Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          NiGExWqc2UQRWCP+LKGZW/GdXbxtZA7YuOaREyijS+Y=
Subject key identifier:   DC:E3:D5:B5:38:FF:01:B2:2A:2E:20:A8:1B:D4:1B:78:54:F1:69:34
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       76E9DFBAAD53723311996E1A46E94F836813EA9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 23:31:58 +0000
Manifest this update:     Thu 23 Jul 2026 23:26:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:36:58 +0000
Files and hashes:         1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
                          2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: aNVoCdi1IkNjnEvLe1Nfb958UefltoPDak0RMDluO04=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e9:df:ba:ad:53:72:33:11:99:6e:1a:46:e9:4f:83:68:13:ea:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: Jul 23 23:26:58 2026 GMT
            Not After : Jul 25 00:36:58 2026 GMT
        Subject: CN=DCE3D5B538FF01B22A2E20A81BD41B7854F16934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:d4:21:c7:1a:c2:da:dd:17:c8:a3:86:ee:
                    5f:e2:48:60:e3:8b:72:06:06:82:9b:89:94:b6:dd:
                    c4:b3:49:19:8c:60:18:a9:77:9f:ee:16:38:86:0f:
                    52:6d:bc:a3:14:52:7a:90:f0:00:d5:f1:3a:76:f2:
                    e7:ec:e0:a4:9e:e5:eb:00:63:95:ce:bc:5e:d0:86:
                    ad:1d:1c:09:85:81:18:fb:b4:06:35:af:f5:8c:d6:
                    be:31:16:bc:d2:9a:10:5b:f6:9c:ed:8d:46:ae:98:
                    ed:12:e4:ca:d5:3d:47:8c:7a:7f:9f:6e:a8:89:32:
                    9e:d0:af:3d:00:24:2c:02:be:5e:00:e3:1a:87:95:
                    0d:a5:df:4d:13:9f:b6:c9:7d:b5:2d:3c:d8:29:63:
                    80:b3:d6:91:8c:68:f3:3e:9e:03:0a:5a:2b:46:f0:
                    75:29:79:d2:7b:ae:a6:0b:9a:1c:3b:e1:e2:f6:06:
                    7c:35:f9:a4:e3:e2:93:98:3a:c1:ed:cb:50:bd:57:
                    0a:c4:3f:23:9a:06:df:3e:a2:d3:8e:81:fb:24:05:
                    42:b3:bc:df:1d:74:06:fb:42:69:4e:01:ae:2d:89:
                    46:17:cf:bf:8a:da:e6:fb:8f:ad:e1:99:72:a2:c7:
                    a9:c5:da:4b:f6:74:52:82:9f:00:ec:77:1f:c6:c9:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:D5:B5:38:FF:01:B2:2A:2E:20:A8:1B:D4:1B:78:54:F1:69:34
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:43:df:ca:28:24:fd:ba:ec:75:e6:c2:f2:2f:36:94:ea:
         8a:e9:16:cb:e8:f3:ac:f7:66:73:24:9b:b6:e6:5a:73:77:07:
         ee:dd:d1:ef:5d:5f:c4:9f:d9:57:4b:66:0c:7d:58:c8:54:d7:
         15:c1:5d:8d:64:b7:e2:19:a4:12:6b:50:e6:fd:bb:34:f7:15:
         33:42:b0:52:da:de:67:d3:39:74:eb:43:c6:7d:69:2e:cb:a5:
         3b:dd:6c:60:f5:0d:62:f8:fa:94:f8:eb:c6:0d:00:24:6c:38:
         6d:be:80:31:7e:17:30:4e:7f:f1:56:34:e5:aa:c3:11:36:13:
         06:ac:12:95:20:21:ce:40:7b:14:98:43:ba:6b:48:b5:86:e2:
         f2:5b:32:ba:df:ed:f0:ac:0f:f9:3c:51:a9:dd:71:70:1f:01:
         b7:28:9e:3c:a5:08:de:ec:d9:50:1b:30:d5:3b:64:86:31:ef:
         cd:99:e3:65:b3:e7:90:f7:40:fe:04:dc:94:ed:0d:b6:8f:bc:
         72:64:41:07:9e:f7:2a:d8:7d:26:a7:c6:af:21:e2:a6:fb:12:
         a1:91:b3:0f:b4:9a:43:df:eb:c4:1d:7f:fe:52:b4:98:2c:d0:
         06:c1:ca:41:5f:96:e0:d8:3e:73:21:70:4d:00:86:bb:dc:48:
         32:90:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:07 2026 by rpki-client