Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
File:                     4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json)
Hash identifier:          ym4aIvm1w83TgFFU1ms1eWR5AyIPtYSb+ML2BDeWFTo=
Subject key identifier:   A8:1D:17:53:15:DF:76:B5:43:3D:DD:D8:9E:8F:30:D4:02:52:40:D4
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Certificate issuer:       /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial:       54D652151A81B6EA62F9C8CC78D6A1C3077851F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 16:23:13 +0000
Manifest this update:     Thu 23 Jul 2026 16:18:13 +0000
Manifest next update:     Fri 24 Jul 2026 17:15:13 +0000
Files and hashes:         1: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=)
                          2: 3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa (hash: uAa17/lhm+61c0Btt+bZUFg6KW73rR0lwUGaXhSBPU8=)
                          3: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=)
                          4: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: nYpFJfQ+3JgqVd2ZH8LtvwUJDB5N8P+K2Cmoq1l9RfE=)
                          5: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
                          rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d6:52:15:1a:81:b6:ea:62:f9:c8:cc:78:d6:a1:c3:07:78:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
        Validity
            Not Before: Jul 23 16:18:13 2026 GMT
            Not After : Jul 24 17:15:13 2026 GMT
        Subject: CN=A81D175315DF76B5433DDDD89E8F30D4025240D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:5d:60:e7:8f:d5:c6:7c:30:5e:be:87:92:
                    36:ac:17:20:d1:38:62:09:eb:82:8e:de:a4:5b:3a:
                    f7:5c:c5:c7:ba:b4:79:2e:50:05:8a:00:3f:6b:29:
                    96:23:d6:26:83:63:db:9d:58:ab:a2:8d:24:fa:b6:
                    1e:ee:82:d0:28:3e:72:c0:f8:1c:17:6d:0d:59:2f:
                    b9:91:77:d9:66:e9:ab:93:98:a8:57:da:ce:37:c5:
                    5f:55:89:68:e8:dc:8e:c7:93:b0:b2:8e:57:78:d1:
                    85:55:72:98:a4:dd:fd:d9:ce:e8:22:78:e3:23:20:
                    10:70:9b:27:14:e1:bd:c7:2d:7a:d2:a0:31:b6:eb:
                    64:34:a9:a8:3f:78:1c:e5:e4:87:e8:87:58:11:9b:
                    fc:d2:ca:a7:bd:ce:a8:f3:1e:e0:68:4f:41:4a:27:
                    e9:e5:dd:54:b9:f7:96:63:70:0b:ab:3b:d4:bb:14:
                    27:a4:3c:2f:ce:25:1f:a8:60:23:0e:9b:a2:30:52:
                    a1:5e:bf:25:51:ee:db:89:da:b9:c3:05:3e:db:57:
                    a6:ee:a2:73:8c:b1:f8:7c:89:18:0a:ef:37:b2:cb:
                    be:71:dc:c8:1e:bb:96:73:a9:3a:03:ea:d2:5c:ac:
                    29:2b:93:44:1f:0f:59:ea:9e:e1:5a:8b:de:1a:21:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:17:53:15:DF:76:B5:43:3D:DD:D8:9E:8F:30:D4:02:52:40:D4
            X509v3 Authority Key Identifier:
                keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:b4:80:3d:91:6c:9a:c9:ff:ad:f8:07:c8:39:91:bd:90:
         3e:01:42:55:a1:bc:04:df:84:33:55:4e:99:35:da:e5:cf:8d:
         ec:ef:e6:90:b5:fa:25:88:85:2b:82:0c:32:3e:c7:99:7f:d5:
         e9:7e:0f:86:25:58:47:17:26:d7:9d:9d:1e:bd:69:e4:a9:a0:
         27:7f:82:14:47:41:bd:cc:f2:05:32:32:9d:e7:4a:b4:4a:52:
         0e:5a:e7:23:8d:d5:74:11:9f:fc:81:28:8f:4a:54:51:c8:3f:
         f9:fb:7b:1d:07:ea:dd:b7:9b:6e:ed:6e:aa:8f:ab:f2:96:93:
         76:ae:8c:61:6d:bf:ea:e1:11:9f:55:5a:27:06:d8:02:2f:8e:
         3e:3b:52:bc:41:ad:d2:0b:bd:a5:b9:90:5c:09:24:69:87:f9:
         dc:e0:85:32:2d:dc:95:62:ba:f6:bc:43:3c:4a:01:4d:48:d3:
         e1:b2:b3:0c:2e:28:a8:65:06:d2:3f:d0:e4:a8:45:3a:1a:09:
         48:46:ba:1a:92:8e:db:53:df:b9:24:77:2a:bb:77:60:5c:51:
         fd:1e:b0:a1:15:90:50:84:1e:59:4e:85:39:f2:76:59:8c:ef:
         e7:b0:d7:c5:1e:75:87:ee:46:0c:75:17:04:ff:37:7b:c9:3d:
         2e:ae:d6:28
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUVNZSFRqBtupi+cjMeNahwwd4UfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2
OTI3Q0RFNTAeFw0yNjA3MjMxNjE4MTNaFw0yNjA3MjQxNzE1MTNaMDMxMTAvBgNV
BAMTKEE4MUQxNzUzMTVERjc2QjU0MzNEREREODlFOEYzMEQ0MDI1MjQwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJV1g54/VxnwwXr6HkjasFyDR
OGIJ64KO3qRbOvdcxce6tHkuUAWKAD9rKZYj1iaDY9udWKuijST6th7ugtAoPnLA
+BwXbQ1ZL7mRd9lm6auTmKhX2s43xV9ViWjo3I7Hk7Cyjld40YVVcpik3f3Zzugi
eOMjIBBwmycU4b3HLXrSoDG262Q0qag/eBzl5Ifoh1gRm/zSyqe9zqjzHuBoT0FK
J+nl3VS595ZjcAurO9S7FCekPC/OJR+oYCMOm6IwUqFevyVR7tuJ2rnDBT7bV6bu
onOMsfh8iRgK7zeyy75x3Mgeu5ZzqToD6tJcrCkrk0QfD1nqnuFai94aIcKBAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUqB0XUxXfdrVDPd3Yno8w1AJSQNQwHwYDVR0j
BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU
V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy
NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky
NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Rh60gD2RbJrJ/634B8g5kb2QPgFCVaG8BN+EM1VOmTXa5c+N7O/mkLX6JYiFK4IM
Mj7HmX/V6X4PhiVYRxcm152dHr1p5KmgJ3+CFEdBvczyBTIynedKtEpSDlrnI43V
dBGf/IEoj0pUUcg/+ft7HQfq3bebbu1uqo+r8paTdq6MYW2/6uERn1VaJwbYAi+O
PjtSvEGt0gu9pbmQXAkkaYf53OCFMi3clWK69rxDPEoBTUjT4bKzDC4oqGUG0j/Q
5KhFOhoJSEa6GpKO21PfuSR3Krt3YFxR/R6woRWQUIQeWU6FOfJ2WYzv57DXxR51
h+5GDHUXBP83e8k9Lq7WKA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:42 2026 by rpki-client