Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
File:                     BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json)
Hash identifier:          Z7FVVJgb/JL1VsZ5V6hzers2lWdvf/dDegtYz1yDtAo=
Subject key identifier:   13:B8:2A:36:24:0F:C5:61:C7:9C:11:E5:51:1C:CE:9F:2F:E2:72:8F
Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Certificate issuer:       /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Certificate serial:       54FAF5588930425950E63E288C58886676483553
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
Manifest number:          7E
Signing time:             Fri 24 Jul 2026 06:52:51 +0000
Manifest this update:     Fri 24 Jul 2026 06:47:51 +0000
Manifest next update:     Sat 25 Jul 2026 09:43:51 +0000
Files and hashes:         1: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: UkHAPOs7vvjAR8tj/D5+fEZoylD4Yr6PhPj2TTXA+rM=)
                          2: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=)
                          3: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=)
                          4: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=)
                          5: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:f5:58:89:30:42:59:50:e6:3e:28:8c:58:88:66:76:48:35:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
        Validity
            Not Before: Jul 24 06:47:51 2026 GMT
            Not After : Jul 25 09:43:51 2026 GMT
        Subject: CN=13B82A36240FC561C79C11E5511CCE9F2FE2728F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e9:0f:82:da:2e:dc:25:92:f4:5d:0c:cb:96:
                    ea:dd:10:27:18:f8:d2:5e:0f:3a:9e:40:b2:b2:05:
                    2d:bd:7c:d6:78:bf:5c:44:9e:2c:98:1f:32:65:26:
                    b4:c5:9e:6f:5c:d2:ef:45:89:39:f0:bc:71:db:a2:
                    e1:68:95:dd:14:8c:eb:e0:9b:06:a2:a7:31:a8:a0:
                    ef:bc:ae:09:c6:83:de:0a:37:c0:32:51:de:53:22:
                    80:6d:b0:69:04:a8:e1:f3:21:a3:e3:ea:8f:ac:8b:
                    ca:90:86:b9:bc:30:4c:b5:27:c0:e5:b9:ca:ca:66:
                    74:d5:e3:fc:4c:87:96:77:5d:22:69:f5:97:1a:e4:
                    c0:20:45:5d:c1:45:68:ed:3b:88:bb:0f:80:d3:e6:
                    18:f1:11:84:56:e5:c5:02:c5:64:b5:48:09:a4:6f:
                    2c:17:01:0e:7f:74:6e:1c:fe:37:18:00:ce:d5:be:
                    0f:e1:33:45:18:8e:be:54:81:a8:53:ff:cd:49:41:
                    03:a4:dc:1e:34:f2:4d:29:41:fa:87:a2:42:3c:26:
                    11:ea:14:1a:66:c6:79:39:8b:bd:72:7b:39:4e:9d:
                    e4:16:24:93:99:06:78:fd:5f:1a:b5:9e:c1:46:2f:
                    47:a2:bd:65:6d:88:a8:a3:70:6b:79:93:b1:48:0b:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:2A:36:24:0F:C5:61:C7:9C:11:E5:51:1C:CE:9F:2F:E2:72:8F
            X509v3 Authority Key Identifier:
                keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:16:21:68:74:6c:a6:19:12:a7:16:17:75:3b:cf:9c:47:
         dd:8f:46:1a:3b:58:6a:27:58:1a:df:e0:51:bf:92:30:1b:45:
         f7:01:ac:7c:bc:16:8c:84:35:8e:03:c1:1b:41:bd:c5:a6:d5:
         6a:2e:7a:8f:77:2d:4d:39:ee:9c:b8:4c:d7:18:6b:d1:a8:6f:
         1b:56:3a:ea:d5:a7:64:3f:45:ad:8a:b2:85:74:a3:bd:ee:fb:
         96:40:18:db:e4:90:7b:b2:53:3e:50:18:94:4f:c1:1c:f1:24:
         05:4e:35:66:9b:47:b3:89:d6:71:89:92:45:4f:79:42:ea:b6:
         9c:c1:c4:c8:21:42:dc:e2:43:25:ad:3e:13:9c:4a:1f:81:70:
         7c:09:f3:9a:fb:93:46:f4:28:93:b5:cd:6c:8f:00:a1:e0:8c:
         6d:d2:d4:32:b1:e9:d1:f1:bf:09:70:70:9b:7d:d8:72:0a:8f:
         e1:b3:fd:e7:51:6e:5e:8c:2c:c8:b2:40:b4:47:03:d8:04:34:
         1a:60:55:7e:0f:38:ff:ac:4b:12:cf:36:b9:a4:93:66:4c:a9:
         bd:b5:70:73:c8:c8:ca:d6:90:9b:92:7f:97:eb:87:dc:06:25:
         88:de:6f:22:79:28:07:c4:a3:40:2d:d6:e8:63:ae:b2:fd:0c:
         cd:84:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:17 2026 by rpki-client