Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
File:                     71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json)
Hash identifier:          519BppadSJF5BZQUH+qseQ0RBhKFGd7GYQYSYNkyRDg=
Subject key identifier:   57:B4:C7:25:51:01:76:FE:B2:6E:55:A0:A9:9E:30:CD:04:3F:E2:73
Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
Certificate issuer:       /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Certificate serial:       179B06C132E3E6A488447A85CFB2215E3125A008
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 07:47:40 +0000
Manifest this update:     Wed 13 May 2026 07:42:40 +0000
Manifest next update:     Thu 14 May 2026 08:46:40 +0000
Files and hashes:         1: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=)
                          2: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: gOMO0k5e2fteF4ykWrjiEduHr6gYScZsKYjBPgOmTeg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl
                          rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:06:c1:32:e3:e6:a4:88:44:7a:85:cf:b2:21:5e:31:25:a0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
        Validity
            Not Before: May 13 07:42:40 2026 GMT
            Not After : May 14 08:46:40 2026 GMT
        Subject: CN=57B4C725510176FEB26E55A0A99E30CD043FE273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:5a:56:2e:10:27:ae:9c:3a:1b:43:3b:6e:
                    71:65:16:15:1a:a5:33:86:66:e9:ea:ae:ea:27:37:
                    a3:a5:12:f7:6e:3e:83:ca:26:f1:3a:4e:1c:a4:69:
                    4a:0b:47:50:5e:12:f3:13:dd:cb:0e:d8:f7:08:6e:
                    8f:43:19:48:2a:c8:ce:55:5d:32:3e:0b:44:18:e2:
                    f3:1e:50:f0:ed:4a:fc:34:92:b0:6a:d7:03:6c:ee:
                    b6:da:60:b9:32:36:51:7d:ff:f6:81:46:7b:36:60:
                    fc:a4:7e:98:1c:88:e6:d8:6f:be:42:d1:87:7d:7b:
                    20:4c:e2:f1:af:40:fe:92:28:d9:59:bb:2a:c2:ef:
                    a7:3d:3e:09:98:b8:8f:67:f6:a8:42:52:78:32:28:
                    f2:d6:69:3e:50:1a:52:2b:47:8e:d3:cb:1a:f7:b6:
                    93:21:85:32:dc:9c:5d:5e:ee:bd:f2:77:1e:a2:0a:
                    15:bf:ac:0f:ef:d1:d7:d3:c8:e2:8e:8f:73:32:b7:
                    1a:8c:d1:d4:6f:23:8a:d6:d9:86:df:a6:21:98:9d:
                    42:80:66:55:e4:a3:27:89:b8:03:64:7f:b7:d6:a4:
                    3e:49:33:6a:1b:b0:f6:b9:ec:7d:93:f9:18:dd:28:
                    a6:5d:20:f9:d7:ee:07:36:02:81:7a:92:7d:db:2f:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B4:C7:25:51:01:76:FE:B2:6E:55:A0:A9:9E:30:CD:04:3F:E2:73
            X509v3 Authority Key Identifier:
                keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:0d:89:60:46:af:c8:c3:9a:47:3b:39:5b:33:19:42:c4:
         c0:6a:c3:10:44:8a:04:c3:09:36:e5:da:34:06:e3:27:f7:7f:
         0e:ca:21:de:b5:29:a6:6e:a8:5b:78:5d:0d:f5:bf:a8:0e:be:
         7c:06:57:26:6f:15:98:03:39:8a:0a:c7:af:bf:09:63:98:d2:
         7e:a1:92:67:da:d5:01:fb:cb:54:98:37:35:56:2b:63:d0:52:
         07:68:5b:64:23:3a:84:13:c6:5b:58:9a:87:ce:8e:1e:4e:c2:
         fa:e2:62:0c:43:ff:81:38:bf:27:7d:6c:9b:86:4e:05:22:3f:
         48:cd:4d:d7:6a:ad:c1:b4:70:07:92:4e:51:8a:d9:22:af:ff:
         c7:9a:68:9e:87:c3:df:48:fe:99:5e:b2:cd:3a:a8:5f:6f:fb:
         8b:bb:0d:8c:b4:9d:56:3c:5a:0c:cb:c6:06:a8:a9:a3:28:22:
         bc:fe:dd:8d:4c:90:d6:4a:c8:70:45:a0:b4:de:19:e8:54:6c:
         4d:80:e6:38:4d:e1:c5:e4:68:46:a4:a5:00:29:ca:25:3e:ac:
         94:40:7c:01:20:fe:d4:f2:17:dd:df:b8:43:a7:19:b4:4a:21:
         eb:5c:89:b9:8c:16:3e:fe:b3:c1:ef:1a:96:7b:49:92:5d:79:
         32:63:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:34 2026 by rpki-client