Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File:                     273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier:          dieuDteg0rvcr+YZv/cSouCKUZYO7mvYeol5kr52BP0=
Subject key identifier:   31:8F:C9:E5:29:E1:CF:A9:56:CE:82:18:53:42:9F:08:DD:DD:2E:92
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       30B7AB59488445118138D18B277A676A235743A7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number:          68
Signing time:             Thu 23 Jul 2026 23:41:58 +0000
Manifest this update:     Thu 23 Jul 2026 23:36:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:05:58 +0000
Files and hashes:         1: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: LntNSsdIiz3vVK/9YOT80GtO3BYu4yrTzjT4jN0CiFM=)
                          2: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
                          3: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
                          4: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b7:ab:59:48:84:45:11:81:38:d1:8b:27:7a:67:6a:23:57:43:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: Jul 23 23:36:58 2026 GMT
            Not After : Jul 25 00:05:58 2026 GMT
        Subject: CN=318FC9E529E1CFA956CE821853429F08DDDD2E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:56:8c:a8:0a:90:59:ce:41:92:31:5a:79:
                    f4:c4:f1:b2:52:ed:cb:bc:b1:57:35:01:dc:8a:19:
                    fc:5a:9e:95:1d:e6:74:4b:31:5c:f1:f1:e4:d4:9c:
                    d5:01:9e:00:77:e4:fc:d7:4c:ff:cf:96:aa:2a:90:
                    89:f8:ab:26:a3:59:9d:6d:d7:f3:73:04:dd:ab:0a:
                    00:a2:31:c9:68:a0:f1:ac:cf:e1:38:d4:29:15:6e:
                    89:92:19:77:aa:10:db:7a:5c:e6:ab:0d:a0:22:d0:
                    b6:d9:1d:e0:47:2d:13:2d:97:ed:1b:08:38:37:aa:
                    7a:f9:bc:dd:a4:06:77:b7:26:ab:0e:c5:08:dd:97:
                    8e:48:70:80:dd:f9:52:a1:70:29:cf:61:30:a7:c1:
                    5c:c0:ff:1e:51:fc:4c:9a:6e:de:be:ea:54:25:e0:
                    41:a6:75:5a:34:d1:9f:80:a7:76:0b:dc:d5:c6:11:
                    39:7f:90:a5:0e:3a:55:79:da:87:40:3d:57:4c:64:
                    f2:44:08:ea:1b:18:a7:7b:81:df:84:59:6b:2f:d2:
                    4d:7e:cb:f4:9f:cd:de:c7:c5:42:57:f1:4d:38:d6:
                    91:11:26:29:26:a5:4b:a8:3d:fd:10:29:81:65:83:
                    70:85:77:73:63:2d:1c:06:ed:44:05:b1:b0:63:79:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8F:C9:E5:29:E1:CF:A9:56:CE:82:18:53:42:9F:08:DD:DD:2E:92
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:70:24:d7:e5:d6:eb:fa:04:a4:25:3d:13:24:57:27:e4:
         4a:49:71:ed:f8:0d:1b:91:f4:96:cd:a3:71:46:f0:be:19:d1:
         f3:03:71:6f:49:c4:fd:02:85:4d:98:61:88:b2:51:9b:dc:b4:
         62:96:ba:74:3b:aa:00:5d:27:71:08:d2:52:f5:30:fa:97:c5:
         93:fe:33:d8:7c:ff:bf:73:ef:c4:55:da:4e:23:a5:59:39:66:
         31:cf:40:b9:76:de:3a:d9:d8:00:ef:f1:a4:03:99:3f:94:be:
         0c:8d:d3:38:bf:94:a7:0c:e7:c2:28:70:4a:b3:8b:e1:0c:53:
         3e:4b:7d:58:ad:00:b4:b0:8c:04:79:21:72:41:bc:d9:72:99:
         dd:5c:d0:f0:a4:0d:7f:76:95:c8:b3:28:b7:df:71:b4:a1:6b:
         c0:9b:3a:38:72:13:a5:6c:8c:d8:6e:ee:c1:3f:73:26:be:96:
         ef:99:e8:6e:3f:04:31:f2:23:ed:be:6a:0c:9c:2e:49:64:9f:
         57:bb:6a:fe:31:64:62:11:4d:99:04:3b:eb:ec:88:ff:40:f1:
         bd:23:52:ba:b5:c6:44:4e:1a:ee:88:21:81:6b:92:4f:d2:60:
         79:d8:cf:32:a3:f4:97:0d:5e:9f:ec:a1:40:99:fc:fa:7f:52:
         db:a6:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:29 2026 by rpki-client