Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
File:                     2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json)
Hash identifier:          VAlQa91LUtxZengORrX7zzO9rsv6dNaqtJd5rqO4VF0=
Subject key identifier:   50:F7:BB:63:B3:52:AA:18:99:C9:9E:FB:4F:04:1E:B1:12:FF:C6:F6
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Certificate issuer:       /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial:       73495CB16A453F210770E385C1D1DE1DBB4403FA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 05:47:41 +0000
Manifest this update:     Thu 24 Sep 2026 05:42:41 +0000
Manifest next update:     Fri 25 Sep 2026 07:24:41 +0000
Files and hashes:         1: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=)
                          2: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=)
                          3: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: FKZYgDIjbpWSJRwH8uR/MTVWrVhWO3GP2wmi7UIYEt4=)
                          4: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=)
                          5: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
                          rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 07:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:49:5c:b1:6a:45:3f:21:07:70:e3:85:c1:d1:de:1d:bb:44:03:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
        Validity
            Not Before: Sep 24 05:42:41 2026 GMT
            Not After : Sep 25 07:24:41 2026 GMT
        Subject: CN=50F7BB63B352AA1899C99EFB4F041EB112FFC6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:20:92:1b:53:9f:15:0d:0d:3d:5d:78:73:
                    8a:78:f5:d7:9d:49:dd:3f:e9:d1:59:17:00:47:49:
                    97:5a:1f:ed:2e:30:f0:6e:da:94:70:a3:0d:90:76:
                    d8:9e:fe:2c:9b:c2:bb:33:ae:d1:41:68:8b:9c:33:
                    c6:6b:87:4e:cd:29:8d:41:e5:f6:a9:5d:8c:9d:85:
                    76:94:3e:b9:8f:05:ce:06:cd:7f:ff:e0:3d:e2:89:
                    27:a3:a7:22:34:4f:e0:98:66:9d:54:f4:e7:27:b3:
                    13:6c:30:59:93:2f:4a:9b:05:f9:8c:66:eb:45:95:
                    35:8f:82:68:31:1b:d9:09:f0:4f:b9:26:46:3c:6b:
                    7d:31:47:70:5e:a6:76:56:f1:f6:7e:08:00:bc:7b:
                    5f:a8:49:3b:06:99:62:00:56:ce:73:61:9b:1f:6e:
                    81:39:29:1e:c0:35:23:fc:f9:bf:3b:bf:19:8b:45:
                    6e:c2:98:fa:86:dd:a5:a0:2f:a9:0a:e2:73:10:f5:
                    1d:10:e3:a7:41:90:40:f0:9e:c7:52:d5:a1:3d:51:
                    99:88:13:f2:94:49:40:97:35:b7:66:5f:58:fa:38:
                    a0:c2:4e:51:c2:f1:ad:18:13:18:61:3a:66:2f:f9:
                    fb:88:d2:2c:f2:6a:2f:85:0d:8f:44:9b:da:6f:6d:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F7:BB:63:B3:52:AA:18:99:C9:9E:FB:4F:04:1E:B1:12:FF:C6:F6
            X509v3 Authority Key Identifier:
                keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:70:e6:97:3e:cd:83:4b:54:6c:b2:f4:e9:05:3b:0e:d3:06:
         8c:4c:a1:3b:ca:4f:84:52:db:1e:d0:aa:4d:a0:86:f7:4f:b6:
         84:20:20:1e:3a:0c:37:d1:47:51:cd:c5:a7:d1:b2:67:0b:28:
         42:9a:b5:a8:77:06:dc:2a:4c:5b:9f:c8:14:8f:7c:a1:4c:b5:
         f1:45:84:c8:9c:3b:3a:a8:3e:81:7f:b8:a2:b0:69:8b:96:e9:
         38:cc:0d:1d:4b:89:67:79:40:18:b1:43:c7:d4:69:dd:13:52:
         5a:ad:a3:7f:d3:95:82:8f:ae:6b:6c:c0:81:75:e5:f0:42:f6:
         ec:b6:01:11:fe:cf:2c:86:39:cd:b4:ee:75:05:a4:1d:2d:01:
         b0:6a:64:5f:98:c4:84:57:c7:bb:31:b6:37:48:2c:d8:d4:91:
         af:fe:a8:d9:ee:f9:6b:27:4f:a8:93:88:6b:99:46:58:b9:64:
         c8:21:44:fb:7a:83:87:52:b8:24:7e:2e:0a:b7:d6:4d:e9:38:
         d4:f5:c5:57:3d:8c:5f:ec:66:78:77:c4:21:dc:e4:26:b9:e7:
         5d:c1:10:12:89:9c:4d:92:0a:6b:7c:f7:ca:c1:c5:b7:c9:6d:
         37:ee:18:f0:13:25:fb:45:20:70:79:60:39:ae:be:72:cf:21:
         4f:62:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:01:27 2026 by rpki-client