Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File:                     71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier:          MNWAWsXSM7Yi83MdkKbLlC7fWe8+1ZVBX9PCyupG1LE=
Subject key identifier:   69:FA:B4:29:74:F1:01:1F:89:06:D0:C7:C4:B2:11:08:21:96:86:54
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer:       /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial:       7927F35095C17B79BFD51897F5555B79B619F7B4
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number:          0195
Signing time:             Tue 12 May 2026 19:56:22 +0000
Manifest this update:     Tue 12 May 2026 19:51:22 +0000
Manifest next update:     Wed 13 May 2026 22:33:22 +0000
Files and hashes:         1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
                          2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
                          3: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
                          4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: zQXVFSt+WSx57iYAUpRvRHQfDaPKQhBsf4S8We1WRuA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:27:f3:50:95:c1:7b:79:bf:d5:18:97:f5:55:5b:79:b6:19:f7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Validity
            Not Before: May 12 19:51:22 2026 GMT
            Not After : May 13 22:33:22 2026 GMT
        Subject: CN=69FAB42974F1011F8906D0C7C4B2110821968654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:84:44:f1:42:fe:5d:ef:da:d9:fa:14:d7:
                    9f:90:54:9b:46:9b:a8:57:0c:12:0c:16:3a:a5:19:
                    12:98:b4:75:42:4a:c0:27:c2:e5:0f:38:7b:63:3f:
                    9d:d5:5b:c0:4c:ce:2f:4a:ee:a5:43:9c:58:c9:05:
                    9b:ed:70:d5:1c:28:1b:d7:7f:bb:65:96:f1:4a:5f:
                    47:b2:f7:2e:64:e6:5f:a7:10:15:81:0e:26:d7:8b:
                    f2:e8:96:43:8d:cf:1d:4a:e0:ce:a2:4f:9e:0f:70:
                    07:d6:73:15:c4:60:69:f7:d0:bd:28:d8:22:f3:5a:
                    3b:d4:c9:49:02:f4:04:7b:b4:64:c1:92:98:17:66:
                    3e:4f:ca:fe:b5:3c:72:34:b5:c5:8a:35:f5:8d:14:
                    3c:66:d7:2d:b6:c8:3a:d8:94:f0:aa:e0:d4:70:e5:
                    82:db:68:11:55:dd:66:5a:16:48:6e:09:0c:52:1a:
                    73:38:7b:af:cf:5e:3c:08:26:58:6b:52:80:da:f3:
                    03:52:4f:28:72:15:d3:fa:34:9f:c4:2c:c8:3c:2b:
                    3d:7e:f9:75:60:91:48:32:67:9f:3d:3f:cc:0b:ae:
                    b0:f5:e4:77:03:99:00:60:cf:80:84:f4:64:db:35:
                    4f:f0:41:4f:5d:d5:aa:7b:40:90:a9:9a:d1:d9:7b:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:B4:29:74:F1:01:1F:89:06:D0:C7:C4:B2:11:08:21:96:86:54
            X509v3 Authority Key Identifier:
                keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:26:a0:4c:24:61:b0:6c:62:8d:91:aa:83:58:35:67:a7:
         bb:ba:a2:1a:e6:6c:33:b4:ff:f7:fe:ce:01:4e:c3:41:1a:ee:
         49:d9:1c:af:bd:a1:8e:ec:6f:29:42:33:f2:6e:ad:91:57:06:
         18:2a:a6:8b:a1:82:6e:79:b4:66:5e:51:1c:5f:83:62:61:0b:
         65:f0:df:28:3f:95:7e:6a:1f:17:32:79:dd:9e:48:47:2e:10:
         01:ea:64:9b:db:fe:96:21:51:d7:0b:02:bd:ae:b1:38:2b:7e:
         fc:18:ed:2f:b1:10:d4:22:a7:35:d7:c3:ac:a9:e6:11:ea:9b:
         b3:ff:eb:38:a3:5d:dc:57:4d:0a:99:93:e8:ed:0d:7b:f0:1c:
         88:19:78:6a:47:ae:f2:95:76:b6:a1:e1:37:23:45:55:1e:5b:
         fd:c1:68:6a:6f:22:0f:91:a6:45:42:a1:ef:02:e1:7d:82:f7:
         60:31:a1:60:07:86:36:cc:a1:96:8e:04:7e:5c:86:c3:3f:ff:
         53:dd:32:fe:f3:33:25:c1:d0:18:bc:c1:ef:88:7e:37:61:27:
         8a:7b:c4:41:ef:b6:d8:1c:b9:d6:1f:6d:37:d3:80:87:20:07:
         e2:ce:e5:06:56:dd:18:06:69:6a:fd:3f:a8:b4:38:1e:85:bf:
         dd:b3:3a:5f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUeSfzUJXBe3m/1RiX9VVbebYZ97QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz
QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDUxMjE5NTEyMloX
DTI2MDUxMzIyMzMyMlowMzExMC8GA1UEAxMoNjlGQUI0Mjk3NEYxMDExRjg5MDZE
MEM3QzRCMjExMDgyMTk2ODY1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7YhETxQv5d79rZ+hTXn5BUm0abqFcMEgwWOqUZEpi0dUJKwCfC5Q84e2M/
ndVbwEzOL0rupUOcWMkFm+1w1RwoG9d/u2WW8UpfR7L3LmTmX6cQFYEOJteL8uiW
Q43PHUrgzqJPng9wB9ZzFcRgaffQvSjYIvNaO9TJSQL0BHu0ZMGSmBdmPk/K/rU8
cjS1xYo19Y0UPGbXLbbIOtiU8Krg1HDlgttoEVXdZloWSG4JDFIaczh7r89ePAgm
WGtSgNrzA1JPKHIV0/o0n8QsyDwrPX75dWCRSDJnnz0/zAuusPXkdwOZAGDPgIT0
ZNs1T/BBT13VqntAkKma0dl7ZscCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRp+rQp
dPEBH4kG0MfEshEIIZaGVDAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ
GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1
NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx
RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI
VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw
NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB
CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLGiagTCRhsGxijZGqg1g1
Z6e7uqIa5mwztP/3/s4BTsNBGu5J2RyvvaGO7G8pQjPybq2RVwYYKqaLoYJuebRm
XlEcX4NiYQtl8N8oP5V+ah8XMnndnkhHLhAB6mSb2/6WIVHXCwK9rrE4K378GO0v
sRDUIqc118OsqeYR6puz/+s4o13cV00KmZPo7Q178ByIGXhqR67ylXa2oeE3I0VV
Hlv9wWhqbyIPkaZFQqHvAuF9gvdgMaFgB4Y2zKGWjgR+XIbDP/9T3TL+8zMlwdAY
vMHviH43YSeKe8RB77bYHLnWH20304CHIAfizuUGVt0YBmlq/T+otDgehb/dszpf
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:55 2026 by rpki-client