Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
File:                     E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft (raw, json)
Hash identifier:          ztX6uLLyFbCwuAnFIzv2fEVhxnuV5FHcFyTnr7xtF3Q=
Subject key identifier:   3D:25:C7:89:44:B1:D9:9D:5E:24:E9:05:1B:65:07:40:05:93:EC:72
Authority key identifier: E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Certificate issuer:       /CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Certificate serial:       1E06B99441EF13AC6F9F2A5381701BCA17BDB36F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 05:17:06 +0000
Manifest this update:     Wed 13 May 2026 05:12:06 +0000
Manifest next update:     Thu 14 May 2026 07:19:06 +0000
Files and hashes:         1: 3130332e3235352e3231302e302f32332d3332203d3e20313331363432.roa (hash: FaPlqa1DeUZTg3kaDmHEbki3z5vF9i3TucSszJSHI3U=)
                          2: E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl (hash: dJsdTKqcjS63Jc2obKBWaAv3gQJt7/q3q3yS58wlYEw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
                          rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:b9:94:41:ef:13:ac:6f:9f:2a:53:81:70:1b:ca:17:bd:b3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
        Validity
            Not Before: May 13 05:12:06 2026 GMT
            Not After : May 14 07:19:06 2026 GMT
        Subject: CN=3D25C78944B1D99D5E24E9051B6507400593EC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:0b:5c:c8:d0:a8:a2:3c:30:d6:d7:d3:dc:
                    8a:0f:86:17:c5:f7:7e:6b:b8:3b:9f:72:36:33:c1:
                    7b:47:64:9d:6b:89:48:16:d0:a6:a2:83:da:5d:13:
                    3b:a9:ad:ee:fd:75:14:4a:57:37:ca:7a:3b:15:16:
                    05:71:4d:f9:23:85:66:3d:33:d3:57:e0:ff:e4:2e:
                    8f:18:f5:0d:c9:91:48:b2:3f:36:d4:2c:9c:4a:30:
                    5b:e7:c9:08:e5:94:e9:65:5f:4b:c8:2b:cb:75:6b:
                    bb:9b:60:0f:b0:3d:70:0f:51:15:4e:3b:57:7d:47:
                    b7:e8:e0:c8:c2:f2:95:4b:e1:73:7a:b9:53:64:c2:
                    ec:67:90:ef:d1:c0:b8:75:24:f2:13:4c:01:a8:dc:
                    1d:41:0e:9d:ab:f0:f3:68:89:aa:45:db:8e:84:d7:
                    67:1d:6c:2a:bb:64:6e:0d:75:9f:e6:1b:7a:43:fc:
                    d5:8c:a0:b9:bb:a1:2b:a7:7a:9a:0f:56:cf:80:d0:
                    53:d6:5e:92:b3:91:6c:7b:3c:53:ce:44:7a:4e:a7:
                    b0:f2:73:60:c7:6a:58:34:f6:75:51:f4:e5:01:df:
                    4d:86:53:57:0d:d7:29:10:0b:44:5e:24:e9:be:c9:
                    b1:85:d7:0a:0c:20:8d:5d:db:1e:f2:76:14:1f:e1:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:C7:89:44:B1:D9:9D:5E:24:E9:05:1B:65:07:40:05:93:EC:72
