Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
File:                     2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json)
Hash identifier:          mopQDCv9oHbvi2yAsKDhvAdEY+aOWh0yPqcEHa6cJzQ=
Subject key identifier:   F6:58:D9:6C:47:87:BD:30:41:E5:D7:83:1D:2B:B3:59:C5:3D:35:8E
Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
Certificate issuer:       /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
Certificate serial:       568BDD59E62D82C79A49338BA26BB8B81A643157
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 14:02:00 +0000
Manifest this update:     Fri 14 Aug 2026 13:57:00 +0000
Manifest next update:     Sat 15 Aug 2026 16:46:00 +0000
Files and hashes:         1: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: 8BeOpzb3fmrQctf2oExMGXPncBvwnsuimF9EwPG9Aq0=)
                          2: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=)
                          3: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl
                          rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 16:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8b:dd:59:e6:2d:82:c7:9a:49:33:8b:a2:6b:b8:b8:1a:64:31:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
        Validity
            Not Before: Aug 14 13:57:00 2026 GMT
            Not After : Aug 15 16:46:00 2026 GMT
        Subject: CN=F658D96C4787BD3041E5D7831D2BB359C53D358E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:0a:ac:43:c1:a1:1c:b4:a3:ea:9f:13:a6:
                    94:07:02:e7:25:df:60:6b:21:35:77:3e:d5:4a:19:
                    45:aa:78:d7:bc:d7:7d:0a:b4:de:5b:c6:18:e7:2f:
                    32:2a:9e:9e:c0:44:3d:9f:42:cd:8b:50:c4:59:8f:
                    b7:bc:8d:bd:c0:88:1a:d1:ca:e0:1c:9a:25:1a:c0:
                    e3:25:05:96:f5:cc:2b:d3:13:58:2b:8f:74:9e:ef:
                    a4:e8:11:57:93:67:7b:2a:14:d3:94:ea:e0:c4:e4:
                    dd:7c:a3:a7:2e:e8:f0:49:fd:8d:22:b5:90:3b:e4:
                    61:f7:29:89:bc:0e:f3:dd:db:60:97:c6:40:ec:24:
                    73:6e:32:3d:a5:a7:b6:a6:05:69:44:0c:a3:30:a9:
                    a6:50:6f:83:7a:5b:04:fb:8b:01:fd:9f:1c:4d:fc:
                    d6:30:cc:39:27:e8:14:23:0b:4e:19:34:21:1d:0f:
                    0b:bf:f8:74:82:e2:f7:d9:96:38:45:cd:9b:32:e7:
                    09:42:fc:81:83:1c:f4:c7:95:64:2b:86:74:48:53:
                    e7:1b:54:1f:02:2e:15:20:12:2d:76:74:50:79:da:
                    71:ea:b6:84:a8:0b:f4:d0:c8:9a:07:3c:cd:cf:11:
                    a1:23:4c:a8:5a:c4:90:0d:ee:e9:f8:65:f5:a1:92:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:58:D9:6C:47:87:BD:30:41:E5:D7:83:1D:2B:B3:59:C5:3D:35:8E
            X509v3 Authority Key Identifier:
                keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:a2:5e:07:b1:ef:25:d4:d9:9d:c2:13:5e:d0:9a:94:6b:
         99:40:02:1c:8a:1e:47:05:0a:b8:95:08:7b:a0:90:ec:5b:b5:
         c5:c3:c6:cd:d5:2d:97:e6:0f:52:7c:2f:6c:75:47:29:9c:ee:
         41:df:0e:63:e0:5f:93:31:28:73:87:00:11:43:3e:e3:62:0c:
         84:02:2b:a7:f9:4c:ae:cc:bb:30:80:d2:ec:d8:66:42:21:65:
         dc:ab:24:5c:95:d1:4d:ba:2d:5d:c4:96:b9:8c:13:d3:5d:25:
         05:47:a0:1c:c5:fd:dd:61:01:f5:a1:03:b8:ec:27:bf:44:fc:
         8a:e9:10:e3:8c:13:e2:cb:ca:1b:63:3f:07:71:ca:71:31:a8:
         ce:e9:ed:d7:32:23:a5:4d:8b:41:cd:3a:46:9f:87:07:b1:53:
         08:25:b1:67:8d:ba:4c:94:fc:e2:72:60:45:5d:dd:8f:b0:b8:
         d0:29:77:df:4f:f1:8c:8b:fd:e7:c1:c1:3f:4f:bf:a0:60:06:
         e8:51:c3:b7:e1:63:ab:9b:6c:6e:39:8d:5c:c3:b9:fb:46:b4:
         bd:8b:59:a8:2d:92:55:23:a1:c3:3c:47:53:12:6d:c4:3d:ec:
         9d:eb:60:36:0e:ea:99:b6:34:7b:f5:37:9f:57:49:13:da:d3:
         a9:e8:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:05 2026 by rpki-client