Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
File:                     2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json)
Hash identifier:          fNfH9ue3TGY+CkFOzUARz58NuzOYu5qVZCbjYgpxM6U=
Subject key identifier:   01:57:27:C5:58:B4:54:DD:9F:60:F7:4E:0B:F3:75:83:1B:C5:1A:2E
Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43
Certificate issuer:       /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
Certificate serial:       0B6B1361D65E90321C3D79B8F518CF437E781CA3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 15:22:09 +0000
Manifest this update:     Fri 14 Aug 2026 15:17:09 +0000
Manifest next update:     Sat 15 Aug 2026 17:19:09 +0000
Files and hashes:         1: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=)
                          2: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: Jvy2Ojf6ImR3aTsGotqnpCkSj+8Du9ADkYxYjqWTi64=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl
                          rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 17:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6b:13:61:d6:5e:90:32:1c:3d:79:b8:f5:18:cf:43:7e:78:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
        Validity
            Not Before: Aug 14 15:17:09 2026 GMT
            Not After : Aug 15 17:19:09 2026 GMT
        Subject: CN=015727C558B454DD9F60F74E0BF375831BC51A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:44:32:ac:d9:ea:6f:f5:0a:0f:5c:c0:b3:
                    0b:24:53:cf:b5:f2:2f:6e:f5:f9:3b:e1:c9:42:5a:
                    f5:be:46:0e:1a:43:d0:f5:c6:5f:74:f7:e8:bf:37:
                    3f:94:f6:79:b3:b9:52:cb:43:dd:09:1b:2b:f7:cf:
                    b2:96:11:b9:c5:1b:97:22:3f:0c:e4:2d:6f:06:be:
                    93:14:b7:4b:4c:47:42:fa:5e:4c:b7:9f:25:09:5d:
                    52:19:de:d5:d9:59:4b:d3:8e:4e:17:2b:42:1a:f2:
                    91:89:f6:58:49:80:2a:26:89:dc:77:f9:7a:40:3d:
                    25:aa:6c:75:4c:7e:06:29:63:85:6b:bd:19:ad:fa:
                    46:e7:3e:9e:0a:ed:a7:1f:c4:21:50:7b:52:9a:c3:
                    41:2d:1f:06:14:83:de:a6:8e:a8:03:27:e0:0c:0f:
                    69:81:c5:57:b6:e6:5c:15:87:ca:7c:89:a7:df:4b:
                    74:8f:dd:d9:7f:e5:4d:e4:69:71:38:ee:0e:ff:0e:
                    3f:79:21:a0:55:13:31:7e:d4:02:45:07:64:d7:b1:
                    0f:c5:84:c4:46:5d:2c:6b:b3:07:5e:b2:4b:7e:d8:
                    29:bd:df:b2:01:7b:35:18:fb:d2:af:79:e7:d1:c6:
                    18:5d:35:9b:f6:8a:21:13:34:ef:19:b2:63:e9:7e:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:27:C5:58:B4:54:DD:9F:60:F7:4E:0B:F3:75:83:1B:C5:1A:2E
            X509v3 Authority Key Identifier:
                keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:11:dc:7b:e5:9a:42:d3:ed:26:bb:5c:d7:ef:00:e5:f4:
         62:cb:3b:38:84:da:c6:6c:cc:14:8f:98:d7:34:b3:e8:fd:29:
         70:a6:32:d8:fe:28:34:db:28:46:3d:7e:ed:3d:37:1d:8e:3b:
         54:8f:27:ab:fa:63:1d:68:60:0a:42:2a:3b:77:59:ba:41:43:
         47:a6:20:1e:1c:fd:29:4c:15:75:ee:21:71:17:15:96:c8:7f:
         27:30:3c:18:a5:b7:1a:b6:0a:62:4a:e6:32:e9:67:55:9d:bb:
         36:df:48:73:c6:5f:a7:d2:80:43:83:8f:3c:c4:49:7a:c2:ec:
         05:fc:27:e7:fe:96:4d:fc:9a:5c:4a:12:36:ad:e2:61:68:3d:
         4f:20:69:e1:e4:8e:40:2a:28:f2:ed:cc:1c:35:d0:0a:a2:80:
         55:a4:8e:2c:a1:cc:22:ae:c8:3c:20:40:cb:da:c3:f6:a5:27:
         53:1e:27:5d:46:97:27:ff:49:36:47:ba:94:23:d9:83:a5:be:
         a2:02:95:8d:02:58:e6:8b:a0:19:e0:fd:5e:2e:f1:66:fa:f5:
         38:b8:bb:a8:94:18:3f:29:d9:ee:4c:d2:b2:c7:ed:32:ec:4e:
         7b:4b:81:5e:82:a9:fb:6c:a6:de:d5:50:2f:9d:96:90:3f:0c:
         d0:4d:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:50 2026 by rpki-client