Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File:                     95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier:          Frk8bSiIePN3lK16Tav2kFQ+OmuwsfyASPZifYhjLVU=
Subject key identifier:   B6:5D:10:8A:80:8F:64:DB:1C:DF:5E:74:BD:D8:74:88:58:A6:61:79
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer:       /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial:       2E675B0D884D2492F50C41EFB06498B77A1F75DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number:          72
Signing time:             Sun 26 Jul 2026 11:06:22 +0000
Manifest this update:     Sun 26 Jul 2026 11:01:22 +0000
Manifest next update:     Mon 27 Jul 2026 12:50:22 +0000
Files and hashes:         1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: FdBLLAuKkeMafu191cvslvyWJqt7/XZjZC7v1JflnFI=)
                          2: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 12:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:5b:0d:88:4d:24:92:f5:0c:41:ef:b0:64:98:b7:7a:1f:75:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
        Validity
            Not Before: Jul 26 11:01:22 2026 GMT
            Not After : Jul 27 12:50:22 2026 GMT
        Subject: CN=B65D108A808F64DB1CDF5E74BDD8748858A66179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:a7:a2:ec:91:9f:1a:79:29:1b:fe:95:5e:
                    8e:de:87:b8:e3:40:43:28:63:28:81:8e:4e:e6:4d:
                    fd:c3:59:49:17:a1:d3:93:af:14:9b:a2:31:e0:b4:
                    3d:e0:4a:03:e1:5b:77:7f:cf:8e:94:d7:cf:07:bf:
                    74:74:d2:17:7b:29:6e:ef:60:d9:c2:ce:07:53:dd:
                    b8:6a:81:cc:f6:52:d5:f0:c4:2e:7e:c4:73:03:0a:
                    18:eb:9e:3c:99:11:b0:2e:81:16:67:cf:64:3f:5b:
                    52:34:73:4f:d6:ed:5d:e2:80:91:70:b8:44:cc:40:
                    98:db:32:a3:61:c3:0a:03:68:c6:56:42:ac:52:5e:
                    d7:9b:fd:90:0f:9f:1f:fc:14:7d:b3:d7:e7:7b:a0:
                    ee:4b:85:9d:ed:04:ce:e1:28:34:74:e1:79:87:f7:
                    04:75:9a:f5:8f:63:38:f1:c9:c4:e2:55:8d:fd:0d:
                    ae:e3:04:a3:c7:64:7c:0c:94:c2:35:d3:b6:f1:17:
                    b3:6e:6f:5e:f0:b6:bb:e5:fa:74:1a:0e:1e:1d:48:
                    b3:0c:99:2a:9d:8f:54:0b:e4:4e:0f:d7:b7:54:cd:
                    9d:6e:e0:89:97:07:fc:f9:92:3b:62:70:01:06:ba:
                    3e:0f:4a:eb:b3:b5:16:3f:3a:23:3d:88:86:6d:fa:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:10:8A:80:8F:64:DB:1C:DF:5E:74:BD:D8:74:88:58:A6:61:79
            X509v3 Authority Key Identifier:
                keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:0f:7f:47:be:93:d7:2b:31:5f:33:29:8c:0b:f2:20:a2:
         22:ec:d7:14:6a:ea:3c:75:53:47:35:c2:37:21:9a:b0:c2:c2:
         51:22:8e:54:1a:cc:17:6e:8a:86:5f:d6:3e:00:01:f3:4b:a1:
         de:6d:a4:c8:10:d0:95:53:45:b6:50:ba:c6:c7:e2:6f:fb:6c:
         32:f1:0b:44:9f:58:f6:98:47:f7:6f:0d:44:fc:ca:c2:7c:b2:
         f1:55:aa:d1:1d:6f:86:63:3d:7b:ce:58:85:11:ce:bb:c5:65:
         80:47:f2:2f:13:34:6b:2b:6e:ee:1b:c4:26:3e:c5:26:9e:55:
         d5:f6:78:83:07:f9:07:29:4c:4f:ad:7b:cf:c5:88:8d:9b:a2:
         d4:75:e9:86:a0:0d:b9:db:6d:b6:14:9a:9b:2c:0b:39:28:e9:
         59:c0:7f:f7:dc:f7:5f:24:48:ce:56:c0:af:2d:d1:15:81:48:
         e8:e8:cf:20:54:f0:3b:e2:23:58:c5:87:9a:a5:2f:24:c3:a0:
         a5:7b:8e:97:0d:3b:77:69:0d:11:9a:76:1d:b2:9b:fd:25:65:
         e5:91:1d:e7:79:f8:8d:18:86:24:e7:de:95:aa:26:22:92:e7:
         00:25:8d:89:37:6f:b2:09:16:a1:c5:61:a2:42:30:c3:85:cc:
         78:2d:16:25
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIULmdbDYhNJJL1DEHvsGSYt3ofddowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NFNzU5RjQ1RTJF
N0U0MjFBMzAeFw0yNjA3MjYxMTAxMjJaFw0yNjA3MjcxMjUwMjJaMDMxMTAvBgNV
BAMTKEI2NUQxMDhBODA4RjY0REIxQ0RGNUU3NEJERDg3NDg4NThBNjYxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxqei7JGfGnkpG/6VXo7eh7jj
QEMoYyiBjk7mTf3DWUkXodOTrxSbojHgtD3gSgPhW3d/z46U188Hv3R00hd7KW7v
YNnCzgdT3bhqgcz2UtXwxC5+xHMDChjrnjyZEbAugRZnz2Q/W1I0c0/W7V3igJFw
uETMQJjbMqNhwwoDaMZWQqxSXteb/ZAPnx/8FH2z1+d7oO5LhZ3tBM7hKDR04XmH
9wR1mvWPYzjxycTiVY39Da7jBKPHZHwMlMI107bxF7Nub17wtrvl+nQaDh4dSLMM
mSqdj1QL5E4P17dUzZ1u4ImXB/z5kjticAEGuj4PSuuztRY/OiM9iIZt+jsvAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUtl0QioCPZNsc3150vdh0iFimYXkwHwYDVR0j
BBgwFoAUlbGmJHmzbBQU/xfOdZ9F4ufkIaMwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8xLzk1QjFBNjI0NzlCMzZDMTQxNEZGMTdDRTc1OUY0NUUyRTdFNDIxQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzIvOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NF
NzU5RjQ1RTJFN0U0MjFBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMS85NUIx
QTYyNDc5QjM2QzE0MTRGRjE3Q0U3NTlGNDVFMkU3RTQyMUEzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
hMIPf0e+k9crMV8zKYwL8iCiIuzXFGrqPHVTRzXCNyGasMLCUSKOVBrMF26Khl/W
PgAB80uh3m2kyBDQlVNFtlC6xsfib/tsMvELRJ9Y9phH928NRPzKwnyy8VWq0R1v
hmM9e85YhRHOu8VlgEfyLxM0aytu7hvEJj7FJp5V1fZ4gwf5BylMT617z8WIjZui
1HXphqANudttthSamywLOSjpWcB/99z3XyRIzlbAry3RFYFI6OjPIFTwO+IjWMWH
mqUvJMOgpXuOlw07d2kNEZp2HbKb/SVl5ZEd53n4jRiGJOfelaomIpLnACWNiTdv
sgkWocVhokIww4XMeC0WJQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:44 2026 by rpki-client