Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
File:                     F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft (raw, json)
Hash identifier:          tVTZpIumNdT3R+/SsocuLjeJ7J2dxRSEgIXRWt+HB1E=
Subject key identifier:   CC:BE:B4:B1:4E:31:71:55:A0:94:19:FE:B0:3F:13:B9:6F:0C:3E:9D
Authority key identifier: F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5
Certificate issuer:       /CN=F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5
Certificate serial:       46C0B5AC7CCDEABC3D347B6B3FC9344A9E2780C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 12:23:24 +0000
Manifest this update:     Fri 24 Jul 2026 12:18:24 +0000
Manifest next update:     Sat 25 Jul 2026 14:17:24 +0000
Files and hashes:         1: 3136302e3139312e3136382e302f32332d3332203d3e20313331363432.roa (hash: olCALbpISVNB6I6rPsYYYq/ycNKUieDPKL/Ptpbu7Fc=)
                          2: F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl (hash: NEBj8ViGamHCLd8XQRBkQUh+ujpxyRN/we0B0ojrdsc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl
                          rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:b5:ac:7c:cd:ea:bc:3d:34:7b:6b:3f:c9:34:4a:9e:27:80:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5
        Validity
            Not Before: Jul 24 12:18:24 2026 GMT
            Not After : Jul 25 14:17:24 2026 GMT
        Subject: CN=CCBEB4B14E317155A09419FEB03F13B96F0C3E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:b5:20:0f:14:3c:39:68:ea:14:09:44:48:
                    e1:35:54:09:79:c6:87:10:0b:2a:5f:f5:58:c1:30:
                    00:ce:55:68:8f:16:2b:56:be:ff:bd:e5:3a:3d:72:
                    a3:e4:0f:44:bd:1c:0e:40:ef:cb:08:ef:46:92:f7:
                    f4:c8:ff:0c:89:2d:bf:0f:97:e4:b8:c5:c4:a5:06:
                    b6:1b:f1:87:32:3f:ec:16:e5:69:c3:94:11:18:28:
                    64:9c:84:25:30:fb:6a:48:66:63:87:4e:f8:c2:86:
                    c5:08:52:7a:9c:45:9f:44:07:c8:5e:a2:56:d6:6f:
                    69:54:a6:80:86:ae:d3:37:92:29:85:ec:29:6b:bb:
                    69:5c:81:4a:5a:c1:ef:14:6f:68:fc:2d:ee:e4:13:
                    90:df:ce:4a:9e:3a:60:02:4b:df:4e:2a:79:ce:45:
                    f6:06:9b:ab:12:50:84:36:d3:72:09:dc:c9:90:1b:
                    72:79:31:bf:7a:2f:73:96:8b:d9:3a:25:5c:ba:54:
                    a3:e5:79:60:97:8d:29:59:62:d7:9e:8c:75:fa:c1:
                    87:eb:c2:4b:f3:4c:7f:18:2f:3c:24:07:02:f8:96:
                    b3:d1:de:b5:fa:b5:b2:d7:0d:ee:c8:9e:a2:d5:76:
                    11:5b:78:30:a9:ea:b8:ff:32:45:2e:f1:53:b1:b0:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:B4:B1:4E:31:71:55:A0:94:19:FE:B0:3F:13:B9:6F:0C:3E:9D
            X509v3 Authority Key Identifier:
                keyid:F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:41:bb:fe:88:79:01:f9:c1:9e:91:4b:59:ae:82:d3:04:b7:
         28:0f:8b:ee:ab:ed:69:5a:14:af:20:80:f4:5f:f0:62:87:8b:
         8b:3f:69:1a:67:78:83:58:2f:41:ec:d7:8c:13:e2:45:00:fc:
         f6:06:2b:a8:e4:05:9a:f9:70:f6:92:45:d0:d1:a7:33:4b:c3:
         09:00:1d:51:87:32:3f:03:cf:1e:44:2a:8b:78:bc:99:ff:e7:
         96:aa:90:5b:2b:c0:c4:99:90:67:19:ce:db:c6:ba:e6:bc:7d:
         1d:ba:32:b1:4a:9b:6d:38:ac:ee:a1:5a:2f:3a:da:88:03:e8:
         37:97:a3:25:45:a0:dd:55:61:11:a1:32:20:ba:44:8a:97:d3:
         e9:57:38:2c:fa:a9:4a:64:50:a5:80:f4:11:60:35:8f:38:bb:
         d6:04:24:79:43:0c:32:a0:64:22:56:7d:60:f7:94:72:d1:a0:
         1a:d9:cc:c7:f1:cd:50:f6:fb:50:71:5f:d8:b9:25:b6:69:14:
         5b:b2:a2:96:91:a9:79:3a:4a:75:7f:91:a7:18:38:1f:30:75:
         69:9e:b6:84:39:07:5f:3d:ac:cd:92:de:14:d6:9e:e7:4d:65:
         06:91:9d:6a:9f:7b:6e:17:74:5b:1d:10:d3:e9:9c:d6:d9:7d:
         90:77:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:15 2026 by rpki-client