Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File:                     D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier:          QyomfImH2BjCuw2diASTzrsJOusD3qCbhiWfYJ5fZ7I=
Subject key identifier:   B8:97:A0:62:C8:33:DD:0E:E7:67:DC:87:A4:C8:D4:18:B4:BB:CF:83
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer:       /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial:       41C9F1EBF82CD55E69538E9C607A1CB5197BC78E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number:          63
Signing time:             Fri 24 Jul 2026 02:37:20 +0000
Manifest this update:     Fri 24 Jul 2026 02:32:20 +0000
Manifest next update:     Sat 25 Jul 2026 04:42:20 +0000
Files and hashes:         1: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: C9erBtNpYd9VbF8oQ7Zml0DehdnAj1cseFr6JUxoYXE=)
                          2: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
                          rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c9:f1:eb:f8:2c:d5:5e:69:53:8e:9c:60:7a:1c:b5:19:7b:c7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
        Validity
            Not Before: Jul 24 02:32:20 2026 GMT
            Not After : Jul 25 04:42:20 2026 GMT
        Subject: CN=B897A062C833DD0EE767DC87A4C8D418B4BBCF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:4f:88:cc:2b:79:ef:b4:45:90:cd:20:b5:
                    e2:72:0c:f0:a7:83:76:8a:83:17:64:dc:81:40:68:
                    57:f7:e2:ee:2e:45:f2:b4:32:fb:5f:0a:94:24:b0:
                    4d:56:6f:ca:bc:a6:63:e7:70:2f:68:7c:47:5a:30:
                    06:96:d3:d7:00:70:9a:b2:3f:08:cb:67:13:67:91:
                    39:59:79:10:39:f3:05:55:13:4f:66:c2:d4:8e:c2:
                    92:64:d7:46:7a:f4:68:3a:e9:29:9e:7b:ae:8f:4e:
                    eb:5c:55:45:6d:b8:0b:55:50:72:ee:7a:ea:8d:23:
                    74:ca:bc:3f:78:a0:2d:bd:d4:c8:d9:5d:21:3b:f0:
                    25:b9:09:c7:99:90:fc:cf:6f:19:e4:1f:0d:a8:7f:
                    19:76:a3:1f:13:15:a7:8d:d6:e8:71:80:dd:46:20:
                    a7:0e:81:f2:58:48:00:b8:11:0a:cd:51:c4:bc:19:
                    6b:ba:d8:55:1e:e1:cc:64:56:d4:35:1e:fc:9b:27:
                    01:1e:20:2f:ea:34:2b:ff:a9:ec:1d:2f:a5:fb:39:
                    df:22:6c:cd:57:f9:12:1c:d7:74:de:36:c4:3d:b6:
                    c3:8e:fa:68:13:06:04:36:c1:2e:ac:f2:3c:8f:40:
                    4f:61:f1:79:34:5e:e0:4b:2b:96:5c:c9:20:8d:1b:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:A0:62:C8:33:DD:0E:E7:67:DC:87:A4:C8:D4:18:B4:BB:CF:83
            X509v3 Authority Key Identifier:
                keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:6e:72:30:9f:d8:74:3e:27:0c:cb:74:51:1f:c2:6c:47:
         ae:a1:d1:4d:5a:54:cb:2c:18:3b:30:cf:5c:a7:f1:e8:83:09:
         ef:ea:3b:cf:7e:c9:64:4e:7f:f0:6a:4a:12:0f:c5:62:33:37:
         97:3a:8b:53:ca:5a:2a:12:91:f9:00:ef:91:3e:d8:42:62:54:
         bf:0a:18:9e:0e:00:57:09:f9:fb:33:63:91:f8:f0:08:c9:6f:
         c6:be:71:ff:ac:5a:73:c6:8b:f1:b7:0a:f8:d5:ae:c3:83:c4:
         86:6b:a4:e8:a6:a2:80:7c:a6:6e:18:5e:c8:43:c6:c6:93:07:
         b4:ea:4e:52:42:f8:e5:fa:18:0b:ca:a6:00:c4:03:09:2f:f7:
         08:2d:24:67:bb:e4:41:a4:01:78:07:fb:31:61:74:32:44:73:
         0a:2d:3d:9f:11:f3:7a:47:5f:13:56:34:4a:35:4e:8b:36:e0:
         0d:f8:69:67:ea:9f:07:1e:24:3e:a8:cf:98:48:cf:34:85:a2:
         6d:b9:71:dc:d1:d9:4f:dd:cd:e0:6c:71:8f:90:a8:ca:2f:f3:
         5a:bb:fb:47:3a:50:98:99:dc:16:9a:e4:b8:01:1c:e1:b2:18:
         35:74:b7:31:c5:15:17:44:b5:30:73:27:63:55:31:45:12:83:
         47:68:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:58 2026 by rpki-client