Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
File:                     B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft (raw, json)
Hash identifier:          m8CePXRgFd6zOojainaQfKhTBKZFQcL+cnptzTGiwzI=
Subject key identifier:   C3:B4:54:6B:1B:F6:E7:FD:EA:1B:4D:9E:BB:97:2E:78:00:76:64:18
Authority key identifier: B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
Certificate issuer:       /CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Certificate serial:       696CB3A24A35A618875310C78B9B6A01803E888E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
Manifest number:          63
Signing time:             Fri 24 Jul 2026 02:32:20 +0000
Manifest this update:     Fri 24 Jul 2026 02:27:20 +0000
Manifest next update:     Sat 25 Jul 2026 04:38:20 +0000
Files and hashes:         1: 3130332e3132362e3138302e302f32322d3234203d3e203138303436.roa (hash: a8xqBAe2caapH+ozlzEc+y43Zwh4KNtvwAmfNpRDkMo=)
                          2: B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl (hash: L2pGsauzWTENQxunSHew72HLB9aZlQLFdJAJuHpbrWg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl
                          rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6c:b3:a2:4a:35:a6:18:87:53:10:c7:8b:9b:6a:01:80:3e:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
        Validity
            Not Before: Jul 24 02:27:20 2026 GMT
            Not After : Jul 25 04:38:20 2026 GMT
        Subject: CN=C3B4546B1BF6E7FDEA1B4D9EBB972E7800766418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:20:00:bb:5f:c5:ed:fb:cd:6b:38:b3:48:
                    57:17:88:56:ba:c8:4e:4a:47:c2:67:f8:27:0a:db:
                    40:20:2f:ad:d2:b3:2e:12:8c:9d:bc:37:f0:0b:b6:
                    3c:a3:2c:42:7f:c8:68:51:3d:40:33:2f:e8:aa:da:
                    f4:49:18:f6:33:cf:99:e0:d3:3d:7d:94:13:c6:5c:
                    4e:d4:1c:47:e6:38:de:13:b2:14:45:81:5f:63:86:
                    80:f6:17:5a:f9:a0:3a:87:93:ee:06:bb:fa:ff:f0:
                    78:35:7a:46:b3:f7:31:f3:c5:95:23:b9:76:de:ef:
                    19:fe:5f:78:4b:e2:67:57:88:2d:c0:66:f6:0e:cb:
                    6e:a0:79:ae:bf:cb:5a:65:95:1b:12:a3:1f:b5:b6:
                    fa:b8:d0:44:ad:88:4b:c4:c6:c8:c4:aa:4e:9a:36:
                    b9:ae:95:5a:45:5e:ac:53:60:93:38:9c:fa:40:6a:
                    8c:a7:ed:8f:6c:f7:18:74:3f:f1:41:1b:c4:14:77:
                    7b:fb:dd:1e:7a:ba:01:64:61:6b:80:bd:9a:f1:47:
                    cb:61:4e:6d:33:06:09:06:81:3c:92:78:f8:58:73:
                    72:a5:fe:5e:37:b8:ce:5b:f5:37:04:e3:e9:6b:f9:
                    2e:d6:05:b9:f4:7c:e1:bb:89:6d:30:36:2f:93:7c:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:54:6B:1B:F6:E7:FD:EA:1B:4D:9E:BB:97:2E:78:00:76:64:18
            X509v3 Authority Key Identifier:
                keyid:B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:74:b8:a7:8b:a1:fa:18:4c:94:7c:a5:87:ad:01:1c:6a:
         a9:af:eb:b3:87:ff:87:f6:1c:e5:e9:b0:48:50:61:1d:2b:aa:
         b1:56:50:40:3f:6d:02:a5:87:ac:b9:54:07:29:b1:7f:9e:f0:
         ff:48:4f:93:b1:db:45:f1:0a:52:07:4a:81:c7:e9:2e:5d:11:
         17:c0:e4:f2:90:2c:6b:02:51:1f:d4:63:b5:67:68:dc:d7:dc:
         cc:f0:0c:22:27:2f:00:5a:f6:87:d8:d1:28:5f:14:89:8f:16:
         0e:08:80:29:be:0d:68:03:e3:25:ce:40:8f:b0:e5:d1:bc:0a:
         a3:92:36:63:a7:55:1f:65:e9:15:4e:0b:79:01:35:23:23:b1:
         a3:97:e6:11:90:d8:0e:e2:40:59:91:9c:08:f9:65:3e:43:7b:
         50:41:84:c3:52:6e:de:03:2c:0e:1a:ed:03:0d:37:1a:59:1c:
         75:27:81:fc:40:17:0b:06:25:cd:23:22:30:f5:3d:07:d9:9d:
         81:96:77:9b:2b:80:b7:db:3c:2b:8a:4f:33:8c:a5:b6:aa:82:
         b8:d9:d7:3c:e0:69:5f:8c:d4:6d:1c:bd:b0:2b:aa:19:96:94:
         aa:5f:23:b4:17:97:51:2b:40:ef:c6:d4:3d:99:a1:d5:ee:26:
         7b:3a:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:34 2026 by rpki-client