Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
File:                     5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json)
Hash identifier:          PEZ2hjYyEBSrtO2wXtZcCCouFmCjy9wkO1RoOnQb4uk=
Subject key identifier:   08:F1:B5:28:CD:39:2E:57:43:03:14:18:D4:79:40:87:30:AA:62:79
Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
Certificate issuer:       /CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Certificate serial:       0B1847BEE4C672520F29D1E33423AC880A53A966
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
Manifest number:          FF
Signing time:             Sun 15 Nov 2026 07:57:41 +0000
Manifest this update:     Sun 15 Nov 2026 07:52:41 +0000
Manifest next update:     Mon 16 Nov 2026 09:54:41 +0000
Files and hashes:         1: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=)
                          2: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: xFyJCDwoOJCjecVaLV3bSAkeCgtzLjjPqjhfsIXyeOY=)
                          3: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:18:47:be:e4:c6:72:52:0f:29:d1:e3:34:23:ac:88:0a:53:a9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB
        Validity
            Not Before: Nov 15 07:52:41 2026 GMT
            Not After : Nov 16 09:54:41 2026 GMT
        Subject: CN=08F1B528CD392E5743031418D479408730AA6279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:d0:d8:c1:8c:90:59:42:b7:07:75:00:d4:
                    ab:e2:70:55:a4:c6:bd:73:3b:da:1a:3f:f3:e2:fb:
                    41:dc:d6:36:c4:20:b5:82:4b:e1:ea:ec:60:38:d7:
                    81:f3:d2:9e:6b:64:64:ad:d1:5c:b2:ed:1e:47:57:
                    19:98:ad:38:0c:a5:4b:c6:17:97:1d:9d:61:35:6e:
                    46:df:b0:6c:73:89:b5:a3:6a:cd:66:5d:b8:d1:10:
                    d0:1e:ae:05:5f:d0:88:e9:e4:97:2d:7f:ad:bd:b5:
                    5e:84:cf:f2:93:6a:82:72:8f:3d:a6:a8:f5:f7:9f:
                    de:79:86:ec:e1:ed:1c:5b:c2:a6:a2:fd:4b:6b:6d:
                    50:b9:88:c8:33:56:a5:03:b4:8a:cf:74:98:a4:53:
                    c3:c4:53:87:64:b9:81:f2:85:0a:42:9b:52:b3:5a:
                    c2:69:cc:c3:29:77:94:ce:76:66:8f:67:90:d7:cf:
                    1a:a5:33:60:79:63:c8:0b:fe:1d:eb:55:7b:70:4d:
                    88:51:55:a4:d4:68:0a:b2:c6:6b:71:46:b0:73:0b:
                    67:f5:da:c2:87:ce:1f:56:fc:6d:bf:59:ac:bb:7b:
                    3c:d4:f3:6f:f6:59:fe:ff:f7:00:ea:7f:71:ae:c1:
                    f1:96:f7:2a:11:80:0e:9f:97:55:d6:3b:ba:4e:be:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:B5:28:CD:39:2E:57:43:03:14:18:D4:79:40:87:30:AA:62:79
            X509v3 Authority Key Identifier:
                keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:fa:24:bd:61:3d:6a:85:d2:e8:3a:a4:3c:53:3b:05:55:
         0b:5e:1e:62:7f:8f:0a:77:34:db:87:4f:7f:c5:c4:ab:d2:a5:
         41:f2:6b:e1:49:6d:65:f3:45:3d:88:99:22:2b:f1:90:fb:a2:
         7e:42:74:e9:1d:02:90:2f:e3:de:a1:4a:a7:a1:ee:8c:4a:a9:
         01:76:f9:1d:0a:73:1d:5b:c4:09:81:68:b9:c7:46:12:03:4a:
         c7:cb:a9:14:e5:6d:f7:80:ae:8e:8f:50:c7:ca:e7:e5:f3:ca:
         d1:cc:bc:a4:27:55:ca:e4:e4:a3:6d:81:97:18:95:18:c0:ce:
         a6:31:96:78:ab:51:37:89:b1:28:4d:db:eb:c1:82:27:1d:c6:
         88:fa:cf:a6:03:b3:d4:bd:6e:68:fe:3b:cf:32:31:d9:f1:41:
         bd:37:95:7c:1f:13:f9:48:cc:cb:30:3b:e9:65:9c:2e:f5:dd:
         43:4e:ab:0f:0b:84:de:a6:25:af:db:eb:b0:da:86:6f:28:91:
         e5:d3:15:98:57:1c:1b:d7:44:b1:02:15:d0:14:12:5d:f2:ac:
         74:d5:29:f2:9b:71:31:d7:f4:0e:c5:09:a0:c7:9a:7f:21:33:
         1c:f2:fb:99:5f:8a:62:d6:9b:d4:f0:04:d2:92:49:14:8d:4a:
         87:c8:62:68
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUCxhHvuTGclIPKdHjNCOsiApTqWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3
MzIyNUNDQjAeFw0yNjExMTUwNzUyNDFaFw0yNjExMTYwOTU0NDFaMDMxMTAvBgNV
BAMTKDA4RjFCNTI4Q0QzOTJFNTc0MzAzMTQxOEQ0Nzk0MDg3MzBBQTYyNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWtDYwYyQWUK3B3UA1KvicFWk
xr1zO9oaP/Pi+0Hc1jbEILWCS+Hq7GA414Hz0p5rZGSt0Vyy7R5HVxmYrTgMpUvG
F5cdnWE1bkbfsGxzibWjas1mXbjRENAergVf0Ijp5Jctf629tV6Ez/KTaoJyjz2m
qPX3n955huzh7Rxbwqai/UtrbVC5iMgzVqUDtIrPdJikU8PEU4dkuYHyhQpCm1Kz
WsJpzMMpd5TOdmaPZ5DXzxqlM2B5Y8gL/h3rVXtwTYhRVaTUaAqyxmtxRrBzC2f1
2sKHzh9W/G2/Way7ezzU82/2Wf7/9wDqf3GuwfGW9yoRgA6fl1XWO7pOviVpAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUCPG1KM05LldDAxQY1HlAhzCqYnkwHwYDVR0j
BBgwFoAUVAeCTyCUvbXpbEUKTzZWOnMiXMswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF
LzAvNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81NDA3ODI0RjIwOTRCREI1RTk2QzQ1MEE0RjM2
NTYzQTczMjI1Q0NCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzAvNTQwNzgyNEYyMDk0
QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKSP+iS9YT1q
hdLoOqQ8UzsFVQteHmJ/jwp3NNuHT3/FxKvSpUHya+FJbWXzRT2ImSIr8ZD7on5C
dOkdApAv496hSqeh7oxKqQF2+R0Kcx1bxAmBaLnHRhIDSsfLqRTlbfeAro6PUMfK
5+XzytHMvKQnVcrk5KNtgZcYlRjAzqYxlnirUTeJsShN2+vBgicdxoj6z6YDs9S9
bmj+O88yMdnxQb03lXwfE/lIzMswO+llnC713UNOqw8LhN6mJa/b67Dahm8okeXT
FZhXHBvXRLECFdAUEl3yrHTVKfKbcTHX9A7FCaDHmn8hMxzy+5lfimLWm9TwBNKS
SRSNSofIYmg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:56 2026 by rpki-client