Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
File:                     1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft (raw, json)
Hash identifier:          2MLZOprlGs8vNm1sNzANkeVFIHB9U4wbiNzqB4YDMOw=
Subject key identifier:   B8:31:F5:41:02:33:1B:C3:D5:DD:E0:E6:08:EC:92:8C:E3:86:D5:89
Authority key identifier: 1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Certificate issuer:       /CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Certificate serial:       0F49293FEB91A43780CBC3D3F74593E7CF2C81CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 17:26:16 +0000
Manifest this update:     Thu 23 Jul 2026 17:21:16 +0000
Manifest next update:     Fri 24 Jul 2026 21:22:16 +0000
Files and hashes:         1: 3136302e31392e39312e302f32342d3234203d3e20313532363130.roa (hash: JChDx8EuWzqL1gPeTCGF4ozQOt1mwniQnlS9i/3N+jo=)
                          2: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl (hash: NKg4gHlVpB0qWevqDz5nnaZdTwXTUiAmaa54anRyync=)
                          3: 3136302e31392e39302e302f32342d3234203d3e20313532363130.roa (hash: gltrchavwBKMRLSis9WfQ6ZI8We0DSXE9wkeAfUu3NE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
                          rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:49:29:3f:eb:91:a4:37:80:cb:c3:d3:f7:45:93:e7:cf:2c:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
        Validity
            Not Before: Jul 23 17:21:16 2026 GMT
            Not After : Jul 24 21:22:16 2026 GMT
        Subject: CN=B831F54102331BC3D5DDE0E608EC928CE386D589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ac:d5:b5:0c:1b:01:d2:bb:3a:48:a1:fa:ba:
                    57:d6:74:d4:82:69:e7:21:17:0a:87:18:31:60:a5:
                    f3:55:f7:13:f8:d4:55:4e:6c:8c:e0:09:b0:28:e3:
                    7f:a2:4f:af:ce:2d:19:be:db:08:13:be:a7:e0:50:
                    83:59:26:a9:1d:14:c9:8b:bd:a5:8b:de:bf:06:ed:
                    2a:c3:85:91:43:92:14:a4:bd:2e:5b:7e:5d:90:fa:
                    93:ef:17:6f:f7:e3:b8:5e:f8:33:de:42:df:99:28:
                    cc:69:a3:e2:cb:83:5a:23:1b:2b:cc:d1:c5:dd:6b:
                    9f:35:15:df:7f:ac:02:43:2d:23:4f:53:9c:8d:c2:
                    96:9a:e0:48:97:5d:aa:20:ad:d8:00:db:24:a6:a2:
                    61:b1:ce:58:53:1d:10:95:a7:2b:a7:bb:c6:1e:2f:
                    68:e8:eb:c7:51:5d:36:b0:f2:02:66:3b:b2:57:b0:
                    b0:bf:30:01:94:14:0b:5a:57:19:77:ce:f6:3a:8d:
                    71:86:34:db:b6:c7:65:36:23:a1:2b:f0:82:36:87:
                    2f:ce:23:bf:fb:c7:12:53:a5:b5:8c:e7:b0:b3:0b:
                    fd:4b:42:ed:8b:48:23:33:2e:90:5a:30:26:29:d5:
                    a8:a8:ae:79:6b:b0:ac:2f:3b:72:2e:2f:6c:50:02:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:F5:41:02:33:1B:C3:D5:DD:E0:E6:08:EC:92:8C:E3:86:D5:89
