Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File:                     CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier:          T2KGeGg+PPbjtvVnYr4so9W98s6r4tfIkZOKQPHd4tU=
Subject key identifier:   C2:E4:AB:6F:9E:47:BE:16:68:A9:13:89:F5:70:06:87:7D:5A:4C:36
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer:       /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial:       5B4AE72F663F78152FB612FF4024B615E1F39354
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 20:38:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:33:27 +0000
Manifest next update:     Sat 15 Aug 2026 21:33:27 +0000
Files and hashes:         1: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
                          2: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: zYz0hVJkB1zUkONW3aVUH7Lx1vO3ZOph4iEsLfZd1KI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
                          rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 21:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4a:e7:2f:66:3f:78:15:2f:b6:12:ff:40:24:b6:15:e1:f3:93:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
        Validity
            Not Before: Aug 14 20:33:27 2026 GMT
            Not After : Aug 15 21:33:27 2026 GMT
        Subject: CN=C2E4AB6F9E47BE1668A91389F57006877D5A4C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:3d:41:b0:bb:4a:6e:91:22:7b:f8:6d:87:
                    0b:99:b9:ae:2b:77:53:13:03:71:97:c6:55:bb:8b:
                    11:62:9f:c3:68:15:9f:4b:19:11:af:f5:41:43:fa:
                    97:7c:e6:f6:e0:37:8a:31:5c:11:8e:ca:c5:f4:9a:
                    2e:aa:83:7b:88:e3:fd:a3:30:a8:7a:de:c5:c9:fe:
                    d4:e5:31:2d:dd:28:ae:28:1c:3a:aa:78:a9:c6:02:
                    0e:03:57:13:61:dc:bf:6c:38:fe:21:9d:fa:03:dd:
                    76:8e:18:9f:c8:57:20:0d:bf:56:89:3f:32:13:b0:
                    71:ba:80:41:bb:fa:ff:56:67:4b:47:99:22:58:15:
                    b6:d9:e7:2b:66:fe:c5:95:da:09:3a:0c:23:85:b3:
                    5f:66:d4:f8:6e:b1:ef:9a:fd:0a:cf:b3:e0:07:c6:
                    08:e8:7f:35:fc:20:bb:4c:10:41:8b:89:44:6e:9c:
                    8d:f8:62:fe:c3:3b:3b:85:5a:76:b0:c0:0f:c1:f5:
                    09:9f:77:f6:e2:c4:42:f1:c0:e5:2f:5b:46:14:f8:
                    25:3b:cc:0a:43:aa:9e:61:2c:58:f8:1a:ce:57:14:
                    ef:3d:cb:26:a6:47:53:d7:68:c1:97:ff:36:88:50:
                    1a:9d:e1:c4:67:3a:68:a7:aa:0b:16:b2:5c:a4:2f:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:AB:6F:9E:47:BE:16:68:A9:13:89:F5:70:06:87:7D:5A:4C:36
            X509v3 Authority Key Identifier:
                keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:b4:fb:47:9f:da:63:f6:91:50:35:37:8f:b0:f2:de:e3:
         32:8c:11:ac:d9:d9:58:49:51:fd:73:c6:23:81:f2:90:81:dd:
         01:45:da:bf:51:e1:d9:13:37:2d:66:3a:43:be:cf:4f:6d:12:
         41:69:55:bc:a2:92:8b:0f:bb:13:48:0b:ac:60:45:1e:7b:fc:
         39:12:cd:7d:4e:3a:32:22:20:e0:c8:11:2b:12:d3:d7:75:72:
         40:e0:52:40:17:0d:c8:d1:93:00:87:49:f2:6b:3f:c3:b8:a5:
         0e:35:32:46:97:da:f9:53:83:19:f1:d1:00:60:72:d5:64:0f:
         18:bf:95:dd:0f:ba:fa:07:b6:c7:58:0c:0c:13:60:00:b9:08:
         d7:9c:31:7c:78:f0:4f:6e:81:02:ea:c9:26:d0:78:be:58:ac:
         9f:67:28:56:a7:84:62:76:0f:5a:e3:33:68:42:08:b7:ba:e3:
         35:0e:32:31:17:34:7a:af:a9:bc:10:47:da:ea:7c:32:fd:19:
         64:cf:75:49:11:bb:e9:e8:5a:9c:87:0e:4f:be:ed:b3:de:9c:
         dc:db:d1:66:9b:a4:7e:9e:22:8b:ff:fa:b3:b1:73:1c:4f:29:
         1c:cb:bb:f9:6a:4c:ce:e1:be:72:0d:85:b5:c5:01:ce:80:4e:
         b6:47:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:21 2026 by rpki-client