Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
File:                     E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json)
Hash identifier:          Ht3oOODlunTp5Cik+Ti3U9bkeOvlnWAyI4JYWJ+mPz8=
Subject key identifier:   A2:07:3A:17:04:56:29:16:4B:9B:F1:E5:A5:66:3F:E5:0D:E3:81:78
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Certificate issuer:       /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial:       7FB9605CC8BFE9FF88AA0869C65BF40860D33372
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
Manifest number:          68
Signing time:             Thu 23 Jul 2026 13:12:30 +0000
Manifest this update:     Thu 23 Jul 2026 13:07:30 +0000
Manifest next update:     Fri 24 Jul 2026 14:32:30 +0000
Files and hashes:         1: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=)
                          2: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=)
                          3: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=)
                          4: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: I7Lp5uvqervqsCFEaNasHZVTMi+lCvHQqc08tasb6Hg=)
                          5: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=)
                          6: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=)
                          7: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
                          rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b9:60:5c:c8:bf:e9:ff:88:aa:08:69:c6:5b:f4:08:60:d3:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
        Validity
            Not Before: Jul 23 13:07:30 2026 GMT
            Not After : Jul 24 14:32:30 2026 GMT
        Subject: CN=A2073A17045629164B9BF1E5A5663FE50DE38178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:e4:fc:fa:af:6d:3e:f0:ec:d0:f3:87:9e:
                    66:7c:49:e9:e8:35:0b:39:ed:c1:14:8f:21:15:08:
                    44:ea:ac:75:8d:4f:41:2e:f9:f8:d3:7f:27:0d:36:
                    54:75:8f:98:c0:c0:c7:29:70:e8:c5:9f:44:f7:dd:
                    20:8f:b2:49:f5:6c:2f:75:b9:e4:4b:72:c8:2c:9b:
                    f4:4a:dc:17:f6:e3:dc:54:2d:cb:f7:f5:6b:05:0c:
                    19:e9:a6:3d:b7:f9:f0:c8:76:f7:8a:a9:29:61:ce:
                    98:2c:74:ee:d8:32:4a:11:9b:ec:1e:30:40:84:b5:
                    54:06:2a:ac:3a:b9:4d:f6:a2:b1:99:07:d0:9f:7a:
                    5f:00:ca:be:a4:f8:8d:50:5e:18:c4:ae:65:62:4f:
                    e5:cc:a1:f4:78:97:a6:6f:54:cb:06:37:0c:46:2b:
                    91:12:96:79:96:f0:7c:fa:ea:70:35:be:24:ec:27:
                    9c:02:4f:37:d2:aa:ef:ff:b2:d3:97:b5:f3:c9:6c:
                    e6:73:2f:a6:de:39:25:cd:4b:8c:99:c9:fa:fe:ec:
                    d4:6d:df:86:fc:c4:35:45:dd:56:8d:38:4b:53:ed:
                    e3:9c:cd:41:51:d7:ab:b2:52:ca:1b:6d:f9:00:ff:
                    6b:42:97:ae:85:81:ad:b4:32:88:f6:ba:e3:a9:c8:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:3A:17:04:56:29:16:4B:9B:F1:E5:A5:66:3F:E5:0D:E3:81:78
            X509v3 Authority Key Identifier:
                keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:fa:f0:9d:67:4a:fc:c7:9c:c2:c8:3b:d6:c3:56:f3:e4:
         3e:d1:08:05:46:3a:75:89:93:50:5c:23:57:82:ac:c9:0c:cd:
         83:74:cd:b0:e4:c8:61:56:e3:d3:21:c8:5c:65:19:c5:45:3b:
         90:69:21:ca:d5:9a:1f:4f:af:9e:5d:00:aa:7f:59:f3:1f:99:
         ee:f9:49:24:65:80:a6:93:f7:5b:9c:f8:4d:1e:1d:c3:ae:e9:
         ca:b3:d7:f2:2c:6f:8d:9a:5b:48:cd:f0:58:ef:73:75:10:25:
         79:91:7e:54:85:f8:db:d0:f3:66:da:d1:0b:63:ea:0a:3b:83:
         cb:d5:de:94:5f:15:b4:ff:60:75:0b:da:94:8f:41:3f:ee:24:
         3a:f5:46:c3:62:9c:e4:92:b3:b8:46:92:2e:ae:c6:de:58:28:
         4f:4d:e4:d0:65:f0:e4:27:46:cf:4c:59:e5:4c:cc:bb:4b:14:
         ef:89:77:73:a2:4b:82:b2:99:df:26:f8:83:c2:03:1d:c1:4c:
         2c:3b:c6:8f:c9:53:58:fb:2a:2c:75:34:4f:4b:bc:cd:f3:00:
         77:81:fb:bf:f9:1b:3e:7d:f3:cc:73:58:93:95:5a:35:0f:0f:
         c8:36:12:82:5d:24:dc:a2:ea:b8:03:28:96:cf:70:c4:60:5a:
         cc:76:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:16 2026 by rpki-client