Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json)
Hash identifier:          sCa4HJha+sYbeFqEJwgxggEifCIJOhCy1zUUpkp2+lM=
Subject key identifier:   71:4E:4A:6A:73:B3:31:78:02:06:E4:37:2F:26:DD:EF:36:C0:BD:96
Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Certificate issuer:       /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
Certificate serial:       6A36485C6C76ED9E71F2D5CFE216CED0246AAEC2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 14:17:39 +0000
Manifest this update:     Thu 23 Jul 2026 14:12:39 +0000
Manifest next update:     Fri 24 Jul 2026 17:45:39 +0000
Files and hashes:         1: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=)
                          2: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=)
                          3: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: B85+TsH/OSLl6OUWchbh+Ut1zX5syDQ7vPe5r+yGiUg=)
                          4: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl
                          rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:36:48:5c:6c:76:ed:9e:71:f2:d5:cf:e2:16:ce:d0:24:6a:ae:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Validity
            Not Before: Jul 23 14:12:39 2026 GMT
            Not After : Jul 24 17:45:39 2026 GMT
        Subject: CN=714E4A6A73B331780206E4372F26DDEF36C0BD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:c5:9b:ca:80:02:7b:e1:dd:ac:d7:c6:1d:
                    31:7c:5a:30:2b:77:ab:51:31:2b:0f:21:c5:50:b8:
                    7e:6f:d3:8d:f4:c0:cb:a6:81:40:93:f3:23:32:cc:
                    63:62:46:ae:e0:b3:a0:92:89:bb:19:81:22:a7:fa:
                    be:68:e0:55:60:fc:b7:83:3e:92:4e:80:6f:d2:05:
                    d6:8c:56:c0:26:da:a0:05:39:8c:0b:04:df:cc:29:
                    b9:d5:9d:88:25:00:bf:9e:59:71:d7:fa:06:96:e6:
                    54:6c:b0:67:ca:f2:39:c7:fe:a6:57:c4:e6:1b:65:
                    b7:6a:42:ec:f5:73:14:8e:68:15:cc:d0:18:f2:d6:
                    a1:57:7f:79:ba:13:f7:05:8d:20:50:a9:fb:2d:f6:
                    e7:4c:40:b5:ec:27:d6:83:df:b4:8d:32:bf:97:04:
                    2a:a8:73:c9:75:5f:e2:8a:c3:45:ed:8e:e3:89:2f:
                    08:9a:e3:ef:c8:5f:a4:dc:06:24:8d:e1:3d:ba:52:
                    46:2d:77:1b:a7:10:6f:a6:38:77:2b:d1:4c:bd:6e:
                    9a:67:6a:fb:53:f7:43:0d:df:ab:40:5e:13:ab:28:
                    f4:68:92:88:84:f9:1e:2c:e5:1e:df:69:52:4d:27:
                    61:6c:16:58:0f:b5:c2:c7:b4:b7:8c:c8:06:66:27:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:4A:6A:73:B3:31:78:02:06:E4:37:2F:26:DD:EF:36:C0:BD:96
            X509v3 Authority Key Identifier:
                keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:38:71:9a:68:2d:81:42:bf:b2:39:ba:ff:f7:dd:16:07:
         8c:22:d7:a8:8b:2a:05:9b:9b:0a:04:bd:09:86:8d:02:0c:6e:
         0f:df:61:de:b6:5a:0a:b4:ea:dc:11:5f:7c:53:b3:96:56:44:
         5e:b7:fe:03:a9:1b:53:e2:05:0b:7f:76:95:ce:16:29:d1:c8:
         a0:e1:0d:0a:48:5a:37:94:40:4c:18:24:76:6d:02:91:79:e5:
         4a:f7:be:7b:6d:e7:1b:00:03:86:4f:0b:16:8b:c1:4a:51:88:
         e0:cf:93:77:47:03:6a:21:27:78:04:97:b3:bb:2a:a6:4f:80:
         93:bf:4c:35:2d:3a:fd:63:8f:b5:1a:23:f5:68:8b:ad:c3:1c:
         75:97:f8:5d:0d:2d:1e:c3:6e:4f:81:3f:c2:6c:5a:a5:cd:07:
         86:a3:88:cb:16:1b:ec:ac:17:54:23:14:66:f1:38:06:45:c4:
         40:e3:6c:60:f8:57:2f:a0:43:5e:4d:f8:94:82:3f:d5:ad:68:
         93:5b:0e:e1:cf:ee:57:4d:83:47:60:1a:06:84:8c:d8:81:b9:
         97:68:c2:38:64:77:92:a5:85:23:82:9e:9d:40:ba:96:6a:48:
         93:a3:d5:00:00:1e:42:12:f8:42:b5:96:e7:71:1f:e7:a7:ad:
         65:b8:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:04 2026 by rpki-client