Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
File:                     5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json)
Hash identifier:          mk6DzKfw9ZiOIcazdwjJcWM4VefExpok13jAGNBySQo=
Subject key identifier:   CE:71:1C:00:E6:10:BE:E6:0D:AF:AA:49:DA:ED:BB:95:B2:35:C7:EB
Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E
Certificate issuer:       /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
Certificate serial:       350473BEB6A839A6D706B57FE710C068CC541D3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
Manifest number:          06
Signing time:             Tue 12 May 2026 11:55:48 +0000
Manifest this update:     Tue 12 May 2026 11:50:48 +0000
Manifest next update:     Wed 13 May 2026 14:43:48 +0000
Files and hashes:         1: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=)
                          2: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=)
                          3: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=)
                          4: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: +tce5v6qLkmzM+YILse7BbHyt098Tepr076HNy6xtY0=)
                          5: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl
                          rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:04:73:be:b6:a8:39:a6:d7:06:b5:7f:e7:10:c0:68:cc:54:1d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
        Validity
            Not Before: May 12 11:50:48 2026 GMT
            Not After : May 13 14:43:48 2026 GMT
        Subject: CN=CE711C00E610BEE60DAFAA49DAEDBB95B235C7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:db:84:d4:18:03:be:6c:21:8b:e4:65:37:
                    1c:81:60:f1:31:65:4d:c1:bd:6e:68:40:15:45:3a:
                    f8:c3:27:32:91:45:98:2d:76:d2:c8:e2:d5:f3:a4:
                    04:6b:4a:f3:57:14:ea:57:66:e6:fa:1e:1d:ed:64:
                    a3:3f:85:ae:99:34:63:cf:4c:f6:c6:5a:b8:7f:04:
                    8b:3e:0b:8a:3d:31:e6:7b:70:1c:78:ab:75:ab:fc:
                    c7:e9:b8:c8:5b:d9:0f:b4:0a:67:27:48:92:00:b7:
                    ea:44:94:a2:be:84:6d:2d:ac:48:b7:21:75:6f:42:
                    b7:e5:7a:11:3a:7f:01:29:ac:e5:4d:cd:84:34:73:
                    43:58:a9:8d:e1:1f:ec:b6:b0:6f:9a:a1:25:d7:b2:
                    c6:6b:1a:8d:37:f7:a0:46:d6:09:f6:75:9d:8c:50:
                    88:32:74:00:af:39:3d:6b:d2:c2:d6:e6:dc:fb:ee:
                    80:b9:0c:29:9d:e4:32:49:19:67:0a:44:7c:58:c0:
                    af:68:26:3b:b6:30:17:ff:d3:49:ac:02:fe:8b:a3:
                    5c:e3:9f:09:b7:f8:c7:08:6c:8c:7d:96:24:ff:ce:
                    68:87:64:66:94:e6:0c:cc:62:13:65:be:08:1b:0e:
                    ec:97:6d:3e:c3:5e:fa:ea:77:97:7f:e4:ef:ca:90:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:71:1C:00:E6:10:BE:E6:0D:AF:AA:49:DA:ED:BB:95:B2:35:C7:EB
            X509v3 Authority Key Identifier:
                keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:59:24:ac:c0:64:9b:18:8d:c4:90:8f:72:d9:8e:72:c5:10:
         6d:5a:16:ef:2d:11:4c:45:cf:2b:91:08:cd:0c:f8:3e:90:34:
         8e:cf:a1:9b:2a:46:d3:c7:0d:b5:9e:3c:96:51:38:d2:a7:7c:
         43:de:63:71:72:c9:bd:69:72:58:ae:62:e0:4c:95:e3:a3:c7:
         ed:81:f9:b8:91:d6:aa:6d:2d:d4:c5:66:0c:ff:1f:75:a2:8d:
         6e:f3:d1:09:ea:ff:17:5f:59:7a:af:69:09:a3:0c:1b:c7:12:
         e4:81:55:e8:35:96:07:b1:db:11:ba:e5:75:5f:63:f9:d6:82:
         c4:da:f5:9d:8a:b1:1f:69:bc:1c:26:7b:0e:bf:22:c5:73:ea:
         48:7b:8a:bc:f8:78:9e:61:28:6f:8d:b5:56:82:61:ab:c5:94:
         27:f5:d4:bf:bd:95:39:bd:2a:43:08:d9:99:7f:58:3b:8f:bf:
         a5:cd:99:83:0d:d0:04:fa:26:9c:8e:95:f8:f9:ec:fc:df:6b:
         3b:15:75:77:b3:1a:e1:ca:a3:6f:12:ef:88:2a:4d:db:ea:3b:
         6a:a5:32:7f:c7:16:9f:b8:b5:18:b6:df:52:22:1e:7b:a6:13:
         7a:7e:6a:74:bc:e1:d3:c5:f5:07:71:0e:ec:26:cc:b2:0c:a2:
         38:54:c3:7b
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUNQRzvraoOabXBrV/5xDAaMxUHTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD
NTg4QkE5RTAeFw0yNjA1MTIxMTUwNDhaFw0yNjA1MTMxNDQzNDhaMDMxMTAvBgNV
BAMTKENFNzExQzAwRTYxMEJFRTYwREFGQUE0OURBRURCQjk1QjIzNUM3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwduE1BgDvmwhi+RlNxyBYPEx
ZU3BvW5oQBVFOvjDJzKRRZgtdtLI4tXzpARrSvNXFOpXZub6Hh3tZKM/ha6ZNGPP
TPbGWrh/BIs+C4o9MeZ7cBx4q3Wr/MfpuMhb2Q+0CmcnSJIAt+pElKK+hG0trEi3
IXVvQrflehE6fwEprOVNzYQ0c0NYqY3hH+y2sG+aoSXXssZrGo0396BG1gn2dZ2M
UIgydACvOT1r0sLW5tz77oC5DCmd5DJJGWcKRHxYwK9oJju2MBf/00msAv6Lo1zj
nwm3+McIbIx9liT/zmiHZGaU5gzMYhNlvggbDuyXbT7DXvrqd5d/5O/KkGm1AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUznEcAOYQvuYNr6pJ2u27lbI1x+swHwYDVR0j
BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU
LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz
MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC
MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANBZJKzAZJsY
jcSQj3LZjnLFEG1aFu8tEUxFzyuRCM0M+D6QNI7PoZsqRtPHDbWePJZRONKnfEPe
Y3Fyyb1pcliuYuBMleOjx+2B+biR1qptLdTFZgz/H3WijW7z0Qnq/xdfWXqvaQmj
DBvHEuSBVeg1lgex2xG65XVfY/nWgsTa9Z2KsR9pvBwmew6/IsVz6kh7irz4eJ5h
KG+NtVaCYavFlCf11L+9lTm9KkMI2Zl/WDuPv6XNmYMN0AT6JpyOlfj57PzfazsV
dXezGuHKo28S74gqTdvqO2qlMn/HFp+4tRi231IiHnumE3p+anS84dPF9QdxDuwm
zLIMojhUw3s=
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:44 2026 by rpki-client