Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File:                     CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier:          DOrjbfnDWBS8EawjBd5tJ9SCwqIUv9X9+JVN/FO1u58=
Subject key identifier:   26:4A:35:15:D6:2E:EA:40:78:D0:E1:1A:12:3A:3D:22:6C:A7:40:B7
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer:       /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial:       4A2C7B937F473CAEDF3ED22565C347AAA01E448C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 05:01:58 +0000
Manifest this update:     Wed 13 May 2026 04:56:58 +0000
Manifest next update:     Thu 14 May 2026 06:19:58 +0000
Files and hashes:         1: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
                          2: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: 4J1+HR5osXHnLcfSZugUxCwrm7L0jqVpZUAMDtVlI6Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
                          rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2c:7b:93:7f:47:3c:ae:df:3e:d2:25:65:c3:47:aa:a0:1e:44:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
        Validity
            Not Before: May 13 04:56:58 2026 GMT
            Not After : May 14 06:19:58 2026 GMT
        Subject: CN=264A3515D62EEA4078D0E11A123A3D226CA740B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:6d:64:1f:b5:1e:50:1d:79:e4:0d:35:67:
                    05:2e:05:56:f7:5f:6a:6b:ee:40:4b:81:a9:27:cb:
                    61:a2:84:1b:72:34:4c:0d:11:63:30:2b:01:3d:4f:
                    e5:cb:58:31:1f:e2:83:43:6f:4e:14:3a:e0:16:52:
                    f9:06:e4:00:89:48:e9:34:00:45:e1:ab:cf:b4:b6:
                    f2:e7:1b:f9:8d:1a:47:e6:aa:b3:20:1d:c0:8a:e3:
                    91:a0:50:1d:1d:3b:06:28:0e:aa:1d:e8:97:c9:3f:
                    f4:17:5e:e4:98:d9:d6:08:98:74:c2:99:e2:42:d3:
                    7c:5f:1a:32:ba:66:23:d7:47:48:a0:ad:4a:d0:e6:
                    a0:77:f7:43:02:31:d8:1b:49:ef:78:4f:91:8d:6d:
                    90:d9:88:f6:41:51:f1:af:49:de:0f:d3:7e:19:10:
                    e9:a4:1b:75:39:a4:26:c8:41:52:91:c1:0c:4e:e8:
                    09:61:93:8d:9b:e9:ea:0a:51:67:8b:52:4a:01:53:
                    7b:3f:cd:ed:9c:9e:df:44:d3:37:ef:c7:e8:0b:7b:
                    e5:d3:a7:b2:2e:4a:ad:d4:c2:ab:ba:56:40:0f:38:
                    75:db:45:7f:d4:84:60:88:be:f5:8a:cf:6b:5f:0e:
                    58:6e:d5:b7:05:05:dd:b2:5d:78:15:b3:13:4c:67:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4A:35:15:D6:2E:EA:40:78:D0:E1:1A:12:3A:3D:22:6C:A7:40:B7
            X509v3 Authority Key Identifier:
                keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:21:2e:92:aa:37:6f:8d:43:eb:ed:4c:74:15:01:a9:41:
         26:97:5b:bb:2d:79:20:24:6a:02:3c:75:84:8f:de:8e:8f:0d:
         81:7b:3d:ef:fa:2f:ce:5b:b7:e6:5d:d0:f1:e2:45:f7:84:03:
         29:c8:c3:12:ad:7a:7c:aa:21:39:7c:fe:be:bf:77:f0:ac:e7:
         00:13:ca:f2:5c:44:5b:ac:e3:32:e0:25:5e:92:97:01:95:56:
         6d:71:9b:0f:46:67:9e:97:5a:92:68:1c:d6:cb:6d:07:38:b0:
         7d:46:ae:52:82:57:22:8f:4e:24:dc:5c:57:36:19:b8:69:3a:
         b8:ae:94:c7:fe:47:78:6b:cf:cb:d5:ae:3b:bc:8a:57:64:ab:
         24:79:12:6e:ef:23:7e:6c:e5:5d:51:7f:18:a4:7c:65:85:82:
         46:f9:2b:48:81:e4:98:a5:ea:42:83:da:37:2c:fc:7e:bc:9f:
         d6:c8:a5:73:b8:71:69:df:6e:48:9a:ff:cc:cd:e6:b9:57:e7:
         e3:43:83:c9:eb:70:87:f7:02:38:6b:18:e4:4c:fe:64:ef:12:
         3f:a3:5f:5e:04:b4:97:24:5d:9e:f6:1c:d2:bb:ff:9c:02:02:
         50:ad:7d:ef:a2:6a:b5:98:d4:61:59:f1:5a:69:f3:a8:6c:0b:
         39:03:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:28 2026 by rpki-client