Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
File:                     2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json)
Hash identifier:          y54h8/9FDAvHDYkbw6Pbicd7MTs3Quy1H7fKneKK3q4=
Subject key identifier:   10:10:BB:C9:7F:54:06:2E:69:4C:B7:22:54:67:41:A8:2F:F8:45:D2
Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43
Certificate issuer:       /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
Certificate serial:       388EC7DC6B06092383DED99D9567DAB03429F0F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
Manifest number:          C1
Signing time:             Thu 01 Oct 2026 16:20:40 +0000
Manifest this update:     Thu 01 Oct 2026 16:15:40 +0000
Manifest next update:     Fri 02 Oct 2026 17:03:40 +0000
Files and hashes:         1: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=)
                          2: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: qQpPobiu/JCGrsyW1UXoXaZ65P+swK+Z5wLD0uBcQo4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl
                          rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 16:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8e:c7:dc:6b:06:09:23:83:de:d9:9d:95:67:da:b0:34:29:f0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
        Validity
            Not Before: Oct  1 16:15:40 2026 GMT
            Not After : Oct  2 17:03:40 2026 GMT
        Subject: CN=1010BBC97F54062E694CB722546741A82FF845D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:f8:e6:c5:f1:1a:50:4e:e1:a5:e5:77:e7:
                    d2:3d:f1:95:f9:5a:3e:d4:2b:49:27:6c:e4:32:86:
                    d3:f1:4a:4d:85:e2:f5:d9:de:9f:05:4d:09:dd:3a:
                    b6:0b:01:21:b1:25:e3:74:b5:59:d9:b9:60:0c:7c:
                    54:72:2e:cb:72:68:62:99:7c:ec:9a:ee:76:59:eb:
                    72:fc:32:66:54:75:31:6d:a9:da:48:ba:a4:ee:91:
                    bd:89:45:2c:a2:ed:9e:a8:34:65:a3:69:49:29:64:
                    43:e2:b8:cd:98:97:34:6d:9d:16:e0:5a:8e:95:cf:
                    6d:2d:02:39:ad:c4:c1:1b:9f:4c:ee:45:18:72:36:
                    08:86:23:cf:d7:9d:3e:62:ad:eb:63:bb:e0:62:3c:
                    27:51:f6:9f:5d:dd:40:8b:e4:62:14:5e:a4:b8:bf:
                    50:b5:08:d7:fe:9a:ce:7e:10:1f:c5:cb:e9:7e:cd:
                    b9:32:13:f1:1c:45:14:ac:49:50:b0:69:28:e5:9f:
                    28:f9:94:ac:82:91:bc:b2:97:a5:96:35:1c:2d:3b:
                    83:d7:a5:20:37:be:f0:90:23:8f:1e:d7:e8:8e:fe:
                    73:76:e7:2b:8b:07:91:b1:0c:5e:cd:ff:fe:2a:ed:
                    ef:40:5c:a8:75:0e:6d:3e:86:de:df:57:e4:a1:7d:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:10:BB:C9:7F:54:06:2E:69:4C:B7:22:54:67:41:A8:2F:F8:45:D2
            X509v3 Authority Key Identifier:
                keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:45:89:37:f1:b7:96:e2:d8:a8:9d:a6:10:84:2a:4d:7e:
         71:50:0f:8d:b5:73:a8:48:7c:91:b7:4b:b6:f5:c4:89:b1:40:
         3a:f7:49:58:6e:0f:48:24:b8:bc:8e:bc:2d:1c:93:04:92:cd:
         10:84:b2:0d:19:0b:db:22:e5:c0:a4:56:b1:64:9a:ef:81:ec:
         dc:70:6f:25:a3:44:d1:1a:58:40:77:dd:dd:07:52:81:90:94:
         23:cc:53:d5:23:c0:25:80:f2:e1:9e:64:af:17:4b:45:28:d5:
         0d:ca:30:13:ca:0a:91:0e:f7:ca:54:1a:b2:5d:c3:6d:ad:42:
         e5:15:46:a8:15:5a:38:6a:87:b0:70:6c:b4:ef:98:56:ce:93:
         19:63:ea:62:83:4b:69:5c:ab:95:70:b1:58:69:97:7d:e7:86:
         0c:8b:a9:a0:6b:c9:5b:02:91:d4:4e:90:35:fe:a8:a4:f8:10:
         dd:84:b6:66:b1:33:0c:d1:76:47:04:45:2a:ca:11:e8:ec:65:
         81:75:6b:00:4e:96:0a:04:ad:d0:61:4d:75:b9:90:42:fe:d1:
         ac:94:90:dd:fc:38:29:60:46:08:6a:3f:0e:fe:23:79:5b:98:
         ff:a2:8a:41:2a:5c:c5:2e:56:92:ab:14:bc:b6:3d:5e:96:73:
         3e:14:9f:11
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUOI7H3GsGCSOD3tmdlWfasDQp8PQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz
Qzg5MzI0MzAeFw0yNjEwMDExNjE1NDBaFw0yNjEwMDIxNzAzNDBaMDMxMTAvBgNV
BAMTKDEwMTBCQkM5N0Y1NDA2MkU2OTRDQjcyMjU0Njc0MUE4MkZGODQ1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc//jmxfEaUE7hpeV359I98ZX5
Wj7UK0knbOQyhtPxSk2F4vXZ3p8FTQndOrYLASGxJeN0tVnZuWAMfFRyLstyaGKZ
fOya7nZZ63L8MmZUdTFtqdpIuqTukb2JRSyi7Z6oNGWjaUkpZEPiuM2YlzRtnRbg
Wo6Vz20tAjmtxMEbn0zuRRhyNgiGI8/XnT5iretju+BiPCdR9p9d3UCL5GIUXqS4
v1C1CNf+ms5+EB/Fy+l+zbkyE/EcRRSsSVCwaSjlnyj5lKyCkbyyl6WWNRwtO4PX
pSA3vvCQI48e1+iO/nN25yuLB5GxDF7N//4q7e9AXKh1Dm0+ht7fV+Shffo7AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUEBC7yX9UBi5pTLciVGdBqC/4RdIwHwYDVR0j
BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w
LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC
MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG
MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLpFiTfxt5bi2Kid
phCEKk1+cVAPjbVzqEh8kbdLtvXEibFAOvdJWG4PSCS4vI68LRyTBJLNEISyDRkL
2yLlwKRWsWSa74Hs3HBvJaNE0RpYQHfd3QdSgZCUI8xT1SPAJYDy4Z5krxdLRSjV
DcowE8oKkQ73ylQasl3Dba1C5RVGqBVaOGqHsHBstO+YVs6TGWPqYoNLaVyrlXCx
WGmXfeeGDIupoGvJWwKR1E6QNf6opPgQ3YS2ZrEzDNF2RwRFKsoR6OxlgXVrAE6W
CgSt0GFNdbmQQv7RrJSQ3fw4KWBGCGo/Dv4jeVuY/6KKQSpcxS5WkqsUvLY9XpZz
PhSfEQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:36:00 2026 by rpki-client