Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
File:                     0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json)
Hash identifier:          rTsVJKgfwC4G1If+E+EVfgtVzwMwLpRROsN2FsDNp5o=
Subject key identifier:   D8:90:83:BF:EE:29:91:71:EA:93:1F:31:02:16:84:3B:EE:41:8F:FD
Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73
Certificate issuer:       /CN=0CA9C32F7806470F750EC53431D4F322F0851573
Certificate serial:       0A04B598ACE1E137790EE8943BCA5F6C327CC4F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
Manifest number:          82
Signing time:             Fri 14 Aug 2026 21:33:31 +0000
Manifest this update:     Fri 14 Aug 2026 21:28:31 +0000
Manifest next update:     Sun 16 Aug 2026 01:13:31 +0000
Files and hashes:         1: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: Ri2CjAJrMKiCvN/o4T5HMHxHzxxYFRGE14ICsb9PGTU=)
                          2: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl
                          rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 01:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:04:b5:98:ac:e1:e1:37:79:0e:e8:94:3b:ca:5f:6c:32:7c:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573
        Validity
            Not Before: Aug 14 21:28:31 2026 GMT
            Not After : Aug 16 01:13:31 2026 GMT
        Subject: CN=D89083BFEE299171EA931F310216843BEE418FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:68:a6:9b:c7:8b:02:f4:31:40:9f:7d:19:
                    57:56:4f:51:a9:06:7e:e0:11:7d:75:6f:0d:ca:76:
                    ca:24:7d:4d:b4:97:6d:72:44:f0:ba:6a:98:47:0c:
                    14:a6:4b:86:3b:fc:d3:a9:0a:7a:1a:31:08:03:da:
                    ff:d1:65:42:aa:ec:0a:f0:a2:ec:7c:fd:0c:50:54:
                    1a:f9:96:a8:d7:64:ac:51:21:60:4d:ec:7d:52:a1:
                    4e:23:de:bf:0d:b7:7c:b4:95:74:d9:68:14:d9:bd:
                    3a:9f:fa:8c:34:4d:de:fa:81:1c:59:50:06:31:58:
                    8b:54:64:f9:c1:0c:80:32:69:7f:44:d8:60:4c:aa:
                    6a:a2:d3:62:29:e3:fe:d7:93:a1:e8:32:29:a7:44:
                    e4:90:de:f4:0a:b8:bf:c1:47:31:3c:9c:d6:03:cf:
                    44:c9:ae:a7:2b:f5:cf:61:d5:4f:ed:9f:c2:21:2a:
                    06:a6:7c:e1:a8:f4:d2:b0:f0:c6:1c:1a:f7:2d:f1:
                    10:f1:62:d5:94:eb:20:48:49:b8:2f:95:22:2a:5c:
                    d3:46:70:16:ae:28:7f:da:5e:71:74:d7:33:94:34:
                    cf:f9:ae:13:da:95:ce:2e:ca:22:b7:75:f9:19:02:
                    91:d5:de:10:d2:69:d6:34:33:d9:28:1c:12:cd:bd:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:83:BF:EE:29:91:71:EA:93:1F:31:02:16:84:3B:EE:41:8F:FD
            X509v3 Authority Key Identifier:
                keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:65:61:77:f9:6d:0a:2b:e5:8c:db:4b:5d:23:79:33:58:b9:
         8c:92:4d:9f:9d:b5:8d:f4:c0:3e:d6:9a:41:ba:dd:80:84:63:
         c8:13:72:ec:fd:57:9d:ad:bc:98:3d:22:58:52:b6:50:4d:d2:
         df:54:fa:69:86:7b:37:b7:ae:c7:e2:b6:f9:7e:9e:d1:3e:12:
         4c:bd:ad:cf:92:dc:de:ea:80:97:36:bf:b6:ed:aa:54:fa:b4:
         c9:e2:1c:31:44:c1:5d:fc:5d:99:b4:69:4a:bb:6c:2e:d9:9e:
         f2:8d:52:aa:ec:77:00:9f:f7:a0:82:11:be:ec:1d:3d:b4:2d:
         24:c9:d0:97:4a:93:26:ce:d9:6f:1b:3c:7d:34:5f:71:da:e2:
         66:01:69:13:24:3a:7e:ca:e5:a9:ae:10:0b:c0:5f:45:73:0f:
         8e:40:95:6b:d3:3a:c7:73:30:49:77:16:ac:f7:2d:cd:c0:42:
         0d:07:0d:73:77:e1:4b:f9:c4:56:86:7a:d0:11:15:bb:e3:6f:
         00:57:95:be:f0:50:24:1e:f7:d4:ac:a6:73:bf:89:a5:49:04:
         05:35:52:c1:b7:b6:fa:e6:b0:c4:e8:43:04:bc:6d:eb:65:da:
         21:d3:5b:6f:c2:8b:74:e9:4d:99:09:45:ba:2e:aa:fc:c9:d8:
         22:3a:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:33:22 2026 by rpki-client