Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File:                     D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier:          1Vb+d+H6gecALocfoqBrs7HAHlq9W57qo9eqMpsOOWg=
Subject key identifier:   04:D6:0F:C6:A5:29:C2:C0:1D:84:15:D0:19:F5:5D:24:4B:25:F4:BA
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer:       /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial:       46FCB11672C6C2BDA3388DE0706B91E9E72E1BFE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number:          65
Signing time:             Fri 24 Jul 2026 05:22:38 +0000
Manifest this update:     Fri 24 Jul 2026 05:17:38 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:38 +0000
Files and hashes:         1: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
                          2: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: dA7RyV75aoWhaFYYVWzPTIahPZ4hWtU0nfR/ZM/LAbo=)
                          3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
                          rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fc:b1:16:72:c6:c2:bd:a3:38:8d:e0:70:6b:91:e9:e7:2e:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
        Validity
            Not Before: Jul 24 05:17:38 2026 GMT
            Not After : Jul 25 09:01:38 2026 GMT
        Subject: CN=04D60FC6A529C2C01D8415D019F55D244B25F4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:95:14:53:96:87:f3:b1:9f:4d:72:b9:73:
                    c6:95:f4:f2:56:1f:1e:0d:b9:9a:0f:36:4f:6b:53:
                    3d:db:11:70:54:39:a8:6b:32:01:4d:87:f2:03:bc:
                    46:e6:60:55:a4:17:25:bc:0c:35:87:d4:b0:df:03:
                    48:fa:e8:2c:c1:73:e2:43:12:d3:fa:b9:fb:41:6d:
                    87:81:8f:0f:8b:21:df:f1:05:14:9c:ee:2c:b3:78:
                    68:37:a0:a1:e4:13:df:e9:7e:01:f6:09:1e:6c:ef:
                    db:cf:75:ef:a0:72:5f:9d:e4:11:bf:d4:78:60:29:
                    7b:8a:51:53:4b:17:92:4b:6b:be:52:b3:b8:13:89:
                    d9:e8:97:11:86:2c:04:6f:c4:8d:89:dc:4e:17:42:
                    a8:90:f8:56:c0:21:93:2c:28:be:75:a2:f2:f5:54:
                    45:da:51:4e:fe:42:f8:3b:1e:c4:ae:7a:70:89:f1:
                    c7:61:df:19:69:1a:7c:9b:01:33:08:7a:7e:10:72:
                    4c:d0:14:c1:6f:d3:68:e9:ec:76:94:f7:23:aa:6e:
                    ad:d9:8e:30:38:d3:a9:e7:b6:40:95:65:ba:8d:74:
                    66:93:b6:cd:86:9f:41:14:eb:50:18:dc:fe:97:5f:
                    1e:7d:b5:22:ab:59:11:7f:2f:98:16:17:20:04:f7:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:0F:C6:A5:29:C2:C0:1D:84:15:D0:19:F5:5D:24:4B:25:F4:BA
            X509v3 Authority Key Identifier:
                keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:3d:92:22:d9:88:2b:b4:01:dd:aa:f1:39:ff:b8:1f:0e:
         ac:b3:2f:6d:88:a9:24:28:48:3e:cc:50:ee:b2:ea:7f:1f:9b:
         39:94:46:30:13:56:e6:2d:43:33:ae:07:b9:ad:07:89:da:f0:
         f9:6f:a5:f2:a7:f4:17:98:97:8f:9d:c8:46:92:02:57:45:22:
         86:7a:f9:d1:b7:c2:b8:6a:a0:cc:4e:e8:f8:92:61:9e:07:4d:
         07:66:d7:9b:ff:26:c3:4a:b9:7b:e2:b9:df:13:1c:18:0b:ec:
         64:4f:00:54:65:0a:31:26:a3:20:38:88:3a:3b:91:43:ab:26:
         3a:2d:44:de:1e:a3:90:90:86:e6:a6:0c:06:db:45:3f:a2:ef:
         11:47:87:de:a6:8e:24:3c:bc:30:1e:01:27:2a:df:db:6d:d5:
         19:2d:25:b1:f4:b3:69:8a:2b:1c:5b:46:dd:6b:ae:57:d3:f2:
         b6:7e:d4:56:7b:d8:32:c7:77:9e:f2:0e:db:df:e5:ab:b3:46:
         fe:8b:74:11:d7:8a:5c:a2:a8:3d:f8:67:86:02:90:4d:39:fb:
         55:02:64:7a:aa:2c:57:a8:de:e0:d0:c8:61:d2:71:2b:04:fc:
         71:a8:ec:4e:7e:da:c8:dc:dc:40:9d:ac:13:cd:0c:ff:28:fc:
         79:6d:3c:a4
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIURvyxFnLGwr2jOI3gcGuR6ecuG/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgxQTFGREYw
QkU2OUI5MDAeFw0yNjA3MjQwNTE3MzhaFw0yNjA3MjUwOTAxMzhaMDMxMTAvBgNV
BAMTKDA0RDYwRkM2QTUyOUMyQzAxRDg0MTVEMDE5RjU1RDI0NEIyNUY0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2pUUU5aH87GfTXK5c8aV9PJW
Hx4NuZoPNk9rUz3bEXBUOahrMgFNh/IDvEbmYFWkFyW8DDWH1LDfA0j66CzBc+JD
EtP6uftBbYeBjw+LId/xBRSc7iyzeGg3oKHkE9/pfgH2CR5s79vPde+gcl+d5BG/
1HhgKXuKUVNLF5JLa75Ss7gTidnolxGGLARvxI2J3E4XQqiQ+FbAIZMsKL51ovL1
VEXaUU7+Qvg7HsSuenCJ8cdh3xlpGnybATMIen4QckzQFMFv02jp7HaU9yOqbq3Z
jjA406nntkCVZbqNdGaTts2Gn0EU61AY3P6XXx59tSKrWRF/L5gWFyAE938tAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUBNYPxqUpwsAdhBXQGfVdJEsl9LowHwYDVR0j
BBgwFoAU0a4zOANb/KfE6G+8KBof3wvmm5AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hBTkdG
VS8wL0QxQUUzMzM4MDM1QkZDQTdDNEU4NkZCQzI4MUExRkRGMEJFNjlCOTAuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgx
QTFGREYwQkU2OUI5MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NIQU5HRlUvMC9EMUFFMzMzODAz
NUJGQ0E3QzRFODZGQkMyODFBMUZERjBCRTY5QjkwLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5Q9kiLZ
iCu0Ad2q8Tn/uB8OrLMvbYipJChIPsxQ7rLqfx+bOZRGMBNW5i1DM64Hua0Hidrw
+W+l8qf0F5iXj53IRpICV0Uihnr50bfCuGqgzE7o+JJhngdNB2bXm/8mw0q5e+K5
3xMcGAvsZE8AVGUKMSajIDiIOjuRQ6smOi1E3h6jkJCG5qYMBttFP6LvEUeH3qaO
JDy8MB4BJyrf223VGS0lsfSzaYorHFtG3WuuV9Pytn7UVnvYMsd3nvIO29/lq7NG
/ot0EdeKXKKoPfhnhgKQTTn7VQJkeqosV6je4NDIYdJxKwT8cajsTn7ayNzcQJ2s
E80M/yj8eW08pA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:23 2026 by rpki-client