Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File:                     19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier:          ia8zzrB8W4LVA2vArosQwImOft3xLhsykyvQCVvV5ac=
Subject key identifier:   1F:48:50:A4:B0:F1:5B:96:FC:91:2D:3D:C2:FF:E2:8F:C6:AF:59:98
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer:       /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial:       16A1F8D0FDECB3B133556E1D79F6616CDCE191E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 07:37:39 +0000
Manifest this update:     Wed 13 May 2026 07:32:39 +0000
Manifest next update:     Thu 14 May 2026 10:38:39 +0000
Files and hashes:         1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: 5egt5/6uJZBMxHGHbzv4fiB4B+bVer8+2pIAsq0j8Mo=)
                          2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
                          rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a1:f8:d0:fd:ec:b3:b1:33:55:6e:1d:79:f6:61:6c:dc:e1:91:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
        Validity
            Not Before: May 13 07:32:39 2026 GMT
            Not After : May 14 10:38:39 2026 GMT
        Subject: CN=1F4850A4B0F15B96FC912D3DC2FFE28FC6AF5998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:3a:64:07:1c:86:ee:95:b8:81:ed:c8:70:
                    47:7f:7b:e4:8b:96:30:b3:78:40:ef:2d:ba:bd:20:
                    e5:82:ed:78:5e:03:71:bd:35:0e:37:07:62:81:3b:
                    d3:1f:8d:42:83:9b:dd:bd:c6:7f:f6:37:6e:51:a2:
                    40:4d:0f:81:f2:90:33:89:3f:f3:2d:df:3b:9a:ee:
                    98:cd:63:1d:e2:7c:e2:2a:7f:c0:3c:d1:c2:25:c4:
                    b2:5b:36:e2:dc:46:f2:08:8b:7c:30:f2:24:fe:40:
                    df:2b:50:f4:c4:62:b9:60:de:1c:1a:51:2c:48:2b:
                    21:0d:81:12:79:59:ea:36:83:32:3f:8d:f0:37:39:
                    6e:e0:ac:4e:65:ed:7c:42:cd:50:01:50:33:25:d3:
                    05:b6:8c:62:76:1f:06:4a:cf:61:66:ad:fc:76:cb:
                    d2:7c:de:da:40:f7:19:bf:c6:b1:9b:13:6e:1c:49:
                    a2:b3:39:87:86:ec:ea:2e:d1:a6:c1:69:02:57:fa:
                    a7:41:70:8d:02:7e:0e:d0:05:1c:17:44:61:5a:b9:
                    2f:ee:2f:85:f7:eb:41:2d:cd:f8:3e:ee:df:54:0b:
                    fd:6b:52:54:db:fa:a9:f8:91:ff:0b:fb:f5:07:7f:
                    e2:dd:7f:1d:59:09:85:b5:cd:dc:ee:0d:73:ad:13:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:50:A4:B0:F1:5B:96:FC:91:2D:3D:C2:FF:E2:8F:C6:AF:59:98
            X509v3 Authority Key Identifier:
                keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:81:45:f5:09:05:0e:f4:bc:f1:41:9b:07:74:72:05:9f:
         54:84:bf:4b:12:e0:07:e0:34:f3:a0:b1:ee:ec:0b:7e:b7:e6:
         af:ab:5f:e3:0e:2e:49:e0:2d:19:24:12:1c:d4:ed:53:7e:4b:
         a5:fb:c8:c9:88:9f:73:ef:54:ae:84:c0:09:0e:75:1b:26:39:
         bd:a7:c8:49:43:ee:af:48:3c:3a:02:71:4c:b5:fc:99:21:fb:
         8d:a2:e0:a8:9c:be:9b:9f:65:dd:06:bb:16:e2:57:d8:b7:77:
         80:77:68:62:52:7d:d9:97:73:09:69:ec:ff:a2:75:2e:96:ac:
         91:84:8d:77:2f:60:a4:56:2a:b0:7e:ef:aa:3a:b6:89:3f:33:
         61:00:d8:93:59:9f:1e:b8:bc:cb:89:e2:a1:f3:67:b6:88:63:
         f8:57:da:0c:68:0c:38:c4:9d:4d:c5:34:8d:63:7c:e5:4e:8c:
         1e:be:64:d6:b5:34:ef:1e:76:84:d8:b2:04:67:43:95:90:4c:
         56:2f:d0:b2:46:28:10:92:16:f4:0e:f5:ad:a8:7a:17:35:3c:
         e1:ae:b4:d3:e1:db:24:14:57:dd:7d:6b:3f:a2:58:1f:30:c5:
         14:ac:b9:d2:28:f8:15:85:e0:d8:ee:01:0d:e9:08:c7:21:a4:
         83:c1:6e:fc
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUFqH40P3ss7EzVW4defZhbNzhkeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEwMDBG
RjlFNTREMzAeFw0yNjA1MTMwNzMyMzlaFw0yNjA1MTQxMDM4MzlaMDMxMTAvBgNV
BAMTKDFGNDg1MEE0QjBGMTVCOTZGQzkxMkQzREMyRkZFMjhGQzZBRjU5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCapjpkBxyG7pW4ge3IcEd/e+SL
ljCzeEDvLbq9IOWC7XheA3G9NQ43B2KBO9MfjUKDm929xn/2N25RokBND4HykDOJ
P/Mt3zua7pjNYx3ifOIqf8A80cIlxLJbNuLcRvIIi3ww8iT+QN8rUPTEYrlg3hwa
USxIKyENgRJ5Weo2gzI/jfA3OW7grE5l7XxCzVABUDMl0wW2jGJ2HwZKz2Fmrfx2
y9J83tpA9xm/xrGbE24cSaKzOYeG7Oou0abBaQJX+qdBcI0Cfg7QBRwXRGFauS/u
L4X360Etzfg+7t9UC/1rUlTb+qn4kf8L+/UHf+Ldfx1ZCYW1zdzuDXOtE3zbAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUH0hQpLDxW5b8kS09wv/ij8avWZgwHwYDVR0j
BBgwFoAUGcJNZKVjfx9oN9Brp38QAP+eVNMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWS8w
LzE5QzI0RDY0QTU2MzdGMUY2ODM3RDA2QkE3N0YxMDAwRkY5RTU0RDMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEw
MDBGRjlFNTREMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0VSQVkvMC8xOUMyNEQ2NEE1NjM3RjFG
NjgzN0QwNkJBNzdGMTAwMEZGOUU1NEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANECBRfUJBQ70vPFB
mwd0cgWfVIS/SxLgB+A086Cx7uwLfrfmr6tf4w4uSeAtGSQSHNTtU35LpfvIyYif
c+9UroTACQ51GyY5vafISUPur0g8OgJxTLX8mSH7jaLgqJy+m59l3Qa7FuJX2Ld3
gHdoYlJ92ZdzCWns/6J1LpaskYSNdy9gpFYqsH7vqjq2iT8zYQDYk1mfHri8y4ni
ofNntohj+FfaDGgMOMSdTcU0jWN85U6MHr5k1rU07x52hNiyBGdDlZBMVi/QskYo
EJIW9A71rah6FzU84a600+HbJBRX3X1rP6JYHzDFFKy50ij4FYXg2O4BDekIxyGk
g8Fu/A==
-----END CERTIFICATE-----
Generated at Wed May 13 20:36:12 2026 by rpki-client