Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File:                     4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier:          VqHUmg4PUAbcV+oh4HdcB//Ta/F9sFDjJxQnKxJHH5I=
Subject key identifier:   81:A2:E9:0D:5E:B7:D9:BE:D3:15:42:CB:82:03:CA:91:5E:0A:D5:A4
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer:       /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial:       1943D800E3962FBFDE31034E2FFF22EAC877D3CF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number:          63
Signing time:             Fri 24 Jul 2026 06:17:48 +0000
Manifest this update:     Fri 24 Jul 2026 06:12:48 +0000
Manifest next update:     Sat 25 Jul 2026 07:03:48 +0000
Files and hashes:         1: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
                          2: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: ipzewKx9fBnHaFDLN+4DrCm/ItdlwnBe+Ogv1gQpffA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
                          rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:d8:00:e3:96:2f:bf:de:31:03:4e:2f:ff:22:ea:c8:77:d3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
        Validity
            Not Before: Jul 24 06:12:48 2026 GMT
            Not After : Jul 25 07:03:48 2026 GMT
        Subject: CN=81A2E90D5EB7D9BED31542CB8203CA915E0AD5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:6c:f4:24:f9:a3:14:d7:3b:b5:be:c9:bc:
                    d5:54:cf:23:51:18:4a:29:58:db:3b:93:10:25:49:
                    42:fb:bb:66:92:9e:38:66:77:7f:55:95:f9:c3:f6:
                    64:5a:fe:58:2d:36:74:39:ad:25:d4:33:1b:6b:e9:
                    ca:fa:e2:12:e2:66:a5:7b:a7:ba:fd:5e:2f:e5:20:
                    d5:b9:5c:05:1a:9c:60:cf:b2:e6:81:50:8a:61:9f:
                    d2:ea:ec:33:00:9a:fd:3b:85:f7:b6:7a:dd:a1:e7:
                    52:b9:84:4e:bf:6d:7e:fe:8b:03:66:1d:ea:21:8f:
                    70:e3:5e:08:f9:54:92:e0:41:26:fe:4c:a7:d0:9b:
                    2e:0b:a3:de:9c:ec:47:80:a6:8b:35:0d:99:4f:4e:
                    0c:fb:f8:c9:5c:da:ef:24:59:6f:c2:f9:17:86:3a:
                    2d:e8:1f:5d:f0:ca:69:3d:91:83:25:72:b2:96:04:
                    75:3c:5a:2d:d9:a1:74:35:f5:e7:7b:73:b3:79:af:
                    ba:16:78:06:36:fe:49:c8:63:3a:4c:fe:d6:99:ff:
                    f4:08:01:aa:27:af:fc:2a:46:8d:d2:8b:7a:3c:f6:
                    ef:23:34:f6:41:b0:9f:94:4a:5f:d8:c9:dc:74:ee:
                    c6:58:9d:ac:e4:fe:22:1a:1e:51:c4:ff:c7:0c:1c:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:E9:0D:5E:B7:D9:BE:D3:15:42:CB:82:03:CA:91:5E:0A:D5:A4
            X509v3 Authority Key Identifier:
                keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:2f:8f:e6:09:c8:63:ea:48:9c:c9:28:a1:79:8a:49:b6:
         86:1a:cf:db:16:89:98:0d:f7:3b:ef:72:46:18:ed:3a:3d:e9:
         9f:56:09:8f:84:8b:96:ed:94:83:94:62:05:66:6b:8b:bf:a1:
         14:18:89:48:ef:ef:cf:b3:e9:d8:5d:b2:b2:30:14:70:60:fa:
         2f:34:5a:04:7b:10:4d:22:52:34:43:8f:24:ef:89:ff:41:e7:
         cd:e5:dd:cd:42:dc:92:93:67:be:b8:fa:37:b3:b2:ab:87:eb:
         84:c2:76:7d:af:8b:35:7b:ae:d1:43:2d:1b:b1:be:04:c8:84:
         61:9e:7c:7b:f2:12:c9:1d:91:ce:4a:e8:e9:8a:05:58:be:3d:
         ae:9a:3c:54:fe:8b:ea:5e:0a:c4:df:5d:dd:ec:8f:e5:a8:ac:
         73:86:c2:3d:b4:6f:df:07:7d:e1:7c:0c:b0:5e:31:6a:d1:69:
         e6:bd:16:b6:1d:af:5c:78:5b:bb:cf:03:21:94:78:24:3f:cb:
         00:6b:8c:15:95:db:82:1c:83:2a:10:c3:0d:3d:b7:13:ad:6c:
         74:03:68:d7:93:70:8b:fb:b4:46:97:88:c3:02:8b:7f:2f:2f:
         f3:7d:d8:dc:a5:0d:17:18:2c:a4:17:06:01:62:cb:98:2a:40:
         8a:2d:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:52 2026 by rpki-client