Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
File:                     21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json)
Hash identifier:          MHe4sHoQdrTfuNFPmeInwm+KZ+diXVpb67/ANgb2aP0=
Subject key identifier:   B1:DA:00:DC:93:14:B2:55:11:7C:70:C8:C4:24:60:02:87:DA:4A:10
Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF
Certificate issuer:       /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
Certificate serial:       0C66A9E6457B2C77051D57A271DF0FFEE6A0347D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
Manifest number:          85
Signing time:             Sat 15 Aug 2026 02:34:07 +0000
Manifest this update:     Sat 15 Aug 2026 02:29:07 +0000
Manifest next update:     Sun 16 Aug 2026 06:12:07 +0000
Files and hashes:         1: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=)
                          2: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: IYPgvUy1saySFKdRrKegV2twnTdA5MwM0yP7dTxXtBA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl
                          rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:a9:e6:45:7b:2c:77:05:1d:57:a2:71:df:0f:fe:e6:a0:34:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
        Validity
            Not Before: Aug 15 02:29:07 2026 GMT
            Not After : Aug 16 06:12:07 2026 GMT
        Subject: CN=B1DA00DC9314B255117C70C8C424600287DA4A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:0a:8e:77:64:b4:68:5d:3d:b8:12:a1:8c:
                    07:49:ba:e4:21:95:e6:e0:ed:3e:85:39:cd:c0:fd:
                    2e:10:71:11:f8:13:79:e5:4a:ac:9b:d4:18:e7:57:
                    b8:15:25:64:a5:39:da:6b:ce:a5:ea:10:02:a7:13:
                    a3:8f:26:25:20:6b:e0:17:9d:8b:cf:93:2a:28:70:
                    b7:2b:11:93:b5:13:d9:dc:81:34:6a:7c:88:40:a9:
                    f8:b0:54:a5:03:34:40:38:9e:d1:0f:66:a1:60:54:
                    df:0e:fe:65:24:f4:df:55:b7:e5:0f:25:5a:a1:4b:
                    fd:74:42:fc:23:a8:f0:1b:f1:1b:db:7b:cc:35:5b:
                    99:9d:62:9f:51:63:a3:cd:ce:56:69:2e:bf:e0:69:
                    50:be:22:98:53:11:0a:ad:08:f3:22:a9:ad:e7:f3:
                    d8:66:1e:f5:59:8e:5d:27:2d:9b:f8:94:97:e1:04:
                    f3:6b:bd:8b:4a:dc:b7:06:24:9d:57:bf:9a:16:ad:
                    9c:da:f7:18:c5:2a:1f:d7:a0:70:f9:b3:02:02:0f:
                    d4:24:3f:9c:ee:fa:bf:79:c6:86:f4:2f:b0:f3:5b:
                    20:8c:4e:4f:c7:0c:ca:1f:85:c7:86:c3:73:c3:f6:
                    2e:f7:76:2e:be:80:08:83:fe:80:81:93:eb:7e:31:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:00:DC:93:14:B2:55:11:7C:70:C8:C4:24:60:02:87:DA:4A:10
            X509v3 Authority Key Identifier:
                keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:d2:be:4c:83:c7:35:01:77:20:78:bb:cd:00:72:0d:05:
         4a:5b:97:4b:b2:4a:71:9f:0e:e1:b5:46:e3:19:c6:94:f3:cf:
         92:f8:c5:9c:81:6e:fa:5a:23:0a:27:bc:94:e3:a2:d5:eb:55:
         e9:c0:f7:ac:84:90:b3:b1:a2:ee:4b:ec:6a:46:7d:6a:06:3d:
         b9:24:63:4b:b9:a2:16:71:00:7e:57:9a:fc:5d:f4:e6:95:48:
         ef:6d:70:58:54:91:24:a9:fe:82:f9:30:69:79:99:69:0d:13:
         97:c6:c6:97:18:72:c3:29:15:9b:26:e8:94:a5:fe:78:d2:d7:
         cf:14:14:70:ec:b6:7f:fb:95:73:3f:5a:de:bc:a9:33:e0:47:
         84:14:d1:ef:91:37:29:d6:63:ba:b9:9a:8a:5c:ec:b6:80:66:
         a7:09:64:2d:ec:83:57:41:65:3b:39:d0:82:1d:88:e6:5d:ab:
         c8:15:02:12:9e:a7:c3:f8:96:49:9e:fa:2c:ce:79:9a:12:cd:
         1d:cb:ea:7b:65:2f:1d:73:b0:43:c2:91:bc:91:e2:85:1f:11:
         e6:5d:80:06:f4:d7:0b:82:04:86:e9:5f:4b:a2:2c:99:3b:bb:
         eb:9e:77:f1:b5:21:96:05:fd:2d:1d:f6:e9:12:ed:a3:fa:8b:
         e0:28:2e:05
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUDGap5kV7LHcFHVeicd8P/uagNH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5
NDlDRDVBRjAeFw0yNjA4MTUwMjI5MDdaFw0yNjA4MTYwNjEyMDdaMDMxMTAvBgNV
BAMTKEIxREEwMERDOTMxNEIyNTUxMTdDNzBDOEM0MjQ2MDAyODdEQTRBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxwqOd2S0aF09uBKhjAdJuuQh
lebg7T6FOc3A/S4QcRH4E3nlSqyb1BjnV7gVJWSlOdprzqXqEAKnE6OPJiUga+AX
nYvPkyoocLcrEZO1E9ncgTRqfIhAqfiwVKUDNEA4ntEPZqFgVN8O/mUk9N9Vt+UP
JVqhS/10QvwjqPAb8Rvbe8w1W5mdYp9RY6PNzlZpLr/gaVC+IphTEQqtCPMiqa3n
89hmHvVZjl0nLZv4lJfhBPNrvYtK3LcGJJ1Xv5oWrZza9xjFKh/XoHD5swICD9Qk
P5zu+r95xob0L7DzWyCMTk/HDMofhceGw3PD9i73di6+gAiD/oCBk+t+MQCxAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUsdoA3JMUslURfHDIxCRgAofaShAwHwYDVR0j
BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE
LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx
MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy
MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC+z0r5Mg8c1
AXcgeLvNAHINBUpbl0uySnGfDuG1RuMZxpTzz5L4xZyBbvpaIwonvJTjotXrVenA
96yEkLOxou5L7GpGfWoGPbkkY0u5ohZxAH5Xmvxd9OaVSO9tcFhUkSSp/oL5MGl5
mWkNE5fGxpcYcsMpFZsm6JSl/njS188UFHDstn/7lXM/Wt68qTPgR4QU0e+RNynW
Y7q5mopc7LaAZqcJZC3sg1dBZTs50IIdiOZdq8gVAhKep8P4lkme+izOeZoSzR3L
6ntlLx1zsEPCkbyR4oUfEeZdgAb01wuCBIbpX0uiLJk7u+ued/G1IZYF/S0d9ukS
7aP6i+AoLgU=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:52 2026 by rpki-client