            X509v3 Authority Key Identifier:
                keyid:E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:a8:62:a3:0b:72:40:5a:1d:f0:51:cf:d4:c7:0b:95:11:
         bd:a9:d2:98:d5:a5:58:3b:1b:ce:5b:d3:96:f4:7d:b1:dc:8c:
         66:07:f5:fc:22:88:82:e9:76:fc:83:8a:24:da:cb:29:d5:29:
         bd:7c:58:b1:6c:04:6c:28:48:79:da:09:6f:5a:ed:65:98:a5:
         91:7a:40:49:53:b7:d6:ab:b3:b8:7b:bb:0e:d5:79:df:71:73:
         9d:90:00:51:8c:59:7f:91:c4:fe:38:6e:a4:56:bd:f1:db:69:
         08:6c:c1:6c:a2:fa:bb:ad:56:4e:56:66:70:31:fc:3d:bc:bd:
         d5:23:14:b9:6b:12:eb:d4:e9:59:6d:18:a0:11:0a:f2:06:02:
         54:a8:2c:fa:83:1f:18:c1:3e:f4:1f:2f:4b:79:bb:be:50:64:
         f3:86:fa:c2:35:74:ad:0c:9a:51:8e:d2:26:e5:bf:6f:dc:1e:
         d0:71:3f:e3:5a:11:fa:ce:48:21:67:f7:7a:60:c7:dc:44:46:
         73:c2:b5:88:25:49:f7:f2:06:d1:f1:68:6e:d4:4a:95:1a:50:
         7b:a5:23:6f:75:a0:d4:59:af:a6:4f:ea:a9:8a:c5:65:ce:0e:
         34:6b:64:dd:b2:3b:97:fc:4d:cc:e2:6d:d2:23:af:93:7c:46:
         d7:90:38:72
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUHga5lEHvE6xvnypTgXAbyhe9s28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3NjNFN0U3REM4NzYwODg5QkY2NEMxODBBQTRGOTVD
NTA0NDVBQjAeFw0yNjA1MTMwNTEyMDZaFw0yNjA1MTQwNzE5MDZaMDMxMTAvBgNV
BAMTKDNEMjVDNzg5NDRCMUQ5OUQ1RTI0RTkwNTFCNjUwNzQwMDU5M0VDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSzgtcyNCoojww1tfT3IoPhhfF
935ruDufcjYzwXtHZJ1riUgW0Kaig9pdEzupre79dRRKVzfKejsVFgVxTfkjhWY9
M9NX4P/kLo8Y9Q3JkUiyPzbULJxKMFvnyQjllOllX0vIK8t1a7ubYA+wPXAPURVO
O1d9R7fo4MjC8pVL4XN6uVNkwuxnkO/RwLh1JPITTAGo3B1BDp2r8PNoiapF246E
12cdbCq7ZG4NdZ/mG3pD/NWMoLm7oSunepoPVs+A0FPWXpKzkWx7PFPORHpOp7Dy
c2DHalg09nVR9OUB302GU1cN1ykQC0ReJOm+ybGF1woMII1d2x7ydhQf4fE1AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUPSXHiUSx2Z1eJOkFG2UHQAWT7HIwHwYDVR0j
BBgwFoAU5HY+fn3IdgiJv2TBgKpPlcUERaswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1JPV04v
MC9FNDc2M0U3RTdEQzg3NjA4ODlCRjY0QzE4MEFBNEY5NUM1MDQ0NUFCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0U0NzYzRTdFN0RDODc2MDg4OUJGNjRDMTgwQUE0
Rjk1QzUwNDQ1QUIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUk9XTi8wL0U0NzYzRTdFN0RDODc2
MDg4OUJGNjRDMTgwQUE0Rjk1QzUwNDQ1QUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7/ahiowtyQFod
8FHP1McLlRG9qdKY1aVYOxvOW9OW9H2x3IxmB/X8IoiC6Xb8g4ok2ssp1Sm9fFix
bARsKEh52glvWu1lmKWRekBJU7fWq7O4e7sO1XnfcXOdkABRjFl/kcT+OG6kVr3x
22kIbMFsovq7rVZOVmZwMfw9vL3VIxS5axLr1OlZbRigEQryBgJUqCz6gx8YwT70
Hy9Lebu+UGTzhvrCNXStDJpRjtIm5b9v3B7QcT/jWhH6zkghZ/d6YMfcREZzwrWI
JUn38gbR8Whu1EqVGlB7pSNvdaDUWa+mT+qpisVlzg40a2TdsjuX/E3M4m3SI6+T
fEbXkDhy
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:45 2026 by rpki-client