Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
File:                     E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft (raw, json)
Hash identifier:          PrizRZ1unex2yJWmXvby8ROLQz+Btn6Qz5pNHkKrm/E=
Subject key identifier:   71:93:95:EB:57:4B:1B:53:37:9E:EF:95:50:31:7F:4E:AE:1E:29:D4
Authority key identifier: E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20
Certificate issuer:       /CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
Certificate serial:       77F7C8263861ACB8A7E4F42E71A88A132B7DDB8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 05:17:24 +0000
Manifest this update:     Thu 24 Sep 2026 05:12:24 +0000
Manifest next update:     Fri 25 Sep 2026 08:59:24 +0000
Files and hashes:         1: E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl (hash: jwWEmUX/Wc8cjqA7CUPc/7ZgE5YfaLyYKX8nBOndOTk=)
                          2: 3130332e3131372e3133342e302f32332d3234203d3e2037343833.roa (hash: v0WNTHaZK/tXZUZtc9xvgMZJh8Heyjw7a2SSkraB7p8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl
                          rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f7:c8:26:38:61:ac:b8:a7:e4:f4:2e:71:a8:8a:13:2b:7d:db:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
        Validity
            Not Before: Sep 24 05:12:24 2026 GMT
            Not After : Sep 25 08:59:24 2026 GMT
        Subject: CN=719395EB574B1B53379EEF9550317F4EAE1E29D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:8c:da:5f:33:b9:82:0d:c2:84:29:d8:c9:
                    24:73:33:7f:76:f6:9b:1c:da:7d:14:df:7e:58:1c:
                    d5:0e:ac:6e:84:9c:7b:68:fa:b2:ba:29:d0:ee:94:
                    17:b0:e9:c6:63:b1:5c:9d:88:66:d8:fc:72:88:c2:
                    be:8f:3f:ea:09:32:21:85:35:77:83:dd:f0:f7:d2:
                    a1:31:94:c8:03:70:f6:bb:bf:9d:38:60:59:ac:d5:
                    1a:ad:54:1d:c2:e0:1f:73:ea:e3:5a:12:3f:96:2e:
                    f3:17:5f:7e:53:f6:19:cd:4d:6a:a1:02:b0:82:2f:
                    75:62:74:fc:33:08:f7:b5:e9:84:5e:89:8e:19:76:
                    8c:43:d8:9d:ea:15:de:bd:ec:72:e5:d9:86:6d:fa:
                    a3:89:6e:7c:8b:69:f9:31:62:35:32:cc:c3:d9:00:
                    c9:a6:18:c4:7b:09:3e:71:e8:de:04:20:9b:d3:c5:
                    b8:ae:34:91:ab:b3:3f:f1:39:fa:bd:31:16:57:2b:
                    2f:bf:c1:60:6e:e1:f1:d8:4d:2a:eb:93:df:70:36:
                    a7:c0:6d:d9:30:3a:32:db:3a:21:d9:bc:7a:38:9e:
                    71:8e:b9:ba:32:40:82:47:c6:1b:92:fb:ac:f0:3d:
                    fc:07:4b:54:81:ec:ee:46:c6:64:a7:da:a7:d6:0c:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:95:EB:57:4B:1B:53:37:9E:EF:95:50:31:7F:4E:AE:1E:29:D4
