Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File:                     1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier:          UB3qLu/xCC/CaVvXcx3sduzkkzdL+jatspYtBg3sLbs=
Subject key identifier:   90:CE:E0:79:5B:33:CF:83:A9:AD:48:20:59:38:3F:D3:3D:6C:C9:EF
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       2F8539A8126B9655635F4018DE7E4B40D59774D7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number:          6C
Signing time:             Thu 23 Jul 2026 05:19:05 +0000
Manifest this update:     Thu 23 Jul 2026 05:14:05 +0000
Manifest next update:     Fri 24 Jul 2026 07:24:05 +0000
Files and hashes:         1: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
                          2: 33362e35302e3234392e302f32342d3332203d3e2039393233.roa (hash: OwlqxYAj0myQK9ztjVLObp4esEpYmoKEhckHyO1Uc/4=)
                          3: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
                          4: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
                          5: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
                          6: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
                          7: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
                          8: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: 9kxWcbo+232BB+Z+G6DKyx0jXbj2RI/FqUXi38RC2kg=)
                          9: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
                          10: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
                          11: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:85:39:a8:12:6b:96:55:63:5f:40:18:de:7e:4b:40:d5:97:74:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: Jul 23 05:14:05 2026 GMT
            Not After : Jul 24 07:24:05 2026 GMT
        Subject: CN=90CEE0795B33CF83A9AD482059383FD33D6CC9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:d0:f0:29:69:85:70:fc:11:b5:98:63:e2:
                    a5:97:ac:45:5d:0a:f2:45:25:74:90:80:29:93:a3:
                    df:e8:01:01:58:3d:01:16:4d:fe:88:f7:a9:bf:c5:
                    70:9e:5f:13:8f:4c:2e:0d:38:c3:97:67:7b:03:25:
                    70:34:e0:7a:73:6b:8e:75:e3:ca:15:a0:4e:1f:68:
                    77:2f:45:fe:81:a8:2e:4a:0c:b5:53:66:a3:78:e0:
                    62:d0:30:77:b0:e7:b6:33:f7:81:6d:d0:56:52:64:
                    21:81:32:f9:dd:ff:4c:65:bb:0f:3e:d4:59:f7:3e:
                    af:10:06:03:1d:96:b2:5f:12:e2:09:37:05:77:8e:
                    d7:dc:82:ec:9e:9c:41:36:e6:55:9b:9d:6b:5c:65:
                    9c:eb:5e:78:5b:55:4d:2d:ad:df:15:37:c9:ae:f8:
                    13:b2:09:2b:87:25:77:63:f1:a4:35:be:d5:2f:6d:
                    6e:d4:02:90:a6:82:7b:38:4a:88:4b:35:35:75:0c:
                    73:bf:7c:2f:27:ca:0b:a9:f4:47:df:18:db:b3:56:
                    88:85:85:09:1f:ee:2a:e2:b0:82:26:6a:0a:b3:6d:
                    75:33:4e:d9:03:3b:ff:5f:37:40:13:86:3d:b1:fd:
                    2e:c5:8e:36:4f:f3:f7:39:f5:79:3b:cc:62:d0:be:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:E0:79:5B:33:CF:83:A9:AD:48:20:59:38:3F:D3:3D:6C:C9:EF
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b7:e3:4b:42:28:2b:5f:41:db:97:c8:bc:13:03:78:26:df:
         9e:e3:10:91:ca:36:d4:09:7f:e2:69:14:c8:c2:71:ee:38:6f:
         e0:8e:e8:f6:a9:90:49:b7:94:1c:89:93:02:51:b7:06:5e:ef:
         1e:2f:be:e1:b5:3b:a0:20:aa:ef:34:b5:97:07:e9:0e:6a:84:
         4a:b9:71:78:35:85:b5:b9:6c:ad:97:59:f8:20:c2:f2:b4:83:
         07:e5:da:3d:c5:40:b8:67:0f:41:f2:4c:24:ec:28:f4:2d:e2:
         af:04:a5:36:78:37:7a:b8:44:8b:ca:7d:99:fb:c1:b4:35:a9:
         89:34:e0:1c:e5:4d:45:19:52:fb:6a:d4:c3:5b:cd:03:fe:bd:
         e0:4f:78:be:42:0b:03:a7:79:e1:fb:40:06:5e:c6:09:48:e7:
         1e:7a:80:8c:42:e7:c5:66:5c:8a:b6:a3:87:76:89:d4:69:d7:
         52:6d:27:d6:ed:ec:5d:cf:fd:1f:73:f4:d6:7e:22:12:19:07:
         cb:a1:bb:48:6a:a6:be:af:ce:69:30:33:de:67:1e:9d:5a:79:
         82:f8:07:86:dc:da:3a:bb:9e:9b:cb:1d:f4:90:aa:18:72:bb:
         b9:08:db:1e:db:f4:36:c0:25:63:41:cf:1d:d0:18:a2:68:f6:
         b2:32:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:09 2026 by rpki-client