Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
File:                     208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json)
Hash identifier:          NkU8c8TseSPI5RZ94zkB0M5kihUWlMk32kZULXKtZo4=
Subject key identifier:   AA:96:70:72:E7:CE:F2:BD:84:CB:CC:9A:16:42:AA:6E:EC:6C:27:B1
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Certificate issuer:       /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial:       51C141B81C83A90B7169FB1564B7E90967CD2723
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 05:17:06 +0000
Manifest this update:     Wed 13 May 2026 05:12:06 +0000
Manifest next update:     Thu 14 May 2026 05:19:06 +0000
Files and hashes:         1: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=)
                          2: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=)
                          3: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: 7aADwPFgbEQgQOC5/MdwW5kO3/1eKjSZ54Z5nS32Ysk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
                          rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:41:b8:1c:83:a9:0b:71:69:fb:15:64:b7:e9:09:67:cd:27:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
        Validity
            Not Before: May 13 05:12:06 2026 GMT
            Not After : May 14 05:19:06 2026 GMT
        Subject: CN=AA967072E7CEF2BD84CBCC9A1642AA6EEC6C27B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:12:df:20:ab:ca:10:9d:58:3f:a7:4d:61:
                    26:19:e3:89:39:80:da:e7:e7:66:83:27:44:55:64:
                    b2:95:cc:fb:76:a8:d9:ba:a0:87:2d:de:26:1a:28:
                    f8:e6:44:54:b8:12:ad:13:7e:2b:7b:63:df:61:c1:
                    13:54:bd:ae:df:b7:08:20:f9:af:3b:53:05:30:78:
                    61:99:35:07:ad:50:69:29:9c:bb:b6:46:81:c9:05:
                    57:8b:c8:8f:62:15:47:1c:ce:96:f7:ac:f3:1e:06:
                    7f:bf:7c:e3:a6:1e:86:ca:48:08:63:c2:cf:fa:a3:
                    c7:af:29:5b:7b:22:23:84:23:47:36:f1:09:d7:24:
                    b8:96:00:43:7b:f3:a5:9f:1d:5d:17:2b:c2:81:c2:
                    42:16:83:bf:e1:4c:d5:ba:bd:2b:99:53:9e:c8:6f:
                    f7:8b:84:92:02:86:cd:56:17:7b:79:98:53:f5:73:
                    cc:de:48:58:46:03:d7:50:45:04:c0:df:68:f3:98:
                    17:69:43:56:85:0e:0d:c2:06:08:a6:6c:90:dc:62:
                    74:3d:31:bb:28:82:02:22:b5:77:d0:0c:e2:78:53:
                    51:1f:5f:e8:54:3e:73:7c:22:3d:5d:e9:e9:59:b3:
                    d9:04:b9:70:2c:a9:cf:7d:4f:fb:c9:b7:ba:03:92:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:70:72:E7:CE:F2:BD:84:CB:CC:9A:16:42:AA:6E:EC:6C:27:B1
            X509v3 Authority Key Identifier:
                keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8e:c5:a0:0c:88:2d:d4:cd:c0:bf:18:bf:c6:9c:4a:dc:b7:
         53:d5:21:49:80:7b:55:40:97:e1:20:f9:e9:80:73:ea:26:18:
         3d:c1:86:92:fe:aa:34:d9:da:d9:1c:82:62:9a:f5:61:88:2c:
         59:04:c8:d9:6a:e9:88:bb:35:5b:c4:10:3d:57:39:06:78:b7:
         90:9a:4b:eb:48:df:86:a4:df:46:7a:3c:3c:e1:c8:59:f9:67:
         3e:b7:96:2b:cd:ee:4e:ca:3f:e0:b0:15:a7:7e:28:d8:f7:f2:
         cd:e8:fa:ab:0f:7c:bf:22:6f:db:1d:5d:21:6c:13:57:c2:74:
         df:9a:28:53:4e:00:ad:dc:04:e2:f1:43:00:03:9d:ab:00:0e:
         86:10:1d:e6:81:02:5f:c5:1c:c2:27:95:eb:69:64:e0:14:67:
         bd:72:ed:44:15:14:04:bd:a9:9f:ab:fc:e6:01:49:0b:43:1e:
         3d:83:bb:7a:ef:3c:03:16:a3:98:9f:e8:a3:a6:c8:85:df:ec:
         57:c1:3d:27:0d:03:83:38:ad:26:cd:65:bf:08:53:1c:09:b4:
         91:1a:aa:cb:e8:09:93:12:89:06:a9:73:6d:3d:5b:f0:6f:eb:
         09:a9:11:42:5c:a2:b4:18:f9:59:e0:73:f0:12:a9:43:0e:c9:
         5e:ce:e9:44
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUUcFBuByDqQtxafsVZLfpCWfNJyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4QzlBRjJFNTlFQUEzMERCMTNFNTA5NjlCRDg2NkI2
NzNEQUI2ODAeFw0yNjA1MTMwNTEyMDZaFw0yNjA1MTQwNTE5MDZaMDMxMTAvBgNV
BAMTKEFBOTY3MDcyRTdDRUYyQkQ4NENCQ0M5QTE2NDJBQTZFRUM2QzI3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnRBLfIKvKEJ1YP6dNYSYZ44k5
gNrn52aDJ0RVZLKVzPt2qNm6oIct3iYaKPjmRFS4Eq0Tfit7Y99hwRNUva7ftwgg
+a87UwUweGGZNQetUGkpnLu2RoHJBVeLyI9iFUcczpb3rPMeBn+/fOOmHobKSAhj
ws/6o8evKVt7IiOEI0c28QnXJLiWAEN786WfHV0XK8KBwkIWg7/hTNW6vSuZU57I
b/eLhJIChs1WF3t5mFP1c8zeSFhGA9dQRQTA32jzmBdpQ1aFDg3CBgimbJDcYnQ9
MbsoggIitXfQDOJ4U1EfX+hUPnN8Ij1d6elZs9kEuXAsqc99T/vJt7oDkkCJAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUqpZwcufO8r2Ey8yaFkKqbuxsJ7EwHwYDVR0j
BBgwFoAUIIya8uWeqjDbE+UJab2Ga2c9q2gwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0lHQUJZ
VEUvMC8yMDhDOUFGMkU1OUVBQTMwREIxM0U1MDk2OUJEODY2QjY3M0RBQjY4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzIwOEM5QUYyRTU5RUFBMzBEQjEzRTUwOTY5
QkQ4NjZCNjczREFCNjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HSUdBQllURS8wLzIwOEM5QUYy
RTU5RUFBMzBEQjEzRTUwOTY5QkQ4NjZCNjczREFCNjgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWjsWg
DIgt1M3Avxi/xpxK3LdT1SFJgHtVQJfhIPnpgHPqJhg9wYaS/qo02drZHIJimvVh
iCxZBMjZaumIuzVbxBA9VzkGeLeQmkvrSN+GpN9Gejw84chZ+Wc+t5Yrze5Oyj/g
sBWnfijY9/LN6PqrD3y/Im/bHV0hbBNXwnTfmihTTgCt3ATi8UMAA52rAA6GEB3m
gQJfxRzCJ5XraWTgFGe9cu1EFRQEvamfq/zmAUkLQx49g7t67zwDFqOYn+ijpsiF
3+xXwT0nDQODOK0mzWW/CFMcCbSRGqrL6AmTEokGqXNtPVvwb+sJqRFCXKK0GPlZ
4HPwEqlDDslezulE
-----END CERTIFICATE-----
Generated at Wed May 13 20:34:01 2026 by rpki-client