Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
File:                     E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft (raw, json)
Hash identifier:          +B79w3P/l3dZI4UK4nxul425z/OkkA/VMpAc+uJtds8=
Subject key identifier:   21:20:14:4B:BD:4D:D2:27:2A:63:92:89:9D:39:3A:68:12:AF:F7:5B
Authority key identifier: E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20
Certificate issuer:       /CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
Certificate serial:       03F722F19681A4A3CD2049CF0C65DE3EB74A3B5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
Manifest number:          FE
Signing time:             Sun 15 Nov 2026 16:09:51 +0000
Manifest this update:     Sun 15 Nov 2026 16:04:51 +0000
Manifest next update:     Mon 16 Nov 2026 17:08:51 +0000
Files and hashes:         1: 3130332e3131372e3133342e302f32332d3234203d3e2037343833.roa (hash: v0WNTHaZK/tXZUZtc9xvgMZJh8Heyjw7a2SSkraB7p8=)
                          2: E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl (hash: u8qfKWsyV9nYnf/eHYMlm4jEghqcaWhgx4hSWqbAKAw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl
                          rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:22:f1:96:81:a4:a3:cd:20:49:cf:0c:65:de:3e:b7:4a:3b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
        Validity
            Not Before: Nov 15 16:04:51 2026 GMT
            Not After : Nov 16 17:08:51 2026 GMT
        Subject: CN=2120144BBD4DD2272A6392899D393A6812AFF75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:a1:1b:40:06:a4:2b:5e:19:99:c6:7f:69:
                    21:fa:9b:30:fa:cc:ef:49:fd:75:ac:3f:a9:3d:17:
                    38:81:68:ce:81:ae:3a:63:d2:41:d0:54:10:3c:26:
                    01:94:ca:4b:9e:95:79:fe:4e:b0:39:f7:cd:4a:69:
                    ad:d9:10:60:00:c0:4a:41:d5:39:d2:72:15:b7:40:
                    2f:f7:5e:b7:5e:8e:c8:db:69:7f:a5:0a:82:94:f1:
                    e9:53:94:16:94:e9:55:9e:91:ae:c0:ff:67:7c:45:
                    13:f3:04:5d:3b:46:d1:5a:7b:6c:31:a7:ff:85:56:
                    ba:b0:8b:bb:3f:6f:96:6b:3f:aa:3b:4c:13:8e:05:
                    e8:76:c1:af:69:ca:43:f6:21:e0:d6:5f:be:a9:56:
                    cc:52:22:8d:61:7c:39:ab:71:3a:67:33:9c:78:92:
                    31:ff:34:5f:5c:c2:51:fa:16:72:b1:1a:e0:9b:bd:
                    11:5b:44:fa:4c:65:f9:27:95:6b:0c:c2:ce:59:e0:
                    f0:bf:25:03:1c:52:3b:41:11:c0:db:86:ab:f2:fb:
                    c7:3f:51:5c:59:89:1a:fa:11:ff:38:73:2b:4c:64:
                    e4:ee:4c:c1:70:37:ec:c6:ec:fa:9c:0c:a4:eb:b6:
                    27:26:cb:bd:c1:41:c2:d5:a0:12:bb:dc:13:87:05:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:14:4B:BD:4D:D2:27:2A:63:92:89:9D:39:3A:68:12:AF:F7:5B
            X509v3 Authority Key Identifier:
                keyid:E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:e6:3f:11:4b:d5:c1:f8:9e:d2:a4:e6:63:81:e2:fb:2f:
         ce:b2:25:80:79:9e:1d:f4:b0:84:50:a6:27:73:d9:60:de:a7:
         40:91:d0:23:49:c7:02:95:70:d2:57:a6:af:2e:ac:29:d8:29:
         bb:a2:4a:5c:99:f3:a9:fa:3b:96:d2:a3:70:33:63:f4:ee:84:
         bd:67:8b:41:74:8d:44:b1:b4:ff:29:c0:6b:2d:00:fb:4c:2d:
         64:41:8c:b6:5b:d5:8a:c5:f1:41:e6:7d:27:bf:88:9f:34:55:
         1f:2a:71:45:ef:18:57:30:a7:10:36:8d:7d:80:15:46:5e:06:
         79:ea:4b:46:b2:3e:09:c8:ab:38:2a:64:5d:aa:26:d7:15:f2:
         6e:ab:f2:43:6e:f4:48:ac:bb:f3:f5:53:b3:f5:1e:bd:66:4b:
         1a:ee:b7:ec:06:3e:d8:fb:8d:66:bf:d1:d7:b5:b2:89:6a:1a:
         cd:cf:cc:37:ad:34:fa:4b:0c:65:e3:91:62:ff:31:b2:9b:7f:
         ff:40:79:90:c7:c8:b2:5c:f9:b2:14:c0:ba:e5:88:d8:b6:31:
         bd:23:20:49:23:c2:87:15:bd:59:2b:7a:b9:e6:0d:82:f4:d2:
         f2:ec:5a:fe:7b:73:e9:5e:7c:3e:93:bc:1b:b1:65:28:44:e6:
         63:2c:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:28 2026 by rpki-client