Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
File:                     59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json)
Hash identifier:          9QvThEsgm/u4mXtkw4MX8EH2SUq8TpHYXy7b7rHCgBc=
Subject key identifier:   1A:C3:71:38:42:B5:40:1D:E1:86:CE:F9:62:72:A5:82:0A:36:DB:71
Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
Certificate issuer:       /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Certificate serial:       0CF365354DDAFFA9336E861B246BE87814A9B14C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 22:56:55 +0000
Manifest this update:     Thu 23 Jul 2026 22:51:55 +0000
Manifest next update:     Sat 25 Jul 2026 01:49:55 +0000
Files and hashes:         1: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=)
                          2: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: xY2oEZNURrMbP4ogpy+nFWmRMwBgytDeLk+U7LEN/sw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
                          rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:65:35:4d:da:ff:a9:33:6e:86:1b:24:6b:e8:78:14:a9:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
        Validity
            Not Before: Jul 23 22:51:55 2026 GMT
            Not After : Jul 25 01:49:55 2026 GMT
        Subject: CN=1AC3713842B5401DE186CEF96272A5820A36DB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:03:04:fc:fa:f4:dd:da:52:89:84:4a:1d:
                    86:30:83:9e:a3:45:16:b1:37:6c:b6:07:ca:d8:40:
                    b0:c2:a0:ce:ae:01:03:9b:95:e3:15:70:60:d5:55:
                    ac:44:c0:9b:da:49:1f:ec:9e:f2:8c:a7:ec:55:1c:
                    d7:c9:21:32:98:02:7b:3c:1d:ce:c7:f2:c2:16:f6:
                    49:80:ed:7c:2f:38:35:45:2e:4e:c5:91:a5:71:88:
                    38:35:b8:3b:31:de:54:44:97:51:ac:a8:0a:cd:27:
                    4e:db:a2:68:07:fa:7e:ee:b9:2c:b7:18:fd:f4:0c:
                    ad:41:f0:bb:66:a6:0b:9d:44:03:10:87:1b:da:6c:
                    8e:34:bb:c2:7f:9f:e5:b1:57:b8:e6:5c:8c:e8:42:
                    10:c3:4c:1b:13:6b:bb:d7:e6:3f:bd:73:7c:9d:e8:
                    f6:c5:fe:fc:e5:2a:21:95:40:59:de:96:e0:b8:06:
                    fd:25:4a:58:93:7c:6e:64:ab:80:b4:7e:ae:c3:b0:
                    81:e3:b8:09:3d:11:eb:a2:d7:01:e7:d8:5c:b1:74:
                    0a:dc:3e:57:d0:44:3a:f5:64:92:c8:52:e5:ee:f4:
                    f3:e6:ea:d9:50:c1:e8:5d:21:36:e5:b9:00:1e:a8:
                    ef:b0:5d:5c:a8:03:09:b2:0a:31:f8:45:2c:fb:12:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:71:38:42:B5:40:1D:E1:86:CE:F9:62:72:A5:82:0A:36:DB:71
            X509v3 Authority Key Identifier:
                keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:88:0f:05:62:8a:91:0b:17:36:74:4a:f8:96:a1:7d:44:61:
         cf:17:89:ee:96:93:37:7a:3e:3f:4a:94:5c:7f:da:3e:3e:39:
         2f:eb:2a:80:0b:ae:56:5e:a0:7a:da:2e:4c:da:39:d0:42:af:
         b6:fa:81:38:77:a3:69:21:4e:fa:01:b7:d8:01:c6:1d:79:4e:
         d9:08:07:c6:4f:0f:58:a1:02:61:bb:1b:34:66:88:06:7d:1e:
         5c:4f:41:b6:56:78:cb:80:f3:a4:92:0a:fa:13:e4:d8:40:e3:
         dc:8e:aa:6a:e9:9d:ef:68:93:a6:8c:7e:e6:4d:93:b7:e1:b3:
         64:6e:8e:38:26:39:e4:f4:89:7c:6c:00:5d:95:16:ba:67:f7:
         e9:a5:9b:53:04:2f:3a:e3:7a:96:c3:c1:92:72:80:99:5c:44:
         8e:0d:98:10:27:a6:81:83:3e:ac:d6:51:16:ca:11:b0:a6:e6:
         b0:4e:77:26:63:05:a0:6c:f6:d9:a9:96:cc:5a:8d:76:e4:e9:
         cf:a6:87:65:db:7a:19:0d:bd:ea:3d:f3:b5:49:a4:e4:fb:9a:
         26:3a:30:81:39:f6:c2:85:c1:93:74:b4:cd:ed:56:98:c9:27:
         e5:1d:28:1d:89:45:99:84:bf:d5:cd:71:2b:53:99:70:d1:32:
         ed:ac:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:25 2026 by rpki-client