Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
File:                     059E0652FCBAC895061A57FE0566CF353F3E43CA.mft (raw, json)
Hash identifier:          HNOzhLIhiJIyZgX03Vr71Q9pEwbdqAnORCIxS9MYkoQ=
Subject key identifier:   5B:FD:00:79:5B:78:CF:87:69:57:34:3C:84:97:0E:D1:8F:4E:8F:E5
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       6052D515F9DF05311CCF9D86B1011D2316922DA5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
Manifest number:          CE
Signing time:             Sat 03 Oct 2026 20:22:07 +0000
Manifest this update:     Sat 03 Oct 2026 20:17:07 +0000
Manifest next update:     Sun 04 Oct 2026 23:58:07 +0000
Files and hashes:         1: 3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa (hash: Z+uz749mg+ZrLlWw12y0B3Ll+9VkgYTQP5LOcpJblvs=)
                          2: 3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa (hash: QqBGfQ7BdcX4jk0myPQHJHO1V9xzygncrdNvKEsMmnA=)
                          3: 3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa (hash: ICVXFGJ9lMHRN69DsRxhyvyG84k8PzJafwcpKMd81Og=)
                          4: 3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa (hash: hiUuE+JZDNJG0Ktu2U25SQe8A2H7nBcP9/QC/B02NR0=)
                          5: 3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa (hash: p3/JFj7x3ARP4jNwPc+pLHDD3Q/+iNNDoVFuKzGU7/M=)
                          6: 3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (hash: 6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=)
                          7: 3130332e3132332e3132382e302f32322d3234203d3e20313331363632.roa (hash: sNOioi06yxe+llEteV6NhBO021ATEGtMJoxqCD1yvEs=)
                          8: 3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa (hash: oEX0nga4YWiRVwCH+XEdCpAnEZhmruGPpOo/+P0AeeY=)
                          9: 323430333a613263303a3a2f33322d3438203d3e203230343733.roa (hash: m4c1iJtK8aN6J3lEQoStd8FFVOYzM3grbyfplvzUybo=)
                          10: 3130332e3133352e31362e302f32342d3234203d3e20313338313435.roa (hash: km9qPDZIa8WiGvNcHuKf7su6Q2TEjTKsJ/KYkaeqv2E=)
                          11: 323430333a613263303a3a2f33322d3438203d3e20313331363632.roa (hash: 7bh7DLlqJphbWWAVyIde+HRB1Ap1WWUebp+RFOyy+Ms=)
                          12: 059E0652FCBAC895061A57FE0566CF353F3E43CA.crl (hash: fMT8GTnIpmmYkrFFhD/qb+Vow3mGoN7QBZzZrNJ83Y0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
                          rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:52:d5:15:f9:df:05:31:1c:cf:9d:86:b1:01:1d:23:16:92:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: Oct  3 20:17:07 2026 GMT
            Not After : Oct  4 23:58:07 2026 GMT
        Subject: CN=5BFD00795B78CF876957343C84970ED18F4E8FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:52:93:35:e1:7a:4b:4e:02:db:4c:1a:a5:
                    55:64:30:95:aa:c9:a6:8d:a6:b4:55:e7:2a:43:6f:
                    a8:aa:d9:5f:96:02:ec:4f:22:5e:0a:1e:7e:dd:98:
                    fd:67:08:2d:bc:f8:25:c7:82:1c:dd:95:d3:45:e4:
                    59:61:c2:a7:5b:e2:00:20:8c:6c:fb:e7:bc:ec:f4:
                    08:ed:8b:9e:f9:71:f2:16:4f:c2:bc:64:29:68:74:
                    9c:fb:cf:1d:cf:cc:3c:fb:24:50:f3:8f:17:09:b1:
                    15:82:4e:f7:10:b0:1b:61:5d:66:bf:0c:e8:43:3e:
                    ae:6a:2a:9e:1e:3f:67:d6:ac:f8:4b:7e:77:d0:d8:
                    18:74:f9:d0:ba:62:28:3b:a4:a3:46:7b:63:f0:81:
                    62:c3:0b:72:8c:ef:ff:1f:b2:6d:37:dc:2b:1e:84:
                    df:52:5d:d2:b2:11:76:54:20:ea:b3:6e:34:35:2f:
                    37:5e:77:3e:bf:36:57:c0:17:73:67:5c:8e:b8:88:
                    b1:5a:1f:1e:a3:ba:fe:18:0a:15:28:be:48:21:df:
                    53:52:89:66:ea:51:de:e1:af:41:81:c1:08:a0:b5:
                    30:8f:1c:d3:8d:fb:3f:bf:23:12:68:24:99:1d:09:
                    43:22:17:1d:34:c0:39:ed:1a:bc:c2:97:69:f6:8b:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FD:00:79:5B:78:CF:87:69:57:34:3C:84:97:0E:D1:8F:4E:8F:E5
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:a1:42:99:3e:13:b4:25:30:4d:72:83:5c:f8:89:38:df:
         41:c7:0f:c6:a6:b6:cf:00:33:1a:5c:15:e2:a0:a7:44:82:9e:
         83:b5:6d:a9:bb:51:c6:b7:dd:ca:6b:d7:54:70:b0:97:2b:8e:
         48:9f:a9:0f:fb:80:35:b5:1e:ca:50:45:b1:89:2f:c9:eb:51:
         99:5d:db:89:82:b1:58:e5:a0:4f:32:88:af:3a:be:72:1d:b5:
         f5:cf:8b:4d:e4:fc:4a:82:7a:c2:1e:82:de:28:98:da:09:6f:
         e2:d4:7e:7d:1e:a2:df:da:8a:84:18:44:32:39:3a:3e:51:fe:
         ec:37:19:da:0b:c0:85:07:17:bf:5d:39:8a:ba:2e:30:fa:d8:
         ef:3f:49:ac:e3:8d:73:91:a2:11:61:67:8b:9f:f1:3d:b8:88:
         1d:a4:f6:e7:08:81:5e:71:31:34:34:01:b0:96:0a:4d:bf:f6:
         14:9c:0c:a4:17:0c:61:66:5c:f7:16:40:3a:47:1d:d5:45:2e:
         00:51:0b:fa:8a:20:62:7e:e0:01:f4:50:88:5d:98:fd:23:38:
         c6:e8:f2:cc:b5:ec:2d:49:64:ae:0a:ed:18:0c:3c:af:51:17:
         fc:ca:2b:d9:2d:34:04:55:27:14:0a:c3:8f:f8:1d:51:0d:7f:
         6e:a5:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:04 2026 by rpki-client