Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
File:                     46AF3A717A403BC5489BF5532E8CB67721141841.mft (raw, json)
Hash identifier:          oasHcNipmlHkOqUMYyRlT/lcMdNZU6M1rwTcdzylPZQ=
Subject key identifier:   DB:1E:D6:61:D3:54:BA:69:67:67:01:AB:9E:28:92:29:AA:0A:75:AB
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Certificate issuer:       /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial:       6FE2872D0E7F67269FE6849CD2622DF6B6038E36
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 16:28:13 +0000
Manifest this update:     Thu 23 Jul 2026 16:23:13 +0000
Manifest next update:     Fri 24 Jul 2026 17:36:13 +0000
Files and hashes:         1: 323030313a6631383a3a2f33322d3634203d3e2039393136.roa (hash: 4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=)
                          2: 46AF3A717A403BC5489BF5532E8CB67721141841.crl (hash: v+XQXc91Fw8qgCSnJSYEVvY6On+7U5obx7j+7bu7rhs=)
                          3: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (hash: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
                          rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:87:2d:0e:7f:67:26:9f:e6:84:9c:d2:62:2d:f6:b6:03:8e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
        Validity
            Not Before: Jul 23 16:23:13 2026 GMT
            Not After : Jul 24 17:36:13 2026 GMT
        Subject: CN=DB1ED661D354BA69676701AB9E289229AA0A75AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:a2:75:a8:f9:de:b3:b0:a5:55:c8:89:14:
                    f0:f9:2d:01:f9:13:1a:b7:6d:6e:24:6d:77:1a:e5:
                    fe:6d:1c:36:6d:33:04:4b:21:6f:ab:71:ed:ea:75:
                    3f:f0:14:0e:01:1a:25:34:2e:c3:30:ce:7e:fe:67:
                    59:62:87:99:4f:03:03:74:5f:53:72:57:20:c8:00:
                    53:8b:0b:61:66:2a:f2:d4:8d:cc:77:50:56:48:be:
                    20:c8:ec:7c:99:88:23:9f:5c:71:a0:65:da:90:04:
                    f7:94:00:44:8c:83:1e:09:23:ca:f9:6a:bf:0e:17:
                    86:f9:9c:99:d4:39:54:f8:9f:2e:3e:b2:ba:b6:10:
                    b5:e4:e1:02:5b:6a:c5:09:53:fe:f4:12:ca:fe:67:
                    9f:38:df:26:68:ef:13:6b:5f:b7:8a:c1:88:cc:e2:
                    bc:2c:aa:74:a1:7b:4c:c5:f2:61:79:fb:bc:72:35:
                    2c:3e:c2:63:ac:3d:b5:e8:93:ca:ec:bc:65:c8:19:
                    cc:80:7e:8a:79:23:6f:67:69:ca:7a:19:a8:6f:59:
                    68:f6:c1:a5:e1:79:19:56:a1:54:21:ac:70:be:fd:
                    c2:36:34:32:25:b2:b6:83:9f:0f:39:4b:72:69:60:
                    ba:62:81:bd:0c:99:ac:98:22:ec:83:f5:ed:8b:58:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1E:D6:61:D3:54:BA:69:67:67:01:AB:9E:28:92:29:AA:0A:75:AB
            X509v3 Authority Key Identifier:
                keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:b2:5c:79:80:a2:cd:99:49:90:56:8a:14:fe:93:41:b4:
         30:7d:42:3c:dc:c0:ed:21:55:24:a0:1b:0a:14:18:01:22:03:
         b3:63:13:f2:53:35:a5:3b:48:3d:d6:7e:4e:3c:55:7a:79:89:
         22:47:a1:cf:eb:9a:ca:ac:8d:b4:e9:fe:08:59:e9:b3:54:84:
         64:f2:18:f6:6b:c8:5b:65:fd:25:bf:62:98:d5:ce:d4:ab:43:
         62:69:ce:0a:a2:d9:68:d7:a4:14:42:55:84:80:a8:62:82:42:
         15:5d:3d:60:57:96:6a:dc:40:71:72:4f:2d:ea:db:93:a3:99:
         9e:3e:fc:fa:59:be:22:04:1a:d1:96:9b:a8:89:ee:c0:28:4b:
         da:10:e4:77:34:16:ec:40:6b:31:4b:c5:ea:96:9e:5c:7f:90:
         14:33:5f:62:06:57:41:d4:11:75:ff:b2:f0:08:0e:22:37:c3:
         40:da:f6:ee:15:b0:a5:c7:9c:a6:06:8c:03:2c:31:d7:39:af:
         29:aa:0d:0f:00:bc:8a:bf:97:cb:cf:23:aa:49:c2:d9:d1:48:
         b1:17:8b:c0:ca:51:cb:d2:b8:e5:34:12:7d:f5:a0:79:48:6b:
         00:85:35:bb:bf:d1:38:53:8d:4a:eb:bc:b6:0d:52:93:f8:8c:
         1c:82:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:16 2026 by rpki-client