Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
File:                     BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json)
Hash identifier:          jslTwjnmjryDctURXapbCIwW+5tgRkyLGih2H9sMXic=
Subject key identifier:   BC:7E:A5:AC:91:88:78:80:6D:0F:62:3A:E4:60:CA:EC:B2:19:D0:B9
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Certificate issuer:       /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial:       6F74365875147F5782B66D7B50E4481D4D2E9F52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
Manifest number:          FF
Signing time:             Sat 14 Nov 2026 19:19:08 +0000
Manifest this update:     Sat 14 Nov 2026 19:14:08 +0000
Manifest next update:     Sun 15 Nov 2026 22:17:08 +0000
Files and hashes:         1: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=)
                          2: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=)
                          3: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: bP/OzDcEjy6yOyaQG3pNY5B8N/bLpbBEdCjRKz8iD5o=)
                          4: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=)
                          5: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=)
                          6: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
                          rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 22:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:74:36:58:75:14:7f:57:82:b6:6d:7b:50:e4:48:1d:4d:2e:9f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
        Validity
            Not Before: Nov 14 19:14:08 2026 GMT
            Not After : Nov 15 22:17:08 2026 GMT
        Subject: CN=BC7EA5AC918878806D0F623AE460CAECB219D0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:36:73:20:99:ad:c6:36:34:a3:e7:ec:ee:
                    94:57:e2:b0:3f:8d:c4:1f:05:80:16:97:6a:79:aa:
                    11:f8:84:76:38:b7:97:e1:e0:21:2b:0a:74:ba:55:
                    9c:ad:f5:67:f3:a0:9f:d6:dd:75:75:71:c7:ef:83:
                    c1:94:d9:b1:db:c3:90:bd:2e:c6:4d:98:72:72:d9:
                    ce:4c:db:5d:f7:bc:17:74:e3:2b:e7:02:db:37:eb:
                    97:64:34:cd:78:bd:51:1f:32:7a:be:11:97:8c:5b:
                    a0:91:9a:7c:45:9a:37:a7:57:1a:f6:2d:3b:86:4d:
                    98:ef:43:48:47:cb:1b:d2:14:32:b4:7e:5d:0a:54:
                    fc:fe:b1:07:bd:8d:f9:5d:37:c0:2e:c8:06:e1:a9:
                    1f:33:d6:91:1b:1c:e0:1a:5e:c5:ba:7f:51:19:95:
                    8f:a1:db:97:6a:6e:37:04:12:e7:aa:d0:a7:72:bf:
                    9d:d3:b6:9f:89:8f:6e:a3:e1:0f:2b:d5:5b:6b:7a:
                    a1:b3:05:11:4b:f4:fa:cc:9b:aa:2f:ae:61:0a:61:
                    2c:82:92:6e:23:47:12:2b:17:41:6e:e1:5d:45:57:
                    7f:a9:de:df:83:f2:f7:17:4e:f2:1b:cb:aa:4f:71:
                    02:13:04:dd:13:71:d4:91:91:30:1d:a7:e4:4e:61:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7E:A5:AC:91:88:78:80:6D:0F:62:3A:E4:60:CA:EC:B2:19:D0:B9
            X509v3 Authority Key Identifier:
                keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:2b:d3:8a:43:20:81:e4:10:87:02:05:c0:96:fc:2d:08:
         01:ec:3a:38:ee:ab:21:ee:5d:c4:c6:78:b2:75:5f:12:39:71:
         d0:ea:27:f6:20:8b:6d:d5:27:fe:e7:66:87:f4:ec:db:bc:4b:
         c4:92:a3:58:80:be:08:05:15:7d:d5:c4:6e:e1:84:aa:fd:d5:
         a4:8c:64:bb:96:83:f4:c3:a4:b6:48:3c:83:ca:3c:62:6a:9e:
         31:c9:c0:ef:0d:8b:5a:d7:2f:8e:51:5c:5a:bf:c0:fb:b7:38:
         3b:5a:7b:c6:a0:c0:ba:44:04:76:0d:6e:29:ba:2a:45:89:47:
         c5:0f:35:a2:1d:09:0b:dd:31:ab:37:66:52:9e:94:24:17:b2:
         91:10:ae:13:73:8a:ee:1e:ca:cc:eb:cf:0e:b7:66:cb:86:20:
         1d:4d:96:8f:86:ec:c4:97:78:80:11:2a:3d:b1:d2:77:11:fa:
         b7:2b:6a:3e:19:18:40:c1:12:ac:6e:ab:b8:ad:74:e9:ac:c8:
         57:a3:c1:51:42:7e:5a:7b:b2:68:a8:cd:34:cb:17:61:5c:d8:
         02:5d:07:3a:11:de:58:fb:91:05:69:d1:f8:6f:14:a9:ed:f2:
         68:cc:2e:30:10:02:9e:39:6e:e4:b0:fa:a3:5e:42:e6:0e:60:
         a5:25:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:07:44 2026 by rpki-client