Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
File:                     C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft (raw, json)
Hash identifier:          JaT46urls3b/C1is5ZOAk0ZTu0Eio+85GyVdilLsAnY=
Subject key identifier:   FD:18:8B:D2:7B:05:09:BE:82:98:DB:94:08:E6:AF:3F:63:6E:F8:9C
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Certificate issuer:       /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial:       3824F5FAF7041F24B3C646933BE2F8D6028F951D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
Manifest number:          4C
Signing time:             Tue 30 Jun 2026 01:22:47 +0000
Manifest this update:     Tue 30 Jun 2026 01:17:47 +0000
Manifest next update:     Wed 01 Jul 2026 04:44:47 +0000
Files and hashes:         1: 3131322e3231332e34382e302f32302d3234203d3e203137343136.roa (hash: IyZ2uNj2Ed2hbTcxfq9Hoz8oXlcjs1V2+SFVtmy0SAo=)
                          2: 3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (hash: u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=)
                          3: 34332e3232342e32332e302f32342d3234203d3e20313331363436.roa (hash: 6SGE2td+SruVzE8RTP0oAaYfc3isBgmmTrc/lKGCQhk=)
                          4: 34332e3232342e32302e302f32342d3234203d3e20313338393135.roa (hash: qZ1Xl7P/oCReEcW84jHPinXVKHg48mLqWM57olzhxqo=)
                          5: 34332e3232342e32312e302f32342d3234203d3e20323034363737.roa (hash: epTQKovmrbQ/AqVEwMulgxX1xPN6owaD0kc3odFd0PM=)
                          6: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl (hash: zoP+/DTQtWlY6fzR4204kOhhqCOT8sjyb6fK8arW2W8=)
                          7: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (hash: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=)
                          8: 3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (hash: hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=)
                          9: 3231312e37382e38302e302f32302d3234203d3e203137343136.roa (hash: e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=)
                          10: 34332e3232342e32322e302f32342d3234203d3e20323034363737.roa (hash: I8CxTXqOghxbHmSPog8SdWmG46+kyQ6z3kNCUfC4F6g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
                          rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 04:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:24:f5:fa:f7:04:1f:24:b3:c6:46:93:3b:e2:f8:d6:02:8f:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
        Validity
            Not Before: Jun 30 01:17:47 2026 GMT
            Not After : Jul  1 04:44:47 2026 GMT
        Subject: CN=FD188BD27B0509BE8298DB9408E6AF3F636EF89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:fa:86:fc:e2:77:0c:87:da:ba:8e:7a:b1:
                    72:e6:a3:02:21:cb:35:5d:05:83:91:3d:37:59:97:
                    ec:ce:03:7d:07:eb:85:77:72:16:1b:5d:c6:67:b9:
                    09:da:f9:f4:2b:65:b5:a3:51:b2:ce:df:92:35:01:
                    9d:74:2b:b8:b6:a7:96:0e:bb:31:df:67:77:36:cc:
                    60:a4:97:f1:8e:2f:1b:24:58:99:8e:14:b8:79:c0:
                    0a:d5:1b:38:52:d3:50:36:69:6b:6e:c0:88:5c:f4:
                    90:69:b6:f0:ec:ee:f5:a7:b2:08:ca:bb:84:b1:37:
                    b8:9f:5e:62:74:7f:f4:aa:9b:b1:d8:81:39:a9:cb:
                    96:27:9b:b7:39:d1:b9:e1:28:0c:2a:9a:f8:53:92:
                    2e:34:db:f8:8a:33:71:f4:d0:3d:d0:3c:2a:36:32:
                    6f:38:ea:db:ee:e0:37:62:f9:e6:e9:dd:65:1e:18:
                    13:76:d7:42:2b:2e:d3:f0:d9:1a:73:48:9c:5f:b4:
                    b1:b3:76:14:b7:06:af:a6:16:a9:a4:84:c2:97:80:
                    fb:bf:9a:d3:f2:50:f9:1b:64:b4:83:77:c7:43:b5:
                    e1:17:e7:9e:e3:07:6d:11:ec:74:6e:31:5e:1c:67:
                    df:02:47:26:7c:38:7c:47:5c:f2:29:ab:ba:d7:09:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:8B:D2:7B:05:09:BE:82:98:DB:94:08:E6:AF:3F:63:6E:F8:9C
            X509v3 Authority Key Identifier:
                keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:95:60:d5:06:b0:b4:29:c2:68:d3:36:36:58:d8:67:39:8a:
         93:a2:9f:65:e4:43:24:b0:9e:93:53:e3:6e:5a:ad:27:38:4b:
         60:55:d7:af:19:fb:e6:8a:e0:82:43:de:c3:03:7f:72:ba:1c:
         c8:7a:50:26:5b:2d:ce:7a:63:58:98:1f:2f:37:69:8d:df:1e:
         10:c1:07:2e:0c:bb:2c:7b:c4:1e:dc:1c:49:f7:23:51:0a:a9:
         b6:35:46:8c:a5:8e:25:7d:69:82:e8:aa:23:12:41:4f:a3:6a:
         73:89:5c:49:b6:9c:6a:85:4c:1a:df:77:90:66:e6:2c:cf:d8:
         38:87:d2:1e:ae:b3:b7:36:83:50:71:b1:eb:93:16:da:7f:aa:
         00:c7:50:cb:55:cc:77:c6:9f:ab:9a:61:83:06:bf:72:d6:bb:
         cd:42:84:87:95:d3:07:a7:1b:76:ee:3c:5a:d8:75:83:43:30:
         53:72:2d:0c:5b:1c:9b:bc:d6:9f:e8:a7:e4:a4:90:d3:33:df:
         23:27:2e:97:0c:f0:b1:1d:55:26:15:4e:61:85:19:0e:9e:fb:
         e2:ef:36:7d:23:4a:ce:91:01:f7:5d:20:c8:46:48:19:91:60:
         8f:a0:0c:51:9f:9c:ec:7a:a7:e2:52:d6:82:11:48:a1:07:00:
         53:c2:c9:61
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUOCT1+vcEHySzxkaTO+L41gKPlR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVERjMxRDlFRUI1REE3MjY2OEQ1OEZCOERCMEU3NUUz
QUQ3QkY5MzAeFw0yNjA2MzAwMTE3NDdaFw0yNjA3MDEwNDQ0NDdaMDMxMTAvBgNV
BAMTKEZEMTg4QkQyN0IwNTA5QkU4Mjk4REI5NDA4RTZBRjNGNjM2RUY4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSy/qG/OJ3DIfauo56sXLmowIh
yzVdBYORPTdZl+zOA30H64V3chYbXcZnuQna+fQrZbWjUbLO35I1AZ10K7i2p5YO
uzHfZ3c2zGCkl/GOLxskWJmOFLh5wArVGzhS01A2aWtuwIhc9JBptvDs7vWnsgjK
u4SxN7ifXmJ0f/Sqm7HYgTmpy5Ynm7c50bnhKAwqmvhTki402/iKM3H00D3QPCo2
Mm846tvu4Ddi+ebp3WUeGBN210IrLtPw2RpzSJxftLGzdhS3Bq+mFqmkhMKXgPu/
mtPyUPkbZLSDd8dDteEX557jB20R7HRuMV4cZ98CRyZ8OHxHXPIpq7rXCUpLAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU/RiL0nsFCb6CmNuUCOavP2Nu+JwwHwYDVR0j
BBgwFoAUxd8x2e612nJmjVj7jbDnXjrXv5MwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdJTlMv
MC9DNURGMzFEOUVFQjVEQTcyNjY4RDU4RkI4REIwRTc1RTNBRDdCRjkzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0M1REYzMUQ5RUVCNURBNzI2NjhENThGQjhEQjBF
NzVFM0FEN0JGOTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EV0lOUy8wL0M1REYzMUQ5RUVCNURB
NzI2NjhENThGQjhEQjBFNzVFM0FEN0JGOTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxlWDVBrC0KcJo
0zY2WNhnOYqTop9l5EMksJ6TU+NuWq0nOEtgVdevGfvmiuCCQ97DA39yuhzIelAm
Wy3OemNYmB8vN2mN3x4QwQcuDLsse8Qe3BxJ9yNRCqm2NUaMpY4lfWmC6KojEkFP
o2pziVxJtpxqhUwa33eQZuYsz9g4h9IerrO3NoNQcbHrkxbaf6oAx1DLVcx3xp+r
mmGDBr9y1rvNQoSHldMHpxt27jxa2HWDQzBTci0MWxybvNaf6KfkpJDTM98jJy6X
DPCxHVUmFU5hhRkOnvvi7zZ9I0rOkQH3XSDIRkgZkWCPoAxRn5zseqfiUtaCEUih
BwBTwslh
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:33 2026 by rpki-client