            X509v3 Authority Key Identifier:
                keyid:E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:fe:e1:22:59:2f:d1:57:fd:5f:ef:25:a0:99:95:1a:9a:
         88:09:a6:01:8f:a0:dd:ba:1f:42:ef:2f:67:f0:f3:12:d6:e0:
         dc:de:3d:6d:22:85:17:15:3a:4d:43:f7:13:54:67:12:07:bb:
         21:ce:34:3c:3d:db:36:e6:a0:47:f4:a0:64:9b:7c:8e:1d:ae:
         ef:e0:53:24:94:0f:0a:74:c3:50:9f:bb:99:5b:99:0e:8d:35:
         60:29:f9:60:64:5f:65:d6:20:a8:36:74:49:94:1a:b0:9a:1a:
         95:aa:51:9d:bc:f2:e3:bb:99:31:3c:d2:9f:a6:91:98:2b:81:
         d1:85:94:31:60:8c:28:75:29:51:d7:81:f0:ac:07:5e:3b:a1:
         5e:a6:bf:9a:a4:f9:42:bc:ae:ff:1a:01:e6:1a:2b:96:5d:90:
         bd:0d:d5:41:26:1a:fa:41:dd:76:4b:bc:ac:53:10:4e:fd:8e:
         21:56:bf:10:2e:e6:b3:a0:66:c1:76:c0:2b:c3:84:61:6c:11:
         17:e1:ac:c1:17:37:5b:9d:79:77:ec:7d:10:19:3f:75:5c:ca:
         12:5f:31:03:bb:c1:e6:fe:3f:67:10:18:a0:eb:43:64:54:75:
         a2:52:4c:68:9e:77:95:13:44:18:64:b7:28:d4:d0:2c:1c:18:
         a9:c0:e0:68
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUd/fIJjhhrLin5PQucaiKEyt9244wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdCNUEzNjE1QzYyQkEwREE4OUI2Q0EyQTYyRTIwQ0Q4
MDAwODYyMDAeFw0yNjA5MjQwNTEyMjRaFw0yNjA5MjUwODU5MjRaMDMxMTAvBgNV
BAMTKDcxOTM5NUVCNTc0QjFCNTMzNzlFRUY5NTUwMzE3RjRFQUUxRTI5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BIzaXzO5gg3ChCnYySRzM392
9psc2n0U335YHNUOrG6EnHto+rK6KdDulBew6cZjsVydiGbY/HKIwr6PP+oJMiGF
NXeD3fD30qExlMgDcPa7v504YFms1RqtVB3C4B9z6uNaEj+WLvMXX35T9hnNTWqh
ArCCL3VidPwzCPe16YReiY4ZdoxD2J3qFd697HLl2YZt+qOJbnyLafkxYjUyzMPZ
AMmmGMR7CT5x6N4EIJvTxbiuNJGrsz/xOfq9MRZXKy+/wWBu4fHYTSrrk99wNqfA
bdkwOjLbOiHZvHo4nnGOuboyQIJHxhuS+6zwPfwHS1SB7O5GxmSn2qfWDHDTAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUcZOV61dLG1M3nu+VUDF/Tq4eKdQwHwYDVR0j
BBgwFoAU57WjYVxiug2om2yipi4gzYAAhiAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJTC8w
L0U3QjVBMzYxNUM2MkJBMERBODlCNkNBMkE2MkUyMENEODAwMDg2MjAuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvRTdCNUEzNjE1QzYyQkEwREE4OUI2Q0EyQTYyRTIw
Q0Q4MDAwODYyMC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISUwvMC9FN0I1QTM2MTVDNjJCQTBE
QTg5QjZDQTJBNjJFMjBDRDgwMDA4NjIwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+L+4SJZL9FX/V/v
JaCZlRqaiAmmAY+g3bofQu8vZ/DzEtbg3N49bSKFFxU6TUP3E1RnEge7Ic40PD3b
NuagR/SgZJt8jh2u7+BTJJQPCnTDUJ+7mVuZDo01YCn5YGRfZdYgqDZ0SZQasJoa
lapRnbzy47uZMTzSn6aRmCuB0YWUMWCMKHUpUdeB8KwHXjuhXqa/mqT5Qryu/xoB
5horll2QvQ3VQSYa+kHddku8rFMQTv2OIVa/EC7ms6BmwXbAK8OEYWwRF+GswRc3
W515d+x9EBk/dVzKEl8xA7vB5v4/ZxAYoOtDZFR1olJMaJ53lRNEGGS3KNTQLBwY
qcDgaA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:18:50 2026 by rpki-client