Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
File:                     5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json)
Hash identifier:          7RbNCEiPPqpLKTy8/jg2sy7yBVv3RqqxG/M+YPVvQuA=
Subject key identifier:   20:0D:31:26:C2:DB:75:98:48:77:D0:AD:E1:E5:EC:47:F1:43:AD:17
Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C
Certificate issuer:       /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
Certificate serial:       2E2080626D0D985F03CC646A299398943EA43168
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 02:16:31 +0000
Manifest this update:     Sat 03 Oct 2026 02:11:31 +0000
Manifest next update:     Sun 04 Oct 2026 04:14:31 +0000
Files and hashes:         1: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=)
                          2: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: PXvfEkAkNJwy6kiSTXs3lxrBY4y+rhjspWVnzSIt1A4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl
                          rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:80:62:6d:0d:98:5f:03:cc:64:6a:29:93:98:94:3e:a4:31:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
        Validity
            Not Before: Oct  3 02:11:31 2026 GMT
            Not After : Oct  4 04:14:31 2026 GMT
        Subject: CN=200D3126C2DB75984877D0ADE1E5EC47F143AD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:be:49:69:77:4d:5f:33:73:c1:85:75:7a:
                    ee:1a:28:e6:9c:78:3b:94:7b:b6:48:2f:0e:49:14:
                    47:15:7f:cf:45:59:7b:8e:01:2c:b3:f4:08:ac:11:
                    0d:ac:6f:52:aa:b9:c6:a9:c9:e4:42:01:be:67:c7:
                    42:ab:df:5b:34:70:a7:dc:13:4d:65:5a:de:ca:37:
                    3f:aa:6c:0b:48:6c:e6:05:bb:0d:43:fa:09:ad:cf:
                    a6:ff:a6:b6:cb:59:4c:b5:47:9f:1f:36:7e:78:ac:
                    0c:48:c5:dd:d8:35:ef:a2:89:a6:5e:25:2b:bf:fd:
                    4c:a9:df:67:3a:92:ea:fe:e6:3d:b9:21:8f:c4:8d:
                    52:ef:ba:ee:08:78:37:42:8d:8e:e3:e0:94:f7:b9:
                    ec:5d:66:2b:44:ab:18:ab:33:86:fd:34:03:61:8d:
                    20:b3:6b:db:7f:6c:a5:dd:70:f3:1e:e3:11:a9:1a:
                    02:73:ec:7b:34:4f:52:bf:8b:23:6e:d6:49:80:78:
                    20:7d:d2:f1:2a:fd:24:33:bc:ba:43:57:2a:b3:40:
                    0d:70:51:e8:f5:60:eb:97:06:16:6b:d7:85:36:2b:
                    45:63:fe:65:cd:d4:12:b6:28:13:6a:a6:68:18:79:
                    f4:03:67:25:55:6e:b5:55:9c:06:f8:86:83:17:fd:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:31:26:C2:DB:75:98:48:77:D0:AD:E1:E5:EC:47:F1:43:AD:17
            X509v3 Authority Key Identifier:
                keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:fe:44:9b:73:a7:bb:77:48:69:da:13:1a:3a:2e:96:49:
         9e:31:91:2b:5a:4a:c3:ee:34:6f:13:fd:28:71:4e:db:93:59:
         80:d0:f1:48:a5:43:45:3e:89:ff:c6:bf:dc:27:df:4d:f4:76:
         42:47:47:39:de:a7:06:34:40:af:9d:a3:53:44:57:8f:97:c2:
         12:49:6a:b9:44:85:61:e8:f0:d7:99:eb:b8:f3:f1:90:b7:e6:
         bb:b7:85:4b:7e:53:dd:bd:e7:7a:8c:60:98:aa:53:d8:c9:a8:
         a4:9f:19:fc:f9:40:c8:38:58:2e:66:04:b1:60:1a:1a:94:f3:
         30:84:1e:7e:34:06:fe:10:47:6d:09:9c:82:c7:05:25:a0:59:
         c4:7c:e1:b8:52:2f:ed:b3:df:0f:2d:2b:cb:ee:20:15:b9:24:
         43:1b:e2:bd:07:5b:8d:f8:69:73:8e:46:3e:e3:dc:cd:94:c5:
         c8:3a:fa:9e:29:c0:37:ec:9c:61:be:94:98:89:44:d5:f4:8e:
         65:57:ba:71:49:0c:0d:14:7c:fc:b6:fa:52:fc:f6:d1:a3:a5:
         41:94:af:d6:f4:19:e7:a5:23:a5:11:93:62:e3:da:46:13:78:
         a7:df:6b:88:e4:71:8a:6c:c5:40:71:92:b7:d2:06:7d:0f:f1:
         84:b9:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:38:40 2026 by rpki-client