Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File:                     59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier:          4o/jMmxN07IAnCv7ab4OrGpiM6DzU7byeE2sxYjF8Sg=
Subject key identifier:   02:0E:9D:3E:14:89:46:43:30:1F:CB:42:65:5E:4A:56:8A:42:9C:50
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer:       /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial:       696B2016246C792EDF971B5C6B9ED1A185F2C30B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 20:08:22 +0000
Manifest this update:     Fri 14 Aug 2026 20:03:22 +0000
Manifest next update:     Sat 15 Aug 2026 23:15:22 +0000
Files and hashes:         1: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
                          2: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: rKLfxMr72Qh5fsGBWT9g4cIpA6Dg3bQiDAytOK2q7Ak=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
                          rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:20:16:24:6c:79:2e:df:97:1b:5c:6b:9e:d1:a1:85:f2:c3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
        Validity
            Not Before: Aug 14 20:03:22 2026 GMT
            Not After : Aug 15 23:15:22 2026 GMT
        Subject: CN=020E9D3E14894643301FCB42655E4A568A429C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:56:10:f1:00:54:9a:47:c5:c3:6b:1f:09:
                    81:9d:6f:72:74:40:fe:8e:a3:de:07:70:63:9b:86:
                    9e:ca:6a:dc:3c:4b:3e:52:82:6b:aa:54:3e:0b:8c:
                    7e:3d:d1:69:c0:17:12:d1:07:7c:8d:ec:09:11:87:
                    0f:89:2f:bc:55:8a:3d:7d:8b:91:e6:ba:33:d0:5d:
                    b4:b7:c8:65:90:22:91:69:72:91:01:c9:ac:92:a2:
                    ec:49:a8:71:3b:7e:63:fb:df:a8:78:c0:e3:aa:fd:
                    57:fc:40:5d:33:3c:d7:f0:d7:b2:46:b6:36:32:83:
                    63:5a:b4:4a:50:be:a6:a8:76:d2:8e:97:19:b9:8d:
                    51:9f:cc:97:bd:67:be:46:ad:f7:44:d2:6b:90:a7:
                    7c:cf:e8:8f:7e:99:3e:5c:4c:81:f3:02:ab:7f:05:
                    9e:11:fd:1a:b2:1e:b7:11:fc:6f:9c:c5:50:a2:ea:
                    67:1c:51:b6:00:29:35:28:56:fd:83:39:a7:e4:00:
                    e4:7e:dd:a7:8f:e9:07:8c:fd:23:29:58:f6:37:73:
                    04:2b:ae:d7:30:7c:fb:30:49:dc:15:99:dd:41:5d:
                    da:b1:2c:a5:68:08:82:d8:73:54:56:21:c6:c9:20:
                    b2:fa:65:3d:54:43:d9:4a:83:e1:e0:0b:eb:6d:44:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:9D:3E:14:89:46:43:30:1F:CB:42:65:5E:4A:56:8A:42:9C:50
            X509v3 Authority Key Identifier:
                keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:31:4f:06:65:2a:39:0d:49:18:6e:3e:6d:77:ec:72:3f:
         7e:6d:e3:d0:ef:60:bb:cc:62:ff:88:c4:82:c6:e8:74:69:4a:
         2f:9d:90:53:4d:38:3b:68:e2:2e:98:e6:bb:6b:ce:d2:f1:a5:
         c5:b6:39:94:5e:04:e1:b5:d0:9d:99:89:13:38:48:56:7a:85:
         bc:fa:d7:dc:b8:09:bf:4f:64:3c:2d:f9:5f:d4:d9:ca:24:90:
         ac:3e:3f:5e:55:d1:92:d6:00:08:28:9b:98:47:c5:d9:64:47:
         66:42:fd:33:66:cc:59:d7:b8:d6:c3:f1:4b:2f:79:7a:0f:a7:
         e4:7d:f0:0c:08:83:71:5b:2e:5f:59:b8:6f:cd:ba:c4:56:aa:
         d0:35:59:64:17:a5:cd:e1:1a:e2:b9:c2:8c:12:ac:65:8e:d4:
         46:1b:d5:d3:86:d1:85:33:4d:19:99:52:95:6c:bb:16:39:fa:
         21:c2:6c:b9:bd:03:a9:05:1b:cc:f0:64:9b:60:37:76:1c:c3:
         f6:cc:c6:d2:8d:5e:db:53:e2:64:5e:6f:d1:38:2b:59:52:d0:
         62:db:50:fd:a9:68:32:75:97:34:53:43:33:21:87:eb:0e:ef:
         11:6b:6c:c1:8a:95:27:31:4b:83:15:b1:e8:49:c3:a0:40:81:
         73:dd:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:12:36 2026 by rpki-client