Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
File:                     7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft (raw, json)
Hash identifier:          bXeIWzsWGCUFQuAJzxaoHHKAFIa9lFpxUdNHpaDmKN0=
Subject key identifier:   17:57:0C:73:11:23:92:9A:94:BE:67:EF:F3:00:D7:5C:7A:B9:45:38
Authority key identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C
Certificate issuer:       /CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
Certificate serial:       580111A594027C6DE60C11AD72FDF1E37557E188
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 16:55:38 +0000
Manifest this update:     Thu 24 Sep 2026 16:50:38 +0000
Manifest next update:     Fri 25 Sep 2026 20:02:38 +0000
Files and hashes:         1: 3135372e32302e3130382e302f32332d3234203d3e2039393137.roa (hash: ckB7c4m0dSGjfbDc1BMRa8lcfk7IIMuWAbfJoeOYzj8=)
                          2: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl (hash: LKg49gRjQ7XM/4/td0PW3eqqIJlbOet0VSPMK0fbkcA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:01:11:a5:94:02:7c:6d:e6:0c:11:ad:72:fd:f1:e3:75:57:e1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
        Validity
            Not Before: Sep 24 16:50:38 2026 GMT
            Not After : Sep 25 20:02:38 2026 GMT
        Subject: CN=17570C731123929A94BE67EFF300D75C7AB94538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:12:75:46:e6:3f:79:89:fe:77:c3:6c:fb:
                    eb:f1:74:ab:a0:fb:ce:45:1d:c2:91:0f:39:83:47:
                    c0:e2:f5:49:f4:26:29:54:45:35:25:65:47:f8:f8:
                    67:05:b6:13:c1:20:97:a3:b0:7c:e0:a5:33:55:e2:
                    8c:b9:34:47:58:32:91:6e:fe:16:2d:4f:8d:3e:03:
                    6a:f8:8a:e8:ef:3e:44:2b:7e:0f:df:43:13:2b:82:
                    93:18:1b:11:49:f1:85:52:ba:7f:44:76:bf:e7:59:
                    69:ae:8c:0d:76:4c:99:06:18:79:24:ed:12:2f:50:
                    f5:4f:6b:6f:04:e1:8f:54:a5:e2:b3:c8:23:05:d8:
                    9c:6a:3b:7f:68:86:cc:c2:af:22:bc:e7:c4:bd:51:
                    b4:72:c8:bc:52:42:10:a4:98:9e:3e:e9:17:58:31:
                    3c:3b:4b:db:d5:63:1d:79:69:57:73:ea:cf:8a:28:
                    c5:d1:c1:62:d0:07:74:9f:26:c7:c3:2f:c9:62:91:
                    d9:06:16:0e:c5:f9:db:fc:49:d7:15:f5:17:34:99:
                    e2:40:80:56:e3:ca:05:9b:4a:b7:9e:57:c5:33:e2:
                    38:5a:1f:99:86:9a:54:be:73:ae:e4:d3:be:9d:04:
                    bc:99:31:79:09:05:30:7b:e5:e8:29:03:d8:ca:15:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:0C:73:11:23:92:9A:94:BE:67:EF:F3:00:D7:5C:7A:B9:45:38
            X509v3 Authority Key Identifier:
                keyid:7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:a7:6f:b4:ab:a8:70:4b:33:fc:30:c4:93:7a:5b:f7:c3:
         84:64:df:61:ce:4d:bb:c2:cd:7f:3f:24:78:fb:1c:e4:a7:5a:
         ee:1c:57:ac:b4:e5:d0:cb:57:f4:de:c3:e3:32:db:06:a5:42:
         37:29:9b:b6:b4:a9:a8:26:d4:e5:30:b7:ca:80:8e:13:da:63:
         21:0d:0d:35:39:b2:1e:a1:47:8f:de:3f:38:5b:aa:3a:98:69:
         3f:eb:c4:eb:b6:6a:50:31:83:a3:ad:58:4f:e2:59:87:e3:bf:
         ed:d2:a3:ea:2a:0a:8c:6d:47:7d:23:96:d1:6f:61:7b:f3:fe:
         5c:da:5b:6c:d2:e1:01:46:ea:65:d3:00:c0:99:b9:42:d8:2e:
         d7:26:4b:81:a6:d2:e3:69:3a:b0:2b:50:52:fb:2e:93:cd:70:
         24:ab:16:3d:19:d6:be:26:4a:7b:e6:b2:10:fc:4c:6e:33:60:
         39:cb:13:4c:9b:8c:82:5b:02:89:7d:b8:27:c5:35:3c:e2:df:
         c4:3d:49:94:f4:76:71:d4:84:95:00:60:13:27:ed:0d:de:51:
         54:42:55:16:80:41:ee:1b:05:ae:5d:05:8a:d4:79:75:d4:a5:
         62:d1:1d:f5:83:f3:f2:95:9c:ef:1d:c5:0a:fe:8c:5b:1b:05:
         c0:83:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:41:06 2026 by rpki-client