Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File:                     65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier:          gV9J4ScEjP8kXwBi2P5ioSzGKztweVFfs3YvkvyuBoU=
Subject key identifier:   95:B4:97:10:62:E2:DD:46:9E:7E:80:3C:0A:7E:86:89:FD:44:60:24
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer:       /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial:       955C69BC6125AAD0D60BABD5F61448ADB0F28D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number:          8D
Signing time:             Sat 15 Aug 2026 03:09:10 +0000
Manifest this update:     Sat 15 Aug 2026 03:04:10 +0000
Manifest next update:     Sun 16 Aug 2026 04:44:10 +0000
Files and hashes:         1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
                          2: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: ONZFmW9ebUhZm7T0BwbI3UwiyVknKh/Ks8oxTDKACsg=)
                          3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 02:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:5c:69:bc:61:25:aa:d0:d6:0b:ab:d5:f6:14:48:ad:b0:f2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
        Validity
            Not Before: Aug 15 03:04:10 2026 GMT
            Not After : Aug 16 04:44:10 2026 GMT
        Subject: CN=95B4971062E2DD469E7E803C0A7E8689FD446024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:9a:72:37:a7:53:d9:6e:af:9e:76:59:89:
                    08:60:18:41:99:18:31:bd:f6:11:22:57:2d:0b:fb:
                    7a:51:75:95:0d:77:b1:fd:fc:f7:a6:f8:b0:41:82:
                    95:8c:7a:c0:89:4c:a9:d9:06:48:15:a5:eb:2b:5b:
                    1b:aa:96:2d:78:1d:e5:b1:54:bd:79:af:0f:36:fe:
                    da:3c:22:e5:ee:91:15:2d:07:b0:3c:7c:4d:76:5e:
                    e7:c4:80:af:2a:af:14:e4:ad:46:20:6e:ac:d0:a8:
                    1c:8c:85:86:b6:2d:11:3d:bc:26:85:52:b7:40:8c:
                    be:f5:db:0a:68:38:3e:78:38:75:50:40:ee:ae:ac:
                    77:e6:18:08:02:1f:9c:65:ce:38:01:59:11:dc:0c:
                    83:ab:8f:62:3b:a5:c6:a2:98:0a:9e:65:30:bd:e1:
                    e8:04:1a:04:5c:43:ed:aa:8c:89:51:d6:c6:4b:63:
                    6f:2e:31:8b:47:09:2f:0d:96:43:12:16:8b:63:3b:
                    d4:be:f7:b5:6d:6c:dd:8a:3a:2e:b0:c7:d3:e0:63:
                    54:09:a7:ac:97:b8:a2:88:1e:8a:3a:c8:9c:84:9c:
                    28:04:f9:1a:a9:7c:c4:20:4d:08:87:46:40:55:1e:
                    24:59:3b:19:22:d7:a6:4f:f0:82:95:d9:32:ce:af:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:97:10:62:E2:DD:46:9E:7E:80:3C:0A:7E:86:89:FD:44:60:24
            X509v3 Authority Key Identifier:
                keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:36:25:83:ba:0a:d5:23:25:3e:17:1f:1d:ec:ce:f9:a9:
         8d:7f:28:8a:4b:69:02:cc:51:1d:a9:f7:08:67:1d:13:a0:a1:
         a5:e2:14:4f:9e:b9:ae:1f:4e:41:8b:08:47:cd:bb:59:cf:09:
         5e:65:c4:de:12:c2:8d:36:53:1c:bf:81:3e:b9:8c:0e:82:71:
         25:46:16:40:f0:61:8b:75:a1:55:2d:ac:a2:99:c9:15:12:f7:
         e0:33:57:ad:70:f9:24:c5:e0:38:f5:96:52:74:4a:3c:39:95:
         d2:1a:ab:42:e6:92:e7:a0:f1:3a:2f:59:21:6d:22:96:26:d0:
         30:6e:f7:bb:f7:dc:16:e3:4d:1d:87:a2:96:fb:9d:88:e2:61:
         6c:94:ac:c3:74:84:d4:e1:9b:73:5e:55:82:1b:5e:a2:8c:a5:
         cf:b6:d5:d7:05:b1:d7:ef:8d:83:f5:71:cc:c6:84:43:1c:82:
         84:b3:16:3c:90:b6:61:67:a3:8f:27:b4:73:4c:b7:5c:58:ed:
         78:6c:da:60:89:8e:71:1f:3d:af:7a:57:f8:7b:47:ae:bc:12:
         dc:c6:a1:3d:8f:46:7c:9b:1a:d9:b6:6a:f4:97:ad:69:58:9e:
         8c:a1:58:84:49:ff:b8:ae:b6:a6:4a:1e:2a:8f:1a:40:d5:4d:
         c2:af:07:5c
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUAJVcabxhJarQ1gur1fYUSK2w8o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3
QUE0NkE5NDAeFw0yNjA4MTUwMzA0MTBaFw0yNjA4MTYwNDQ0MTBaMDMxMTAvBgNV
BAMTKDk1QjQ5NzEwNjJFMkRENDY5RTdFODAzQzBBN0U4Njg5RkQ0NDYwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LppyN6dT2W6vnnZZiQhgGEGZ
GDG99hEiVy0L+3pRdZUNd7H9/Pem+LBBgpWMesCJTKnZBkgVpesrWxuqli14HeWx
VL15rw82/to8IuXukRUtB7A8fE12XufEgK8qrxTkrUYgbqzQqByMhYa2LRE9vCaF
UrdAjL712wpoOD54OHVQQO6urHfmGAgCH5xlzjgBWRHcDIOrj2I7pcaimAqeZTC9
4egEGgRcQ+2qjIlR1sZLY28uMYtHCS8NlkMSFotjO9S+97VtbN2KOi6wx9PgY1QJ
p6yXuKKIHoo6yJyEnCgE+RqpfMQgTQiHRkBVHiRZOxki16ZP8IKV2TLOryMJAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUlbSXEGLi3UaefoA8Cn6Gif1EYCQwHwYDVR0j
BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1
ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3
ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0HzYl
g7oK1SMlPhcfHezO+amNfyiKS2kCzFEdqfcIZx0ToKGl4hRPnrmuH05BiwhHzbtZ
zwleZcTeEsKNNlMcv4E+uYwOgnElRhZA8GGLdaFVLayimckVEvfgM1etcPkkxeA4
9ZZSdEo8OZXSGqtC5pLnoPE6L1khbSKWJtAwbve799wW400dh6KW+52I4mFslKzD
dITU4ZtzXlWCG16ijKXPttXXBbHX742D9XHMxoRDHIKEsxY8kLZhZ6OPJ7RzTLdc
WO14bNpgiY5xHz2velf4e0euvBLcxqE9j0Z8mxrZtmr0l61pWJ6MoViESf+4rram
Sh4qjxpA1U3Crwdc
-----END CERTIFICATE-----
Generated at Sat Aug 15 10:16:57 2026 by rpki-client