Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
File:                     7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft (raw, json)
Hash identifier:          t2Hqp8GjPlaWat8WL65Uc8sMfU8ay08UMFe1LGdjZcw=
Subject key identifier:   31:2F:3D:6E:EE:BD:90:A0:7A:57:2F:A7:CA:01:17:B1:8D:EC:6E:EB
Authority key identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C
Certificate issuer:       /CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
Certificate serial:       5B8766A5BBEEF719ECF5CBD0714567ABEB397B45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 08:38:00 +0000
Manifest this update:     Fri 24 Jul 2026 08:33:00 +0000
Manifest next update:     Sat 25 Jul 2026 12:13:00 +0000
Files and hashes:         1: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl (hash: ACxxBbjvWiUnKTfupsXWTqMXDpKQhjligLYetLoHU88=)
                          2: 3135372e32302e3130382e302f32332d3234203d3e2039393137.roa (hash: ckB7c4m0dSGjfbDc1BMRa8lcfk7IIMuWAbfJoeOYzj8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:66:a5:bb:ee:f7:19:ec:f5:cb:d0:71:45:67:ab:eb:39:7b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
        Validity
            Not Before: Jul 24 08:33:00 2026 GMT
            Not After : Jul 25 12:13:00 2026 GMT
        Subject: CN=312F3D6EEEBD90A07A572FA7CA0117B18DEC6EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:c4:13:27:ed:31:12:1c:a0:6d:82:ba:31:
                    c2:56:af:f1:da:7d:e4:9b:39:1c:91:46:c0:7d:ac:
                    55:e1:b3:26:0f:7e:50:18:6e:e0:cf:4e:93:fc:ca:
                    d7:22:87:6f:78:56:13:c7:c8:80:68:6d:0d:58:47:
                    8f:d5:ac:20:57:c0:4b:bd:e0:ac:0a:bb:ba:62:d0:
                    69:b2:56:9e:e6:6b:15:f9:04:67:2d:fe:bf:cf:38:
                    ea:68:44:1c:c7:e2:73:a8:b9:f6:d1:aa:22:16:ce:
                    b1:42:20:09:50:22:52:7d:ec:e1:c2:6d:b5:bf:56:
                    5c:82:1a:4e:f9:04:2c:5c:42:72:de:b4:5e:66:a8:
                    94:f7:27:1e:b5:e4:0d:cc:9d:d1:20:bd:cc:0d:ac:
                    68:f7:2d:5a:82:fd:02:e9:ab:40:56:c0:3d:28:a4:
                    04:d7:f8:bf:84:f9:93:12:d6:f9:c2:08:a1:97:97:
                    ed:28:bd:55:95:fc:f6:bc:05:a3:47:6b:2c:e8:8d:
                    16:3e:2d:95:d7:c2:d7:3a:00:e3:7c:da:0b:6c:5e:
                    0b:8a:2b:03:06:63:ea:b7:e3:12:28:9b:3a:b8:d3:
                    5c:4b:c7:ba:be:47:60:5b:bb:b1:b6:b6:c4:a9:27:
                    28:71:0a:ae:7f:db:7c:5c:f8:19:ad:0b:ca:b7:8b:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:3D:6E:EE:BD:90:A0:7A:57:2F:A7:CA:01:17:B1:8D:EC:6E:EB
            X509v3 Authority Key Identifier:
                keyid:7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:95:8f:58:1e:14:20:f3:f5:c9:b8:62:b8:95:bf:85:ee:
         b1:0f:33:c0:da:be:35:ef:27:b2:e4:9f:cd:5a:e9:0d:9e:59:
         2a:07:23:66:50:5f:7d:5c:21:bd:3c:38:a4:23:ab:bb:99:63:
         1e:95:5d:49:66:af:46:cb:fd:50:a4:9d:50:41:9b:9d:5a:03:
         10:18:30:50:24:3b:e6:58:78:fe:27:ef:e9:28:7c:f3:27:89:
         e8:31:37:94:5a:20:dc:9c:cf:88:8d:0b:ef:e1:f5:f0:e5:51:
         86:bb:12:34:05:f6:13:9c:92:f1:08:ec:0e:64:ee:27:d6:2d:
         62:95:3d:8d:ee:8e:4e:be:b0:7f:d9:ee:23:59:04:cb:f9:8e:
         79:0a:bb:61:75:f0:9c:8f:86:d3:52:c1:5a:a3:b1:e8:0b:8d:
         71:ed:05:0d:d5:aa:fc:65:b2:92:f2:f5:09:be:11:32:57:2e:
         e9:71:9a:66:63:2a:53:63:10:0e:97:c6:eb:59:60:1b:45:87:
         e4:88:e6:70:28:d1:06:50:c6:81:c5:2a:1c:ce:70:80:c1:f2:
         52:f2:61:7e:55:20:0d:23:dd:6c:54:ab:c8:5d:d1:e8:6b:2f:
         76:f5:85:a1:1b:e7:07:77:68:82:0e:52:3d:32:bb:eb:3b:f8:
         aa:64:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:22 2026 by rpki-client