            X509v3 Authority Key Identifier:
                keyid:1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:b6:e4:be:6f:45:c5:bd:21:e1:8b:d9:f4:69:40:15:d0:
         bc:73:b3:fa:df:e2:a7:47:0a:d0:6e:45:e3:d3:e7:4f:bf:8f:
         dd:9a:2c:c8:0d:cf:e8:86:42:e7:28:ef:01:bb:40:d7:02:73:
         fb:5d:b6:93:75:14:2f:44:c6:a9:20:ad:0f:a5:0c:76:f9:f4:
         d8:9e:53:72:4e:88:e1:2c:a7:ee:b9:32:2a:1c:44:d4:b9:dc:
         cc:51:5c:8e:af:e0:04:a1:d4:73:24:6d:4a:ad:29:e5:43:e8:
         04:8d:70:95:a3:4d:24:c5:b7:be:5d:cf:9d:fe:df:10:d6:44:
         4b:6b:77:bf:3b:59:ee:45:54:82:e4:d3:73:23:81:0c:33:1c:
         1a:80:4a:29:48:32:de:f3:28:0c:3c:5f:30:07:d6:8a:8a:e8:
         f9:0c:69:ea:8e:6b:86:99:94:28:18:4c:16:ee:32:c8:b7:d7:
         cc:be:82:ad:8d:e6:e4:ab:c6:f2:89:05:f2:dc:98:51:98:54:
         f8:21:98:e1:fb:95:51:92:93:30:ce:4e:a0:94:a4:7c:55:84:
         40:e4:b7:73:c6:48:90:8b:16:4c:10:d0:32:fd:d3:20:09:cc:
         38:53:36:df:83:ce:ca:cd:fb:3a:30:91:85:98:74:03:0c:92:
         a4:47:4d:7a
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUD0kpP+uRpDeAy8PT90WT588sgcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2QjIxRTk5MEJBOUUyN0U2NDgwQTRERjUwNzJGODAx
RUE3QjUxQzAeFw0yNjA3MjMxNzIxMTZaFw0yNjA3MjQyMTIyMTZaMDMxMTAvBgNV
BAMTKEI4MzFGNTQxMDIzMzFCQzNENURERTBFNjA4RUM5MjhDRTM4NkQ1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3rNW1DBsB0rs6SKH6ulfWdNSC
aechFwqHGDFgpfNV9xP41FVObIzgCbAo43+iT6/OLRm+2wgTvqfgUINZJqkdFMmL
vaWL3r8G7SrDhZFDkhSkvS5bfl2Q+pPvF2/347he+DPeQt+ZKMxpo+LLg1ojGyvM
0cXda581Fd9/rAJDLSNPU5yNwpaa4EiXXaogrdgA2ySmomGxzlhTHRCVpyunu8Ye
L2jo68dRXTaw8gJmO7JXsLC/MAGUFAtaVxl3zvY6jXGGNNu2x2U2I6Er8II2hy/O
I7/7xxJTpbWM57CzC/1LQu2LSCMzLpBaMCYp1aiornlrsKwvO3IuL2xQAlivAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUuDH1QQIzG8PV3eDmCOySjOOG1YkwHwYDVR0j
BBgwFoAUHGsh6ZC6nifmSApN9QcvgB6ntRwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv
MS8xQzZCMjFFOTkwQkE5RTI3RTY0ODBBNERGNTA3MkY4MDFFQTdCNTFDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzFDNkIyMUU5OTBCQTlFMjdFNjQ4MEE0REY1MDcy
RjgwMUVBN0I1MUMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8xLzFDNkIyMUU5OTBCQTlF
MjdFNjQ4MEE0REY1MDcyRjgwMUVBN0I1MUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBerLbkvm9Fxb0h
4YvZ9GlAFdC8c7P63+KnRwrQbkXj0+dPv4/dmizIDc/ohkLnKO8Bu0DXAnP7XbaT
dRQvRMapIK0PpQx2+fTYnlNyTojhLKfuuTIqHETUudzMUVyOr+AEodRzJG1KrSnl
Q+gEjXCVo00kxbe+Xc+d/t8Q1kRLa3e/O1nuRVSC5NNzI4EMMxwagEopSDLe8ygM
PF8wB9aKiuj5DGnqjmuGmZQoGEwW7jLIt9fMvoKtjebkq8byiQXy3JhRmFT4IZjh
+5VRkpMwzk6glKR8VYRA5LdzxkiQixZMENAy/dMgCcw4Uzbfg87Kzfs6MJGFmHQD
DJKkR016
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:12 2026 by rpki-client