Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
File:                     E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft (raw, json)
Hash identifier:          XN2IXOsIgLbwROj1ufK1gRZq67zEImrfVVmOHPxMNpY=
Subject key identifier:   43:1C:ED:CB:E4:5A:BC:AB:CF:ED:64:6D:10:E1:2E:23:87:EF:8D:C4
Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Certificate issuer:       /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Certificate serial:       2A088E9858EEEA1096C77C0C51A7F13CF7BC7509
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 23:11:57 +0000
Manifest this update:     Thu 23 Jul 2026 23:06:57 +0000
Manifest next update:     Fri 24 Jul 2026 23:25:57 +0000
Files and hashes:         1: 3130312e332e3130362e302f32332d3234203d3e20313331363237.roa (hash: dIu2HAzKgY8tsF+ru4LroiklsdB0TRzgo6DXCzkUrD4=)
                          2: 3130312e332e3230382e302f32322d3234203d3e203138303436.roa (hash: XM87/9ON2Xf/QGzj6rT0RtKfM2PuEXNJ74A1Cnr1n74=)
                          3: 323430303a346538303a3a2f33322d313234203d3e20313331353834.roa (hash: O2J4eWXJkGiGVi8Nfc+UGSjXYgk0OkcvnoYZxiChFgA=)
                          4: 3130312e332e302e302f31362d3234203d3e20313331353834.roa (hash: QK58oNISExBH1krqwRJCbzRqCkLst8b3ND7bZr4lRXQ=)
                          5: 3130312e332e3130382e302f32322d3234203d3e20313331363237.roa (hash: iW3JlIN5A995EIlO+TBTE4xqC/yg0mSkN0wLA/nSzJk=)
                          6: 3130312e332e3131322e302f32302d3234203d3e20313331363237.roa (hash: 3wt496awEnYwwpZNQ58z/adIZcyJrgZtgB4iF2zasaI=)
                          7: 3130312e332e3139322e302f32302d3234203d3e203138303436.roa (hash: DCKFllTlSbLNbzuoC0euAPFPDrrzy0IpFaoas/QL4IM=)
                          8: E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl (hash: UyuPuLiHyJTLs/fCcN+vC7F6ZCGd/tD8TLeKybBwIRc=)
                          9: 3131312e3233352e3139322e302f31382d3234203d3e20313331353834.roa (hash: 3bzUwei3vI+Rt1BxGcjlbg2IdRHH6ChS22TgA2/79zg=)
                          10: 3131312e3132352e3132382e302f32312d3234203d3e20313331353834.roa (hash: e6ftFEF4brrqIVQvmw++ScEtHuX8gFx4HkIDa3RxfKs=)
                          11: 34332e3235352e31322e302f32322d3234203d3e20313331353834.roa (hash: xr3wjSeSM0n7guHGwmE6uYuIWzUJyOCRwyP6tv6jeHE=)
                          12: 3130312e332e3132382e302f31392d3234203d3e20313331363237.roa (hash: R58GyJ8X3iL5gqABTlSZ2l8TcsR4L1wlBDeLxLqlwJk=)
                          13: 3130312e332e3136302e302f32332d3234203d3e20313331363237.roa (hash: UWPwqw+gUKOjXyTsGpZjTeY7xHZTI5H7Ey/Ze8kz3mk=)
                          14: 3130332e33312e3139362e302f32322d3234203d3e20313331353834.roa (hash: hhbM1mxSPKm73lOvIOEX/Lrg3HuvfBaeo6Zx6eRa330=)
