Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File:                     C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier:          Yi9uRznVIflAqTvR/K+q1E4736+JY9R+6m1x3I/eJ+o=
Subject key identifier:   7C:60:40:9C:1B:F9:82:A6:66:2A:BF:18:8D:4E:BD:46:50:E1:15:D6
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer:       /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial:       071A213D7914E213AA06663E754F11D5165528C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 14:27:40 +0000
Manifest this update:     Thu 23 Jul 2026 14:22:40 +0000
Manifest next update:     Fri 24 Jul 2026 14:30:40 +0000
Files and hashes:         1: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
                          2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: 6vPkn8Gf0Efs2aW351haZN1/l7m1mMFC79QYA+5iCio=)
                          3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
                          rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1a:21:3d:79:14:e2:13:aa:06:66:3e:75:4f:11:d5:16:55:28:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
        Validity
            Not Before: Jul 23 14:22:40 2026 GMT
            Not After : Jul 24 14:30:40 2026 GMT
        Subject: CN=7C60409C1BF982A6662ABF188D4EBD4650E115D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:28:5c:16:f7:fd:2c:ad:ff:52:99:d8:0b:
                    ab:5b:f5:0e:ed:e5:5e:4d:b6:a4:d7:0a:b7:70:8d:
                    43:37:39:d7:49:37:08:92:b4:b9:94:bf:55:3b:24:
                    b5:63:25:05:ef:fb:b7:62:20:14:03:ef:4a:c9:ed:
                    7e:8e:c9:57:9c:6f:76:d8:7b:11:a1:c3:b1:cb:ff:
                    c6:b2:8b:b3:b2:80:15:2a:04:6b:49:a6:4d:8a:72:
                    23:ee:32:ee:55:77:1c:e8:9c:c0:4c:86:56:98:d8:
                    ba:e9:cb:56:20:9a:66:72:45:43:bb:6a:88:54:d8:
                    23:ba:cd:40:46:ac:1b:98:68:f4:f6:ab:81:01:b9:
                    bc:25:79:ab:43:73:60:ec:85:fa:4a:b0:88:96:d9:
                    ea:57:ba:6b:8c:5b:6e:2c:a9:73:47:f5:d6:f4:f9:
                    60:03:25:04:db:bc:a5:53:ea:5f:50:1b:ca:ca:c9:
                    16:5d:cb:f6:d6:ad:4d:30:ce:3e:1b:1d:2e:52:c2:
                    15:ee:7c:5c:80:d2:62:b9:ef:11:ee:f6:5d:45:0d:
                    60:22:ef:b3:30:22:6d:4b:3d:43:cc:60:d8:c1:b5:
                    a8:e0:c0:f6:bc:e8:49:30:67:46:3d:25:b2:49:87:
                    f6:81:6e:e7:c5:e0:8a:d4:5d:85:ca:e3:22:f2:68:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:40:9C:1B:F9:82:A6:66:2A:BF:18:8D:4E:BD:46:50:E1:15:D6
            X509v3 Authority Key Identifier:
                keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:ca:45:a3:da:8a:5f:2c:97:5b:34:1b:c1:75:00:54:ba:
         bd:e4:48:1f:32:3c:f6:ea:f3:de:22:63:b2:21:3b:73:cb:f2:
         fa:dd:38:54:92:6a:1d:34:ea:63:ea:46:62:0a:74:0e:24:06:
         67:71:78:5d:e2:dd:3c:ff:a0:e4:5e:69:17:57:98:4e:0b:59:
         a0:e8:2b:5b:56:8d:ac:5b:59:cf:58:5d:70:8d:81:d0:2f:11:
         be:e2:87:87:c3:92:04:ae:12:43:97:9f:c6:67:b2:a3:78:58:
         f4:36:d4:97:45:e4:9b:8a:24:ee:83:fa:a0:f0:08:19:ab:31:
         49:fe:f5:ce:60:21:f2:5d:9e:0c:98:53:37:35:e1:e9:0e:10:
         0e:4e:af:41:f2:03:30:dd:c7:7d:8c:c2:aa:88:5d:7f:00:03:
         73:a2:56:96:21:49:a3:c6:d4:d4:65:13:5d:e4:62:41:98:fa:
         fb:78:37:dc:f7:9e:b4:90:f7:13:1d:44:e5:8e:45:43:7b:98:
         46:d1:c7:4f:d5:1b:40:e6:76:c2:38:23:14:c8:cd:17:40:af:
         31:d2:28:3b:d6:c3:d3:a5:72:a6:b8:c1:e4:4b:3a:2c:a3:1d:
         1f:86:7f:ad:8b:35:56:d5:e8:75:98:bd:b5:73:6d:be:5e:de:
         87:f7:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:06 2026 by rpki-client