Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json)
Hash identifier:          iFERBrlus9V3FFpZV8yKgIzNhk/7QFn19D3cjgcqUUI=
Subject key identifier:   EA:14:6A:F8:03:F6:E5:54:FC:8E:F4:D8:B6:5F:A2:E7:FC:1F:3F:72
Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Certificate issuer:       /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
Certificate serial:       55DCB969D2F8A20652AEA0D9CFEC9CAD56B78101
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
Manifest number:          FD
Signing time:             Sun 15 Nov 2026 04:04:45 +0000
Manifest this update:     Sun 15 Nov 2026 03:59:45 +0000
Manifest next update:     Mon 16 Nov 2026 05:36:45 +0000
Files and hashes:         1: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: Id93UvgYNaYzyja7huWSZnVjzb5+K8s2Drc48LNKs1U=)
                          2: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=)
                          3: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=)
                          4: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl
                          rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:b9:69:d2:f8:a2:06:52:ae:a0:d9:cf:ec:9c:ad:56:b7:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Validity
            Not Before: Nov 15 03:59:45 2026 GMT
            Not After : Nov 16 05:36:45 2026 GMT
        Subject: CN=EA146AF803F6E554FC8EF4D8B65FA2E7FC1F3F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:6f:24:15:d9:9e:44:9f:7e:06:0a:2d:08:
                    1e:a3:5c:7c:28:78:b6:b1:af:f7:53:f9:31:ea:79:
                    2d:75:8d:bb:17:8f:9f:2e:5c:ed:1e:2d:76:5b:0a:
                    b4:74:74:26:6c:d2:da:cc:27:6f:20:33:4e:65:ec:
                    46:51:e8:8d:c7:e5:97:6f:cd:3e:0d:ff:36:8c:91:
                    72:c1:77:20:81:f2:90:e1:d6:8b:65:ec:10:db:53:
                    87:b1:42:da:00:02:29:ba:fc:67:5c:4a:d5:e8:57:
                    f9:c4:ff:28:ec:5b:ad:12:5c:3a:e1:08:9b:09:ca:
                    d5:be:ca:14:a0:59:37:47:f7:5b:99:80:78:77:f8:
                    ee:43:59:a5:f0:74:2c:8e:aa:4a:f4:33:cd:61:0b:
                    6f:13:8f:e0:18:b7:cc:e1:c2:a5:fe:ef:8a:ea:32:
                    22:65:54:70:18:d6:4a:48:e3:e9:48:10:0f:14:40:
                    c1:b1:20:58:38:97:1f:e2:5b:aa:8b:b7:12:2c:ed:
                    88:8c:50:85:e3:ab:fd:78:b0:67:27:3e:3f:a2:f4:
                    c5:f0:c7:b6:14:4b:f0:c8:1f:0f:d2:43:61:9e:4f:
                    21:4a:61:81:8a:9c:37:bf:b5:0e:ea:c1:7a:c4:b9:
                    63:82:67:36:1e:1a:25:f5:ff:89:2d:7d:0b:4d:40:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:6A:F8:03:F6:E5:54:FC:8E:F4:D8:B6:5F:A2:E7:FC:1F:3F:72
            X509v3 Authority Key Identifier:
                keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:db:dd:ba:4f:c7:5e:b3:1f:0f:ef:9d:72:08:7a:de:44:e3:
         61:2c:99:0e:63:ba:41:3d:b3:04:9a:68:42:64:07:77:f4:82:
         45:9b:23:0d:3e:00:8b:a3:83:68:c8:3e:c1:db:2b:50:c8:dd:
         05:ac:17:7c:cd:b4:a7:cd:ad:58:f9:e8:d4:da:51:e0:e4:6c:
         22:5e:46:12:f2:24:97:cb:a1:a9:48:d9:91:52:9e:4b:5b:9d:
         60:64:57:0b:41:5d:21:eb:77:44:0f:2d:b2:a7:05:7f:cc:f2:
         8e:94:ae:d9:47:df:c6:0c:47:6a:c5:a9:b7:ae:7a:c0:b3:23:
         fd:31:71:7d:f5:e4:88:4e:fe:6f:e2:99:8d:84:d9:d9:b5:dc:
         12:b9:39:20:39:34:ea:1b:88:b1:ab:e7:79:af:59:1b:44:94:
         70:22:8b:78:16:00:6c:22:aa:de:69:a3:67:b6:4e:f1:3a:47:
         0d:25:eb:8f:aa:fe:7a:ca:1f:2c:f3:d5:0e:a2:3d:0e:fc:80:
         d8:52:a3:b9:a4:52:c4:78:ab:68:53:70:a0:b1:a4:c7:f6:32:
         c8:76:52:9a:30:78:fa:ae:b0:e1:00:0b:f7:7c:c7:3f:f3:86:
         39:fe:56:8f:22:15:65:0a:a5:5e:cd:a3:26:d9:22:3e:e5:19:
         c9:36:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:52:26 2026 by rpki-client