Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
File:                     059E0652FCBAC895061A57FE0566CF353F3E43CA.mft (raw, json)
Hash identifier:          RU39lxPZZi3B3W3iEazkvhWm0TW5hfxwJw8jVsgmemc=
Subject key identifier:   6D:A6:FC:8A:63:5A:AD:07:41:0D:66:80:4B:2C:2D:8F:91:04:48:74
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       54E384A5B6F327EFEA1BD34BA696A530D51B8949
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
Manifest number:          4E
Signing time:             Tue 30 Jun 2026 02:32:56 +0000
Manifest this update:     Tue 30 Jun 2026 02:27:56 +0000
Manifest next update:     Wed 01 Jul 2026 03:05:56 +0000
Files and hashes:         1: 3130332e3133352e31362e302f32342d3234203d3e20313338313435.roa (hash: km9qPDZIa8WiGvNcHuKf7su6Q2TEjTKsJ/KYkaeqv2E=)
                          2: 3130332e3132332e3132382e302f32322d3234203d3e20313331363632.roa (hash: sNOioi06yxe+llEteV6NhBO021ATEGtMJoxqCD1yvEs=)
                          3: 059E0652FCBAC895061A57FE0566CF353F3E43CA.crl (hash: wEUpRv43xA/GI3LSUrGm0+RMcoSi9Pm0hQQKW+DjH3I=)
                          4: 3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa (hash: QqBGfQ7BdcX4jk0myPQHJHO1V9xzygncrdNvKEsMmnA=)
                          5: 3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa (hash: ICVXFGJ9lMHRN69DsRxhyvyG84k8PzJafwcpKMd81Og=)
                          6: 3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa (hash: Z+uz749mg+ZrLlWw12y0B3Ll+9VkgYTQP5LOcpJblvs=)
                          7: 323430333a613263303a3a2f33322d3438203d3e203230343733.roa (hash: m4c1iJtK8aN6J3lEQoStd8FFVOYzM3grbyfplvzUybo=)
                          8: 323430333a613263303a3a2f33322d3438203d3e20313331363632.roa (hash: 7bh7DLlqJphbWWAVyIde+HRB1Ap1WWUebp+RFOyy+Ms=)
                          9: 3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa (hash: hiUuE+JZDNJG0Ktu2U25SQe8A2H7nBcP9/QC/B02NR0=)
                          10: 3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa (hash: p3/JFj7x3ARP4jNwPc+pLHDD3Q/+iNNDoVFuKzGU7/M=)
                          11: 3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (hash: 6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=)
                          12: 3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa (hash: oEX0nga4YWiRVwCH+XEdCpAnEZhmruGPpOo/+P0AeeY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
                          rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 03:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e3:84:a5:b6:f3:27:ef:ea:1b:d3:4b:a6:96:a5:30:d5:1b:89:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: Jun 30 02:27:56 2026 GMT
            Not After : Jul  1 03:05:56 2026 GMT
        Subject: CN=6DA6FC8A635AAD07410D66804B2C2D8F91044874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:65:2b:c2:e0:f0:47:06:f9:92:8f:59:db:
                    f5:cd:f2:8d:3a:ee:05:6e:fe:d5:99:35:b4:1b:44:
                    9e:67:ca:6d:a7:6a:7b:b0:f2:bb:78:3e:72:56:19:
                    e1:ec:ed:43:35:34:42:bd:de:47:01:fa:44:fd:c8:
                    0e:ce:71:b3:ca:ee:14:7e:95:1b:63:54:92:e0:7a:
                    2e:c2:f1:86:36:a9:c8:6b:dd:b4:36:6f:ef:3e:23:
                    f7:e1:02:0b:bf:4e:2a:31:4a:2a:15:58:48:5c:f7:
                    00:0e:37:7b:76:ec:fa:67:97:e3:13:9a:ae:48:0b:
                    c5:9c:bc:f1:9f:a9:96:14:3d:bc:dd:1c:53:61:6e:
                    b3:ec:69:2c:db:4a:f9:52:e0:c8:ac:d4:d5:65:0b:
                    9c:e3:52:22:93:1d:46:84:e8:b9:42:06:ac:0d:2e:
                    c9:8b:98:6c:45:1d:05:06:10:9b:64:03:78:54:76:
                    22:1d:da:21:cc:57:82:25:3d:92:be:07:b6:55:10:
                    e7:fc:66:92:71:16:de:f5:00:cf:7a:66:c3:a0:64:
                    c2:14:f3:ed:93:d2:2c:c0:f7:1d:34:da:d0:8e:24:
                    de:43:15:85:10:a4:71:d4:c5:7a:f7:2d:46:ba:fa:
                    64:bc:17:ff:17:54:46:51:84:ea:04:28:4c:84:a1:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:FC:8A:63:5A:AD:07:41:0D:66:80:4B:2C:2D:8F:91:04:48:74
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:b5:b6:f7:e8:1a:a4:b6:e1:6e:42:df:ae:d0:1d:2a:87:
         a3:d4:0d:21:40:3a:6c:9f:c8:9c:3c:45:94:c9:dc:f5:fd:33:
         e1:8c:f1:5c:0f:f8:5d:22:d1:d7:2e:e8:21:fe:28:65:6d:5b:
         9a:90:51:a3:97:83:58:ef:c1:78:fe:3e:63:fa:d8:ce:86:c0:
         1c:41:9f:94:29:fa:14:82:8e:55:89:b6:77:a3:d8:1c:70:21:
         62:20:57:df:41:60:d7:a7:48:88:b3:67:06:11:9b:7b:e0:e3:
         4d:f1:df:be:d2:7c:59:67:06:73:d3:52:2f:b7:c5:de:9c:32:
         be:a7:97:2e:31:4d:79:85:3c:99:ed:6c:e4:a2:4f:f1:13:01:
         5e:6b:d0:8a:d8:ba:e4:8d:1e:20:cb:98:d9:8a:db:da:fa:ed:
         a9:3a:6f:eb:eb:35:0d:69:21:60:e3:69:d6:1e:31:ea:bd:67:
         14:3d:64:e4:36:e8:17:7f:f5:73:88:9e:f1:f3:b2:e7:48:49:
         16:9a:64:79:23:05:07:c0:8f:28:09:59:ee:93:bd:c9:e1:d0:
         7b:db:6e:70:14:be:d4:ed:4d:9f:35:ad:40:96:8c:68:19:29:
         71:43:c7:1c:24:9b:ba:a9:f2:4a:db:eb:1b:b6:c3:0c:6c:6e:
         68:64:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:15 2026 by rpki-client