Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
File:                     D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json)
Hash identifier:          R44nhOWrgEPHrxwch8oFKzUyIiX9lWjcqIcBfCh6sYU=
Subject key identifier:   30:84:2F:A1:66:EB:39:35:76:A1:C2:83:7C:A5:CA:3D:72:2F:67:98
Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
Certificate issuer:       /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Certificate serial:       7AEBD92E699FE2720F3017255E20920E5AEA9E87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 14:17:39 +0000
Manifest this update:     Thu 23 Jul 2026 14:12:39 +0000
Manifest next update:     Fri 24 Jul 2026 16:34:39 +0000
Files and hashes:         1: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: pGPgE/l6UHOp8so6/ogQr0faFJ5OMin7/fuZOVcH+Ig=)
                          2: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
                          rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:d9:2e:69:9f:e2:72:0f:30:17:25:5e:20:92:0e:5a:ea:9e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
        Validity
            Not Before: Jul 23 14:12:39 2026 GMT
            Not After : Jul 24 16:34:39 2026 GMT
        Subject: CN=30842FA166EB393576A1C2837CA5CA3D722F6798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:e7:0d:88:9f:88:79:97:5e:5e:80:b7:88:
                    b9:63:28:d1:5b:c3:92:4d:7c:95:9c:b6:6b:7a:af:
                    54:cc:c5:db:3c:69:0c:99:53:30:f7:d5:b9:dd:98:
                    26:ab:b9:67:77:8a:26:72:df:9b:2b:7d:12:b8:1e:
                    70:d5:6a:40:2a:47:3d:d7:ff:2a:b1:6a:ef:b3:51:
                    bc:b2:c9:52:45:c4:bd:ad:c0:a1:f4:ac:01:cc:7b:
                    f7:be:5b:5a:04:bd:5e:09:9d:ac:cb:ac:e1:3e:57:
                    f2:6a:88:7c:bb:6d:56:f3:bf:a6:b8:50:f7:db:77:
                    f3:f7:0b:2e:1e:db:db:48:c9:0c:c4:8d:d4:f2:1e:
                    63:68:da:f0:98:c7:66:65:a6:34:1c:6b:7d:94:4b:
                    9a:7f:f3:ea:95:12:a8:23:ba:8e:06:87:9e:0f:c6:
                    c5:20:76:97:91:df:d4:02:7a:d0:50:cc:5f:98:a9:
                    82:ad:5a:49:e4:20:4a:c9:98:3f:b5:b2:2d:67:7d:
                    df:6f:3f:92:74:5f:88:a0:ad:05:e9:41:2b:d4:1d:
                    f6:cb:05:f4:74:c3:3d:92:ed:92:c9:a0:79:0b:bf:
                    23:e4:1d:72:98:eb:f1:f0:0a:ef:48:57:01:56:40:
                    8a:77:57:87:84:65:6f:3c:29:22:69:39:74:12:1b:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:2F:A1:66:EB:39:35:76:A1:C2:83:7C:A5:CA:3D:72:2F:67:98
            X509v3 Authority Key Identifier:
                keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:94:12:9e:42:27:be:fe:57:0c:75:d9:ad:53:3c:28:1c:
         a1:c6:42:a6:01:13:99:d2:fa:6c:51:ee:cb:2d:0e:2a:37:28:
         87:4c:7d:cb:05:ef:19:d6:10:7c:3e:22:36:f1:86:8b:7f:3f:
         5e:c6:bf:d8:97:29:b2:8e:cf:14:1b:3f:b9:29:13:39:e1:5b:
         db:67:f5:af:1b:00:33:ab:e0:7e:bc:5f:8d:78:8c:b3:1c:1d:
         e7:4f:40:ce:f7:6e:08:df:ab:df:e4:88:bd:3d:b6:0a:f1:e3:
         b4:3a:c7:10:f1:ce:8e:13:c7:28:83:1e:d7:10:aa:1b:13:08:
         d6:80:42:41:17:c9:31:bb:65:48:53:05:d2:e3:63:71:ce:6b:
         36:15:22:90:ec:d9:a8:85:ce:5c:54:64:b9:ca:0e:a3:de:4c:
         29:91:7b:3b:ae:90:4e:da:f0:73:2c:2a:73:62:ad:92:d7:45:
         d8:c9:29:d4:0c:53:6a:5a:73:2d:72:03:8c:e5:ef:24:40:07:
         4a:91:d9:c3:00:17:cd:d4:1d:5f:50:96:f9:a2:5f:41:c9:fd:
         e3:66:0a:f7:9b:76:2a:46:99:84:ab:5c:5e:8e:fa:00:ec:6b:
         04:dc:d2:db:b2:47:5d:60:10:80:b0:b7:c8:21:c4:0e:94:57:
         e8:4a:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:57 2026 by rpki-client