:b8:90:2f:03:
                    bc:bf:0a:cc:10:f9:9d:b5:9e:df:4a:9b:a7:71:59:
                    39:bd:dc:e1:de:3e:fa:19:4c:83:c4:a9:9e:10:99:
                    54:9b:ad:6a:ae:21:04:0a:e5:ec:dc:53:b6:15:79:
                    91:1f:f0:08:c3:29:b0:e9:1c:12:73:c7:46:d5:94:
                    fc:41:8a:ae:b7:62:d5:79:c6:bc:30:1e:62:81:d7:
                    4b:86:03:54:05:a2:b5:eb:e9:92:23:7f:49:e6:bb:
                    48:ab:ca:5f:f4:0a:a8:d3:b3:b3:07:33:2d:51:81:
                    e7:9f:3e:aa:ef:07:e5:d4:8b:c1:eb:02:ef:6d:da:
                    5e:a3:ca:db:d0:9d:52:0e:62:69:b9:72:ac:90:80:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:02:C6:C5:28:A7:A1:CA:50:8A:FA:BC:D1:A1:66:7C:AF:7C:4C
            X509v3 Authority Key Identifier:
                keyid:50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:00:49:1b:56:61:bd:0b:7e:92:64:56:88:82:f0:19:21:
         2d:22:a4:03:bf:1f:68:33:8c:99:c0:8d:39:27:e6:fa:4a:d8:
         2d:cd:89:c7:43:a4:66:fb:87:aa:8a:10:e8:13:04:43:20:73:
         7d:3e:32:24:9c:9b:8f:db:cd:a8:ff:86:7b:11:33:69:5b:67:
         60:0f:1c:b7:65:02:41:ca:39:86:4b:cc:89:ad:99:b7:75:35:
         60:04:ff:f1:07:af:20:51:27:4d:3b:55:38:0e:74:23:f7:d1:
         7e:f0:fc:7d:54:8a:5b:0e:bd:d5:60:80:34:3b:1f:b5:90:14:
         36:90:70:55:54:e6:54:2d:e9:55:67:c2:01:c0:5a:d5:a9:76:
         c8:be:37:ba:d1:cb:48:9f:ea:f3:88:eb:37:6e:67:4f:b3:48:
         60:7c:14:da:8f:b8:1c:f6:3a:ec:e2:c9:9f:c2:da:ce:4e:f8:
         12:63:34:b3:b9:fa:c0:c8:f7:b1:56:f0:7b:35:1e:ef:ca:1e:
         71:0c:19:6f:7e:e1:b4:41:ca:21:26:44:1c:2c:e1:23:74:99:
         56:27:26:a0:55:24:06:d9:76:1a:40:97:9b:c7:d7:28:37:aa:
         db:36:9c:48:ee:74:2f:90:c4:6a:14:5b:c3:27:88:c4:3a:58:
         84:00:48:43
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUKNYdDXzen+Iqo0UoBELrd8jXR4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBBNTg1OEJGNzZDMjNCMkJFQzNBREM3NERCOEIzNDAx
Q0EzRUQ5MzAeFw0yNjA5MjYwMzIwMDlaFw0yNjA5MjcwMzUyMDlaMDMxMTAvBgNV
BAMTKENEM0IwMkM2QzUyOEE3QTFDQTUwOEFGQUJDRDFBMTY2N0NBRjdDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMFegf0Bp7kllX/ipNNhGHEjO1
TvsugRxUZH3wlJThGpsNWMkBhKD8nrHQ/Ktho/61fMSF/dMxjR7xZ/NBTSsDg/UH
Zjj7+Aod6AfTK/In0MWidjSHJlmfhlnDxry3COWJhMedneZZlPP149RgsvMsJTD1
uJAvA7y/CswQ+Z21nt9Km6dxWTm93OHePvoZTIPEqZ4QmVSbrWquIQQK5ezcU7YV
eZEf8AjDKbDpHBJzx0bVlPxBiq63YtV5xrwwHmKB10uGA1QForXr6ZIjf0nmu0ir
yl/0CqjTs7MHMy1RgeefPqrvB+XUi8HrAu9t2l6jytvQnVIOYmm5cqyQgMhHAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUzTsCxsUop6HKUIr6vNGhZnyvfEwwHwYDVR0j
BBgwFoAUUKWFi/dsI7K+w63HTbizQByj7ZMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkxPUFBZ
LzAvNTBBNTg1OEJGNzZDMjNCMkJFQzNBREM3NERCOEIzNDAxQ0EzRUQ5My5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81MEE1ODU4QkY3NkMyM0IyQkVDM0FEQzc0REI4
QjM0MDFDQTNFRDkzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkxPUFBZLzAvNTBBNTg1OEJGNzZD
MjNCMkJFQzNBREM3NERCOEIzNDAxQ0EzRUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFc8AEkbVmG9
C36SZFaIgvAZIS0ipAO/H2gzjJnAjTkn5vpK2C3NicdDpGb7h6qKEOgTBEMgc30+
MiScm4/bzaj/hnsRM2lbZ2APHLdlAkHKOYZLzImtmbd1NWAE//EHryBRJ007VTgO
dCP30X7w/H1UilsOvdVggDQ7H7WQFDaQcFVU5lQt6VVnwgHAWtWpdsi+N7rRy0if
6vOI6zduZ0+zSGB8FNqPuBz2OuziyZ/C2s5O+BJjNLO5+sDI97FW8Hs1Hu/KHnEM
GW9+4bRByiEmRBws4SN0mVYnJqBVJAbZdhpAl5vH1yg3qts2nEjudC+QxGoUW8Mn
iMQ6WIQASEM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:27:11 2026 by rpki-client