Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File:                     1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier:          MuXnsQNbNG3u1ln7+UVO213Q4W/ibB8jqXUkv6a+XzU=
Subject key identifier:   03:E1:B4:CA:2B:B6:B8:50:74:3E:2F:1F:E2:93:FD:83:46:8D:2C:21
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       2F1929973A86AF8232FDB14902173D6EC6129495
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number:          0B
Signing time:             Tue 12 May 2026 12:00:50 +0000
Manifest this update:     Tue 12 May 2026 11:55:50 +0000
Manifest next update:     Wed 13 May 2026 12:36:50 +0000
Files and hashes:         1: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
                          2: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
                          3: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
                          4: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
                          5: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
                          6: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
                          7: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
                          8: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: 1lIGm8i0q7W7Yc+2tALQMNTtfej7hFdH1wSXIHaqdPs=)
                          9: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
                          10: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:29:97:3a:86:af:82:32:fd:b1:49:02:17:3d:6e:c6:12:94:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 12 11:55:50 2026 GMT
            Not After : May 13 12:36:50 2026 GMT
        Subject: CN=03E1B4CA2BB6B850743E2F1FE293FD83468D2C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:4a:a7:90:11:8e:f8:8c:d1:1c:4a:03:ba:
                    6b:ff:3e:4a:31:c1:7d:be:a4:1d:ea:4d:a2:38:94:
                    a7:97:8f:7f:fa:85:f3:d6:12:bf:83:c5:d0:30:ad:
                    f2:51:c6:7a:34:92:9f:ba:81:cf:f0:cd:7b:32:32:
                    cf:a1:9d:02:37:91:00:c9:58:11:7c:e9:6f:f0:a1:
                    59:ac:6b:a8:21:22:10:44:70:3d:b5:35:f3:d1:94:
                    bf:cf:8a:e6:0f:5a:d2:de:83:60:b9:38:6a:72:89:
                    b8:15:38:12:fd:d3:2e:a7:74:54:da:02:4c:e2:50:
                    a5:6a:11:7e:1b:1e:96:65:f1:38:cc:a2:ce:56:1a:
                    6c:9d:c2:4a:cf:c2:f1:b0:fd:34:35:cf:d4:ad:6b:
                    3a:ca:7f:e6:85:8c:f9:47:1e:a6:3a:87:13:fe:ed:
                    23:b4:db:4c:86:f1:93:ae:62:88:d3:07:e4:ea:fa:
                    a1:2a:a6:7c:4b:0a:8e:c0:12:da:82:d8:e8:9a:50:
                    c2:39:2c:07:7c:c4:7f:25:b2:25:1e:71:79:84:0b:
                    28:5c:e1:d0:78:38:a3:74:45:fd:5f:10:ea:f0:72:
                    40:a4:be:56:ab:4b:bd:9a:61:dc:ec:fb:ee:25:53:
                    a6:8d:dd:d5:84:e1:05:c8:d3:18:b6:52:89:dd:96:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:B4:CA:2B:B6:B8:50:74:3E:2F:1F:E2:93:FD:83:46:8D:2C:21
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:43:17:5f:7e:ee:01:3c:11:40:c8:3d:cd:cb:22:5c:86:
         38:da:c9:1f:b6:e9:11:10:fd:ed:5c:02:91:fd:4c:c3:96:45:
         48:13:60:2c:47:de:f8:a0:63:d3:bd:e3:1b:97:46:20:b4:cb:
         5a:65:07:e0:71:f0:83:e3:64:d8:16:08:ab:96:0b:9f:9f:6b:
         8c:48:25:6f:89:af:16:89:44:17:11:b4:c8:dd:81:b0:b0:f4:
         c3:27:4f:53:d6:5d:0d:84:aa:46:65:26:80:30:3e:b2:62:02:
         45:51:82:fe:a0:1d:48:35:ef:e4:52:0f:85:e6:70:38:f8:40:
         dd:57:2c:32:64:62:84:4f:75:1b:4a:b0:e8:04:3e:68:60:88:
         a3:3f:88:81:b3:33:7c:0e:b7:36:06:65:db:63:9f:43:ef:f1:
         60:be:76:e7:22:2f:52:7c:eb:86:a3:57:56:2f:b5:3c:b7:1f:
         26:ef:f9:0d:2b:72:2a:52:cf:cc:48:3c:95:af:e8:ce:37:4f:
         cb:1a:78:1d:d1:09:73:9e:ab:32:bb:94:13:80:39:df:1f:76:
         f0:b0:2c:3b:6a:9c:aa:be:0f:ec:b7:78:ac:a0:8c:82:e0:73:
         5b:50:c0:ae:a8:76:31:62:22:4a:4e:e8:56:c3:0c:a9:6f:4b:
         63:7a:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:28 2026 by rpki-client