Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File:                     DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier:          V/HuLWhk3g8fUObX/vP5aZoutmt7ZRBSzfpTSs9426E=
Subject key identifier:   CD:17:2A:82:F6:3F:9A:E2:9F:A6:B4:C3:52:C0:9D:9A:27:12:30:E8
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       52D1157D4F33360AAB64FBB2799CA5C997A9F8EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number:          011B
Signing time:             Sat 14 Nov 2026 06:50:40 +0000
Manifest this update:     Sat 14 Nov 2026 06:45:40 +0000
Manifest next update:     Sun 15 Nov 2026 08:30:40 +0000
Files and hashes:         1: 3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa (hash: YnpfP1IY3Vl8PX3NftJuZv3w6OU/wLlp+t4Hb1Ri/Ek=)
                          2: 3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa (hash: DlmTrH0HWP82INqSmtsVtIWlfyhVreq2AQXQztnDoMc=)
                          3: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
                          4: 3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa (hash: JI4So8ZhAPE0PToBNtuSCn4oQjqoqDXKjENSD5r0Aa8=)
                          5: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
                          6: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
                          7: 3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa (hash: 3+dW9wI0EjgqQpXg6HhrskIvYJ2q/OO48C7Pc+fjGww=)
                          8: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
                          9: 3138372e37392e3230302e302f32342d3234203d3e203137393939.roa (hash: Ms8KWMiqHBUeweg6G85Jzg70gg1CWi1Nsi+XQu4djsw=)
                          10: 3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa (hash: KA0OUMP7ljY4AzOV5ZHcM5DuWTOfHvm6pZOogffe2ro=)
                          11: 3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa (hash: NOssyf0cVbehU0NIrpbuxzGDevbFBHHPuCiEoYJfVaI=)
                          12: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
                          13: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
                          14: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: S07Vqtg8jWh6RNZAc7ohS6hQ3pAjWjz0lrbUk+Nml1Y=)
                          15: 3138372e37392e3234382e302f32342d3234203d3e20313331363738.roa (hash: GPyZaSlRW0uZ9rINXF8kV4fuvB+9dJcD8GVRMaJQrtg=)
                          16: 3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (hash: /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=)
                          17: 3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (hash: AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=)
                          18: 3138372e37392e3139342e302f32332d3234203d3e20323037353530.roa (hash: CFYijgrVe9thQn2UPKNNnCd1WKmnT7yKY7hnrYCMKzw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 08:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d1:15:7d:4f:33:36:0a:ab:64:fb:b2:79:9c:a5:c9:97:a9:f8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Nov 14 06:45:40 2026 GMT
            Not After : Nov 15 08:30:40 2026 GMT
        Subject: CN=CD172A82F63F9AE29FA6B4C352C09D9A271230E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:23:ba:d0:4e:e4:85:4b:55:0f:2c:6a:d9:
                    cf:99:a9:88:07:14:cf:b0:56:e9:a0:b1:aa:fa:8e:
                    36:cb:07:95:3d:6c:38:25:bd:33:c4:d5:cf:8a:59:
                    f5:a8:d9:ad:8b:be:03:be:04:c0:1e:89:f2:2e:91:
                    bf:20:14:f7:26:c2:81:43:f8:8d:63:a9:3d:1e:32:
                    0f:bf:dc:2c:3d:d0:9f:d9:b6:4b:0a:13:99:3d:82:
                    6c:8d:51:68:eb:6b:f9:8b:42:e5:4a:87:02:54:f1:
                    0a:4d:8e:3c:2f:f1:2e:0f:bf:ac:d3:cb:db:87:58:
                    15:7c:b1:d3:83:77:41:13:a2:23:ef:bb:0c:ee:ac:
                    33:ec:85:86:67:9a:85:28:70:01:ac:12:da:0c:9f:
                    12:83:a1:59:08:5b:c5:c6:0a:ee:02:f3:92:51:91:
                    58:52:72:8c:72:bb:5e:a0:0b:da:92:49:9d:e7:42:
                    14:06:af:bc:70:06:29:a0:6e:0d:d2:06:f5:c5:72:
                    e9:ae:8a:7d:d1:5f:70:9c:b7:3d:95:85:c8:f4:95:
                    9a:c7:29:43:10:42:b5:87:a0:80:79:d8:27:7e:0f:
                    b9:4d:78:90:b0:af:4a:15:61:05:d9:cf:4d:39:aa:
                    1e:f0:62:0a:9f:de:c4:68:22:2e:38:41:ce:54:cb:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:2A:82:F6:3F:9A:E2:9F:A6:B4:C3:52:C0:9D:9A:27:12:30:E8
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:87:ef:7e:84:e0:65:c3:b5:47:b3:03:f7:86:f0:f8:68:
         c7:f0:a0:11:15:e9:cf:58:fd:53:8a:9e:61:d4:a1:0d:aa:5f:
         4b:64:c2:d7:f7:ea:c1:1f:9b:dc:1f:1b:de:64:e9:fd:a0:e9:
         18:82:4b:13:87:44:cb:87:6b:03:91:39:2f:f6:81:eb:1c:c0:
         26:d5:96:fa:da:d3:f1:52:4a:fb:79:0d:84:38:1c:57:61:1f:
         49:d9:7d:5f:dd:07:90:7b:00:be:6f:5a:cd:12:ec:e6:d5:cc:
         6c:db:98:91:eb:33:0b:dd:ea:84:83:1a:4a:c1:8c:87:eb:a8:
         35:a6:25:78:ef:ed:63:20:48:35:aa:d0:c8:e8:bf:1b:c8:d2:
         14:0a:c5:b9:fb:20:f2:f5:05:10:8c:b7:14:20:d4:5e:82:d9:
         d8:63:9a:e2:b2:c4:16:b6:25:f7:76:41:28:5a:0a:59:f1:b8:
         e1:04:4f:fb:b4:75:3c:4a:70:72:15:d3:e5:c6:34:5b:b0:ca:
         36:ab:ad:a6:ce:ef:67:a5:76:c0:b1:ce:3a:4d:a8:a3:f2:6b:
         60:fb:c1:04:6c:15:b5:69:0c:73:b1:aa:68:46:90:83:83:50:
         fc:7d:ed:67:dd:0b:ce:f4:ef:25:52:6d:86:44:3b:88:44:33:
         42:4e:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:49 2026 by rpki-client