Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File:                     164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier:          /zKaKPHC6S8Ef5VhxPtFOHiIIZJcBOH/Y5DXK7/xycs=
Subject key identifier:   E3:2F:98:8B:C6:FE:D1:AC:80:C0:E6:54:A8:EC:75:13:E9:79:F3:4B
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer:       /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial:       12B65E82572ADA14D63EB5A5864F8734126B7E37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 14:07:37 +0000
Manifest this update:     Thu 23 Jul 2026 14:02:37 +0000
Manifest next update:     Fri 24 Jul 2026 16:44:37 +0000
Files and hashes:         1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: uqi4RVsLnDYWaxoTcr/+btPxObnwWNtVnsnDcNJTaJg=)
                          2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
                          rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:5e:82:57:2a:da:14:d6:3e:b5:a5:86:4f:87:34:12:6b:7e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
        Validity
            Not Before: Jul 23 14:02:37 2026 GMT
            Not After : Jul 24 16:44:37 2026 GMT
        Subject: CN=E32F988BC6FED1AC80C0E654A8EC7513E979F34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:19:5b:4e:1d:85:6e:48:e1:be:19:e9:82:
                    3c:d9:23:28:de:6b:43:89:c2:f0:ac:b7:9f:ee:39:
                    15:01:7d:77:b5:f0:fc:b9:b8:fc:68:c6:86:47:f9:
                    14:67:03:1f:83:1f:00:b1:38:55:07:54:5f:c8:2d:
                    9f:75:ad:18:1e:ef:30:83:97:e7:42:a7:d8:bf:00:
                    18:8e:ff:69:67:d3:be:16:38:f1:0d:04:21:ae:c4:
                    b8:fd:e5:a1:37:a9:f1:4a:28:31:2a:16:31:80:49:
                    47:5c:37:6d:32:e2:b9:9c:40:29:92:60:ae:53:d6:
                    e9:38:e5:2b:e9:0e:0e:c6:72:ae:47:83:81:b1:50:
                    0a:45:1b:df:f2:7d:b2:e0:f5:01:ff:10:9d:7a:b6:
                    59:11:7e:d8:41:95:66:e9:5f:35:1c:10:cf:c2:6b:
                    8e:d9:1e:df:91:55:a9:29:33:dc:d6:db:c3:28:55:
                    a5:81:9e:c1:82:f2:b0:d9:6b:11:33:c8:5a:83:1d:
                    73:f0:b0:dc:14:2e:ad:e8:f3:80:79:da:37:e8:6a:
                    ea:08:e1:91:5b:1d:77:b2:1f:fa:d5:f9:0f:a2:c2:
                    be:3c:c2:25:18:b1:54:32:7a:fc:cd:17:3d:c0:cd:
                    e8:2c:60:8f:8e:ca:71:c9:ac:0e:a3:d7:ed:09:3b:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2F:98:8B:C6:FE:D1:AC:80:C0:E6:54:A8:EC:75:13:E9:79:F3:4B
            X509v3 Authority Key Identifier:
                keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:71:35:54:5e:29:e2:5e:e2:bc:f5:a8:f6:28:16:32:9f:9f:
         e6:1e:f4:6c:5f:49:94:65:00:c6:09:72:7e:9e:1b:4c:f4:db:
         c9:13:c9:3c:e1:b6:69:9d:7a:7d:8c:4e:0a:52:be:85:3c:5b:
         ec:ba:96:e2:12:9e:60:ec:63:dd:2b:10:ee:78:7d:81:9e:d7:
         73:bf:bc:73:a3:16:7b:cb:de:b3:bf:5d:f2:9d:9c:09:63:7e:
         37:82:0e:48:77:96:73:e8:0a:a6:d2:22:9d:11:4b:ec:a9:14:
         d7:3c:d9:79:d6:86:86:65:d3:4e:7f:24:e7:da:30:d5:9e:cf:
         48:5e:75:1c:aa:97:e2:ae:f1:c2:83:a9:46:15:30:7b:61:e0:
         d8:e8:c7:99:19:be:01:06:59:6f:6d:44:6a:91:d4:ab:3f:eb:
         69:98:af:54:4f:d3:8e:fa:de:52:ec:52:ee:f5:07:95:33:a2:
         26:0d:63:6a:e6:be:63:8c:d1:c2:00:fa:78:86:cd:15:1b:08:
         f9:9e:2b:ce:bc:95:fb:b5:6b:dc:67:1a:fd:6a:cb:1d:bb:c2:
         0a:13:e0:ef:f2:d5:50:01:8d:1f:af:94:a3:4a:64:89:43:9b:
         85:7a:cc:7f:9c:ad:85:46:9d:0d:25:7b:cd:58:b4:4c:8f:0b:
         90:8c:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:19 2026 by rpki-client