Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
File:                     BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json)
Hash identifier:          a0hdiHazvlFTlc3MDP3OimvpiMdYHDOaHuWJd2TDQaU=
Subject key identifier:   E1:BB:F5:D4:41:07:0B:2D:E2:19:37:9C:29:21:98:43:84:37:13:D9
Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Certificate issuer:       /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Certificate serial:       77C7199B3984794EE02CBA6E747AAE990BC76636
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
Manifest number:          0117
Signing time:             Sat 14 Nov 2026 16:02:47 +0000
Manifest this update:     Sat 14 Nov 2026 15:57:47 +0000
Manifest next update:     Sun 15 Nov 2026 17:08:47 +0000
Files and hashes:         1: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=)
                          2: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=)
                          3: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: j7M0iL3Wz31/Ku0i4ngaFLOlHx6QdxfFIjnS8j1su8k=)
                          4: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=)
                          5: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 17:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c7:19:9b:39:84:79:4e:e0:2c:ba:6e:74:7a:ae:99:0b:c7:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
        Validity
            Not Before: Nov 14 15:57:47 2026 GMT
            Not After : Nov 15 17:08:47 2026 GMT
        Subject: CN=E1BBF5D441070B2DE219379C29219843843713D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:c8:c9:e1:9d:a0:34:dc:1c:32:4b:c3:f3:
                    00:5e:7b:6c:c2:e4:ac:b2:20:33:e0:7f:58:74:93:
                    e8:6b:a8:9a:f4:d0:71:97:6a:b5:49:10:b7:8d:8e:
                    46:09:75:96:e0:89:73:78:28:6b:ec:4c:cc:a8:0e:
                    11:4d:5c:b6:3d:33:94:c3:05:ac:be:f9:89:f0:1c:
                    5c:d8:86:e1:86:17:7d:86:cb:33:32:56:c3:50:5f:
                    49:68:76:f7:d7:50:98:59:98:7e:27:48:16:4f:44:
                    e3:71:e0:37:b5:dd:e0:52:ed:03:b6:32:2e:4d:11:
                    d0:e7:2e:01:a3:ce:c3:05:a2:94:1e:b1:4b:27:6e:
                    dc:8a:9e:c3:03:6a:de:0f:bd:f4:dd:ba:3e:ad:e3:
                    08:8e:51:7b:96:e6:2c:7f:f6:05:75:57:63:18:4b:
                    91:50:e3:bb:b9:33:dc:f5:26:56:38:75:4c:1c:75:
                    7e:8c:64:2b:e9:5a:ca:cd:90:63:70:e6:6f:b0:87:
                    1e:7d:c1:d8:59:48:17:39:37:15:03:cc:eb:0d:cc:
                    65:8e:a1:fa:8f:a3:eb:f4:40:df:aa:b4:27:60:06:
                    a9:86:9f:c7:9f:21:b7:11:5c:22:21:8e:86:d0:6e:
                    f7:af:09:60:00:5d:fb:fa:ca:77:f0:06:a5:f8:46:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BB:F5:D4:41:07:0B:2D:E2:19:37:9C:29:21:98:43:84:37:13:D9
            X509v3 Authority Key Identifier:
                keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:fc:37:be:79:95:4c:2e:03:de:7c:fc:27:b7:59:f7:2d:
         3b:d4:6a:99:c5:77:25:11:47:23:90:42:9d:89:85:b8:de:a5:
         23:4c:3e:d9:30:a6:69:23:58:98:7c:eb:05:e2:51:8d:eb:1e:
         a7:41:b3:9d:83:e4:10:b7:00:c6:f5:82:d0:bb:1d:99:ce:83:
         93:73:47:a4:e6:21:ea:b0:69:b0:01:c5:3d:00:fa:85:40:c7:
         ff:b6:38:f2:32:53:8a:43:53:05:0e:81:15:25:22:97:f1:fd:
         d6:a1:cf:93:2c:3e:61:12:d8:cf:b4:c9:f7:95:5e:a6:47:4a:
         05:2f:e0:44:4f:15:43:f0:a1:0a:c8:ba:27:dc:0e:ca:98:d1:
         cf:99:38:d0:0d:6c:0e:28:0f:83:73:09:b9:f1:e7:37:af:64:
         83:bf:55:a6:6c:2a:b6:ea:9f:4c:fc:aa:af:01:3f:88:3b:29:
         18:3a:e9:21:83:d0:44:fb:aa:26:11:39:91:f3:64:35:78:43:
         49:0c:ef:a5:3a:9c:c2:ff:df:5c:17:ce:5c:70:08:c2:6b:78:
         88:fa:80:71:bd:85:3d:be:3d:69:a0:e9:97:40:a4:88:33:17:
         08:b5:b9:5c:f9:db:8b:3a:b9:16:99:1e:e4:37:59:d4:7d:59:
         fb:29:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:32:42 2026 by rpki-client