Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File:                     E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier:          6n/mL8K8n9RZvb/QckUrYzUlSnLeUe698hjyG65mtk8=
Subject key identifier:   ED:07:C4:E4:02:F8:A6:19:0D:B5:7D:CA:5E:A9:A7:D8:E2:CE:99:BE
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer:       /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial:       09B74E82410E71A7D71CAE2EEE9D02DBF972BED0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number:          67
Signing time:             Thu 23 Jul 2026 17:46:21 +0000
Manifest this update:     Thu 23 Jul 2026 17:41:21 +0000
Manifest next update:     Fri 24 Jul 2026 18:52:21 +0000
Files and hashes:         1: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: DFDUczEQ/Fx5elaPy8GlHln6EYoT8i3B/nvP2JfPoWg=)
                          2: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
                          3: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:4e:82:41:0e:71:a7:d7:1c:ae:2e:ee:9d:02:db:f9:72:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
        Validity
            Not Before: Jul 23 17:41:21 2026 GMT
            Not After : Jul 24 18:52:21 2026 GMT
        Subject: CN=ED07C4E402F8A6190DB57DCA5EA9A7D8E2CE99BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:bd:df:bc:36:8e:04:5d:36:5e:0e:57:a0:
                    1c:9d:8a:9e:7a:5d:d5:72:50:d6:90:84:6c:ac:77:
                    ec:cc:ec:e7:10:2b:61:e4:9b:1e:cd:79:7e:7a:02:
                    a7:91:d0:a9:50:91:36:38:c7:37:5a:4c:62:e1:ed:
                    de:e1:15:b8:7e:9b:db:e3:86:43:c3:4c:fd:90:3a:
                    e5:f5:77:ff:c1:31:54:e7:23:12:5a:ab:27:6c:e4:
                    24:ee:d0:e7:a5:e8:d0:3a:7d:82:8b:31:de:27:1b:
                    5f:75:40:a6:32:b3:91:1f:f9:55:90:41:9c:08:ee:
                    35:da:5b:d2:0c:b6:8d:f0:67:89:ab:51:d5:55:b2:
                    9d:88:bd:58:f5:ed:f7:1b:d5:37:b4:4a:d5:ac:c2:
                    63:8f:05:9e:db:3f:e7:4b:75:7c:3d:f7:cf:3b:e8:
                    1c:73:ba:9f:24:76:b2:ec:ec:87:13:cc:1b:4b:0a:
                    d8:65:c9:2e:58:a2:9b:22:30:d6:06:74:fd:0d:d6:
                    f3:6f:ab:25:00:8e:2f:ce:e5:6e:99:a4:ee:9b:50:
                    f0:ea:4e:9f:38:4a:65:03:7f:9d:31:51:e8:73:00:
                    2a:a1:ca:bd:a8:89:fe:e0:ea:67:56:7f:59:77:ed:
                    43:17:5d:c8:59:3e:97:6d:31:78:44:a8:9b:1a:2f:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:07:C4:E4:02:F8:A6:19:0D:B5:7D:CA:5E:A9:A7:D8:E2:CE:99:BE
            X509v3 Authority Key Identifier:
                keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:17:46:ea:0a:75:28:87:ab:1b:f5:0a:fe:90:cb:ac:c5:e7:
         77:fa:14:10:bd:62:d1:e8:e7:6e:0b:17:1f:1a:74:66:dd:f7:
         c5:4c:90:22:27:3e:4f:cf:1c:c5:86:64:b5:ad:c1:9c:24:7e:
         cc:c9:ae:2f:9c:8d:db:f3:6e:e4:2a:33:ff:47:e0:85:12:b2:
         bc:66:c3:93:5b:5e:d1:86:6b:81:55:a1:43:ef:b4:e2:64:0c:
         88:7d:9c:50:99:a6:d0:6f:cd:88:d5:37:96:32:47:c7:00:9e:
         c6:ee:88:de:e0:ce:73:02:35:e9:7d:b4:ee:a1:fb:81:49:db:
         f2:29:a7:c5:32:df:e4:45:ed:f5:d8:f9:a7:1e:82:b9:cb:17:
         5d:c5:7f:4f:e7:01:6c:e1:93:78:20:5a:94:e1:d4:83:88:9d:
         d0:79:df:da:67:88:31:36:2a:3b:63:bc:6e:86:06:fd:ed:e6:
         f7:1f:38:ad:76:9f:4c:99:d0:4f:a3:ea:a1:8b:e6:69:41:cd:
         b0:84:92:5f:b2:9f:0c:c5:ef:8d:50:0e:b3:58:92:a6:6f:f9:
         fa:da:24:9e:95:23:36:d8:31:f6:63:52:ff:0b:f6:a4:07:67:
         db:c8:ab:55:78:14:eb:72:c8:f6:ee:23:a3:fa:5a:0c:93:cd:
         17:a0:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:36 2026 by rpki-client