                          15: 3130312e332e3138382e302f32322d3234203d3e20313331363037.roa (hash: 8hmZHoGRE9qrtw0fFrvqEJ3+cELlZQW6uupQRMNqI/Y=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:08:8e:98:58:ee:ea:10:96:c7:7c:0c:51:a7:f1:3c:f7:bc:75:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
        Validity
            Not Before: Jul 23 23:06:57 2026 GMT
            Not After : Jul 24 23:25:57 2026 GMT
        Subject: CN=431CEDCBE45ABCABCFED646D10E12E2387EF8DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:6a:e3:6b:1c:e5:17:81:e6:d6:24:e9:ee:
                    25:c6:d4:70:4a:44:1f:75:d0:9d:84:06:95:61:68:
                    74:27:de:63:e9:49:08:64:3b:24:76:ba:31:67:4e:
                    11:33:16:4a:b9:61:7a:93:72:ec:fa:7c:22:10:b5:
                    50:32:0f:c7:14:1b:ed:ef:30:20:29:35:2b:e4:6d:
                    2f:71:16:67:53:cd:78:fa:1b:0d:57:f0:87:5b:99:
                    e9:05:35:16:e9:c5:af:eb:d9:36:40:4f:c2:44:1d:
                    2f:79:81:fd:e3:f6:32:6d:16:be:57:86:82:cd:75:
                    9b:2b:92:98:77:7c:42:5e:6e:76:83:ca:bf:61:92:
                    54:4b:f1:4d:ab:59:87:20:1f:f6:31:36:16:e5:d8:
                    dc:62:06:df:e2:51:ff:36:fd:60:e6:09:57:7b:8d:
                    0e:f5:3a:35:09:1b:a5:8a:f3:97:f8:bd:96:c0:ad:
                    f5:19:20:3f:c2:ef:4d:0f:7a:79:bb:11:a8:19:b8:
                    af:df:45:9a:30:70:30:db:46:ef:7b:84:bd:f5:f6:
                    1a:e8:90:e5:6f:63:d0:34:11:8b:ca:84:c9:ff:98:
                    06:8c:f1:b3:a6:a2:ba:09:1c:39:7e:53:4d:25:47:
                    69:dd:b2:22:d6:e6:c4:e8:02:ec:da:b1:b4:ef:80:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:ED:CB:E4:5A:BC:AB:CF:ED:64:6D:10:E1:2E:23:87:EF:8D:C4
            X509v3 Authority Key Identifier:
                keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:72:49:67:5b:cd:8c:26:f5:ca:af:0c:6f:25:4f:6d:d2:
         ea:33:6d:0d:2e:f9:fe:df:61:31:8d:c4:25:64:af:f7:9a:41:
         82:e7:0a:8d:3c:c0:10:b4:c1:05:9d:c6:83:25:a8:cd:42:5e:
         f4:f1:f2:ed:fd:9e:3c:98:dd:72:03:65:8f:38:14:5f:68:0c:
         e2:d9:4d:63:de:c3:5d:c1:70:e0:f8:7a:80:59:0e:e8:b3:d1:
         b9:12:31:b4:4a:72:f8:61:96:01:56:31:60:88:6f:a0:ea:ed:
         f4:2a:f7:0b:fe:4b:1b:4b:97:91:a6:c0:52:ce:d2:25:82:41:
         35:fa:71:05:e7:0f:72:db:db:c0:e2:73:1d:8b:90:61:23:a0:
         e1:f1:d4:4f:35:75:6e:3b:cf:fd:d5:5c:ab:7f:a5:33:4e:0a:
         4d:45:cb:d2:e4:ad:aa:fb:e9:8b:af:f7:bb:6a:ac:a1:82:30:
         dc:9f:5e:a6:78:b6:34:03:d0:63:34:13:8d:e1:a0:6a:c4:ec:
         6f:43:20:9f:a8:3c:6f:7a:c0:14:ac:79:8c:c2:8a:77:82:b6:
         f8:14:70:d6:96:47:1d:55:69:65:48:77:ac:c2:a7:9b:7f:6b:
         95:bb:3a:d7:14:38:c0:04:6e:34:9e:3f:7d:f4:54:98:03:b0:
         83:ca:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:40 2026 by rpki-client