Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
File:                     F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft (raw, json)
Hash identifier:          u8oK0F8HvWsW8DKK3qvBRVsLUelIhSfD2VBrOXSsEIo=
Subject key identifier:   DC:33:19:2E:61:61:99:FF:BA:52:8F:08:C1:0B:72:05:3F:01:A2:DA
Authority key identifier: F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32
Certificate issuer:       /CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
Certificate serial:       281F7963B96CF8B2D27D25D02E3CA63132BE34EE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 13:57:36 +0000
Manifest this update:     Thu 23 Jul 2026 13:52:36 +0000
Manifest next update:     Fri 24 Jul 2026 15:55:36 +0000
Files and hashes:         1: 3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa (hash: 0p2C5UFLTCbfIwJPIw4v0QPxsj3Q6BFbv279Z9N1VQ8=)
                          2: F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl (hash: GkiaGXSl363L8NXJWekfrfRyv68tma/oL08xPkXqsdA=)
                          3: 3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa (hash: XbjewDs3SN7fvoTCze4EnrDIW/wXRnlQHr/V/+JCXtA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl
                          rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1f:79:63:b9:6c:f8:b2:d2:7d:25:d0:2e:3c:a6:31:32:be:34:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
        Validity
            Not Before: Jul 23 13:52:36 2026 GMT
            Not After : Jul 24 15:55:36 2026 GMT
        Subject: CN=DC33192E616199FFBA528F08C10B72053F01A2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:4b:ef:55:38:ac:d8:c9:34:60:69:ed:80:
                    b3:87:37:3f:7f:e6:6b:34:03:c8:6f:03:0c:62:4c:
                    b8:4f:a9:e8:3c:ba:22:d4:2d:64:ed:da:c1:52:5b:
                    23:5e:3c:0a:0d:e8:11:9f:f9:a4:24:b8:53:af:ef:
                    58:c0:82:7e:33:9d:64:b8:ca:4d:1d:3a:4f:dd:2e:
                    61:73:9e:e4:db:cd:89:b3:56:45:75:99:6e:ce:60:
                    c4:14:9c:36:77:32:3a:8e:79:da:1e:6f:4b:fc:36:
                    07:03:34:32:a3:54:c8:6c:f4:f6:7f:4a:13:f9:d3:
                    96:f8:aa:55:54:ce:38:36:1b:a9:a3:b4:20:ca:c1:
                    3b:80:e5:1b:9a:ab:69:0b:ee:2d:17:4a:5c:f2:95:
                    62:77:88:cc:fe:59:8d:18:03:22:9d:bf:f1:51:03:
                    05:03:4a:a3:4e:c5:9a:8a:88:9b:78:46:15:47:ea:
                    2a:bb:14:c5:ef:0e:8f:bb:4e:cd:4d:55:3a:9f:61:
                    d2:78:01:62:68:ad:cb:e7:18:4d:e2:9b:43:31:75:
                    5e:05:7c:2f:7f:ba:c1:c2:49:13:04:7b:53:24:f6:
                    94:76:0f:fd:6f:6a:9b:ec:c4:73:49:b7:a3:c6:41:
                    c4:a2:57:4a:6d:d8:d8:0a:73:5d:aa:f1:24:32:e2:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:33:19:2E:61:61:99:FF:BA:52:8F:08:C1:0B:72:05:3F:01:A2:DA
            X509v3 Authority Key Identifier:
                keyid:F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:12:37:95:2b:9a:c8:74:38:79:e6:36:4d:7d:7d:60:f2:05:
         15:fe:be:8e:53:ea:05:dd:59:d1:66:e9:28:af:07:25:ed:b1:
         ce:01:73:18:de:d1:23:eb:ff:41:f7:43:78:34:93:39:ad:f9:
         82:22:3e:14:8c:0a:b9:d4:d3:9f:c1:19:4c:98:a5:73:c0:b3:
         6d:1e:90:66:a4:a3:bc:bc:a0:0d:82:03:93:4c:02:a8:c9:17:
         5a:b6:c7:90:87:4c:d3:08:c8:06:a8:63:c3:d0:55:14:da:82:
         d6:dd:2e:56:bf:ac:8d:2a:86:20:4f:36:27:ec:98:49:5d:fa:
         66:a8:8e:f0:c3:56:80:06:b4:a9:51:b2:c3:dd:32:9f:6c:08:
         72:b4:78:88:7e:2a:68:88:94:77:f1:78:e6:2b:3a:02:e5:eb:
         76:bd:8d:0e:ff:3b:d3:90:39:17:87:d2:d1:63:ce:a5:2b:0f:
         ec:11:a2:86:1a:56:7a:77:ba:23:d9:df:d9:93:ca:92:f6:a8:
         73:05:b5:9b:00:a0:66:29:36:e6:f5:2b:6d:7a:53:b0:c5:05:
         4d:22:f9:4b:21:de:84:fa:30:a5:fa:c5:c9:cd:2a:97:84:b4:
         6a:da:c1:0e:67:b7:38:d0:6c:aa:5b:3b:eb:e9:89:d7:ef:eb:
         00:24:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:57 2026 by rpki-client