Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
File:                     71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json)
Hash identifier:          7Qbgbf/h3HsuYdenV6niAY8q2FejR98GkmDofYENmOU=
Subject key identifier:   46:8C:53:F5:12:4E:16:3D:0D:AC:59:B3:CC:2E:30:14:3B:F0:9C:8E
Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
Certificate issuer:       /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Certificate serial:       268817950F084DBB54457CCFC2D22FF2302F7CCB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 17:52:43 +0000
Manifest this update:     Fri 14 Aug 2026 17:47:43 +0000
Manifest next update:     Sat 15 Aug 2026 20:51:43 +0000
Files and hashes:         1: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=)
                          2: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: n/zhHulAJVcQl0E4aillNVE4dw5JbyCt0h6Umya7kzA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl
                          rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 20:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:17:95:0f:08:4d:bb:54:45:7c:cf:c2:d2:2f:f2:30:2f:7c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
        Validity
            Not Before: Aug 14 17:47:43 2026 GMT
            Not After : Aug 15 20:51:43 2026 GMT
        Subject: CN=468C53F5124E163D0DAC59B3CC2E30143BF09C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:fc:75:d0:ec:48:29:92:a1:ed:e0:30:6e:
                    36:d3:cd:a0:e2:4b:69:73:a2:f1:77:1e:de:be:41:
                    57:8f:a9:09:5e:4e:d1:eb:17:74:eb:da:33:1d:e7:
                    18:5c:02:a8:99:85:6d:fd:a2:a6:0e:6f:ce:ce:6e:
                    1c:e9:9e:bd:24:f5:fa:83:60:b5:b4:f4:e5:79:f0:
                    b9:a9:6c:cc:6f:22:19:74:e5:fc:f9:73:82:c3:78:
                    4d:cc:19:ed:ef:fe:c3:e0:b2:96:8a:63:1c:02:02:
                    b9:04:bf:3f:c6:ed:ee:77:ac:81:d3:22:86:45:2c:
                    2f:26:f1:98:a2:1e:6a:f9:82:7f:e3:45:50:47:8b:
                    6d:07:1b:b8:23:28:77:2a:c4:b7:92:63:d8:ce:c4:
                    6f:a3:5c:a1:e8:a7:04:e3:41:d5:dd:03:62:ac:e7:
                    42:78:84:11:41:bc:e7:d8:32:11:48:1f:9b:7e:bd:
                    be:d4:12:e1:21:35:09:ca:aa:1a:fb:ae:39:45:a6:
                    09:79:36:68:ca:c9:e9:c8:1c:b8:ee:4d:a5:aa:13:
                    b5:01:2f:ef:27:78:cc:ac:06:4f:73:d0:aa:3a:4e:
                    6c:c1:db:23:db:8d:e0:a1:1c:30:be:cd:6b:be:c7:
                    ae:4a:da:74:89:ec:e6:3b:29:7e:04:eb:c7:80:1c:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8C:53:F5:12:4E:16:3D:0D:AC:59:B3:CC:2E:30:14:3B:F0:9C:8E
            X509v3 Authority Key Identifier:
                keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:99:33:b3:32:0a:ca:81:7d:bd:07:ee:fa:c8:c8:7f:e5:d2:
         36:c3:d6:b0:48:5c:37:1b:97:ba:73:33:52:6c:d0:8d:19:2e:
         5a:8f:51:42:91:da:1c:6d:39:60:2f:84:93:e8:9a:99:30:a9:
         6a:73:78:56:41:db:bf:fb:7b:29:06:b4:e8:ac:01:06:44:73:
         a1:c0:67:7c:92:89:d2:de:73:67:f1:1b:0b:2b:3c:c8:fc:7e:
         f0:1c:ba:63:75:ba:19:51:55:2a:e6:ce:31:6a:5c:d1:4b:00:
         d4:37:b8:70:e6:21:41:fb:6a:ee:81:d8:70:74:6c:3b:9f:21:
         d9:de:ee:38:40:d8:f2:8b:46:00:60:66:cb:bb:22:80:df:f5:
         89:1e:98:e7:bc:d4:1a:3d:f5:98:12:b0:d3:1a:6a:a8:6d:70:
         b4:96:10:35:1f:21:86:e0:96:1a:e1:21:65:b0:82:a8:88:76:
         a5:75:11:5f:5c:07:83:df:f1:47:73:1b:1a:00:6c:d8:fe:5e:
         a6:33:69:cc:c9:08:8e:62:37:5d:44:28:b0:0e:c7:75:91:68:
         b7:3f:ea:49:83:6d:56:ef:c5:be:65:f1:31:30:1b:d6:e3:59:
         5d:7e:dc:08:7a:ba:1c:4a:1c:aa:07:32:a0:b9:b6:c6:b4:8b:
         59:54:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:50 2026 by rpki-client