Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          +3z2BE8P34gSRmaaLx1UwGVwE00n15nWR7bxadG7mJI=
Subject key identifier:   6D:7A:D2:CB:5D:57:8E:5A:44:84:E2:42:A6:A2:43:8C:00:2F:BE:5A
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       1A2CEB190512E2B75742D85FB9B471F45D03E778
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          BE
Signing time:             Tue 29 Sep 2026 10:02:27 +0000
Manifest this update:     Tue 29 Sep 2026 09:57:27 +0000
Manifest next update:     Wed 30 Sep 2026 13:14:27 +0000
Files and hashes:         1: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: nJ3foo9+Nj2mrDuRoTiWy4rwk/dG2qf5gxofYNbZl9c=)
                          2: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 09:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2c:eb:19:05:12:e2:b7:57:42:d8:5f:b9:b4:71:f4:5d:03:e7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: Sep 29 09:57:27 2026 GMT
            Not After : Sep 30 13:14:27 2026 GMT
        Subject: CN=6D7AD2CB5D578E5A4484E242A6A2438C002FBE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:99:c4:22:7d:3c:ed:cc:63:fe:c1:91:c5:
                    db:32:e8:63:b1:7e:21:f1:b7:78:47:08:67:3c:e9:
                    5a:5e:e8:56:77:7e:12:84:0f:d8:d4:ca:73:d8:55:
                    00:73:e1:80:90:8f:a1:da:68:63:11:09:8d:46:2c:
                    69:9b:ac:3b:97:a1:39:73:89:62:9d:f1:57:19:4c:
                    4a:25:6d:d7:25:7b:bd:eb:3f:c8:59:17:4e:42:66:
                    38:18:21:45:3a:da:a0:5c:f8:df:0b:45:04:35:1a:
                    78:c3:80:ed:fc:ec:c2:1d:87:a2:46:65:d3:62:ba:
                    14:c2:76:a1:60:8a:8f:61:2d:6e:86:c9:f4:ea:ed:
                    3e:c2:d1:ad:5d:8e:1c:13:84:6f:0d:f9:7d:56:0f:
                    84:4b:b8:8a:7d:53:14:70:b8:6e:76:fa:1d:88:bc:
                    bd:1c:95:2f:1a:0e:6a:9a:dc:c8:90:b7:23:53:d5:
                    45:cf:96:3e:42:f2:33:e8:7a:3d:3f:ed:a7:9b:e3:
                    64:5f:b3:f5:a5:ff:6a:3c:30:6a:e7:07:be:c7:7e:
                    e5:99:20:25:c1:d2:e1:e9:11:07:f4:96:00:c2:91:
                    81:83:d0:b6:eb:5f:4a:8a:9e:ad:2f:e3:e6:32:0f:
                    8d:f9:46:4a:df:fd:3c:dc:30:9d:68:d8:b4:95:c2:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:D2:CB:5D:57:8E:5A:44:84:E2:42:A6:A2:43:8C:00:2F:BE:5A
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:5e:5b:1b:04:93:4a:20:42:3d:bf:69:b7:ba:37:a0:4e:
         df:c3:fc:a2:34:6a:f9:b2:3e:de:e5:db:5d:3c:e3:8c:27:ec:
         62:b6:f0:65:2b:f7:87:42:62:96:02:1a:0a:1f:73:75:55:00:
         4a:85:69:b1:0c:52:41:75:bd:97:e6:7d:0e:0a:1e:d2:58:e0:
         d3:32:f7:71:d7:c5:79:8e:5b:5a:d6:57:3e:48:d2:25:7b:5a:
         62:dd:56:db:31:a5:7e:4e:c8:d6:65:19:83:cb:ea:4e:01:3d:
         dc:83:e3:b6:38:e6:f9:5f:11:75:c2:67:e2:73:77:4f:ee:71:
         34:da:4c:74:44:ec:1a:a4:62:19:35:e5:8c:e3:4b:82:ed:ef:
         d6:06:e8:4d:a5:6e:95:f8:e7:cd:fd:3f:1c:b1:9d:f5:1f:78:
         f3:f5:d9:cf:05:36:1f:b3:71:65:26:4a:3a:04:2b:ed:a3:0e:
         ba:90:01:78:6a:5a:94:4d:d4:74:b3:a0:fb:54:87:10:3b:55:
         87:69:b5:57:10:35:be:fd:9e:14:9f:19:98:47:43:ff:11:b1:
         ff:7b:f4:a2:96:c1:bc:6b:3c:0b:b4:e8:a2:e1:02:ca:9a:78:
         c0:d1:1e:c5:08:cd:eb:e6:b6:2a:14:a3:4d:87:7e:66:c0:28:
         80:c2:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:43:46 2026 by rpki-client