Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File:                     EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier:          2CviclElbYufhyn3hL6TRA+09pixU7bjWTuhcYV0OGI=
Subject key identifier:   0A:5C:7D:1D:50:F9:26:2F:90:3C:9F:E9:DE:DF:10:59:E9:3F:31:86
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer:       /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial:       5D670FA224753098865C687DFC5435516BF48B53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number:          C4
Signing time:             Sun 04 Oct 2026 07:24:29 +0000
Manifest this update:     Sun 04 Oct 2026 07:19:29 +0000
Manifest next update:     Mon 05 Oct 2026 08:10:29 +0000
Files and hashes:         1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
                          2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: ie+GieYdXmXogc7cgtqbDupl6XOPs1tDEKCUjr20sn8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
                          rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 08:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:67:0f:a2:24:75:30:98:86:5c:68:7d:fc:54:35:51:6b:f4:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
        Validity
            Not Before: Oct  4 07:19:29 2026 GMT
            Not After : Oct  5 08:10:29 2026 GMT
        Subject: CN=0A5C7D1D50F9262F903C9FE9DEDF1059E93F3186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:dd:3f:d9:f4:73:fa:dc:67:f0:a6:cf:bd:
                    60:15:8e:73:dd:77:36:49:2f:22:7d:99:60:32:d4:
                    79:78:ed:f0:99:89:ec:de:69:01:d5:b2:f9:99:12:
                    d3:5d:3b:f6:66:88:df:1a:3e:e2:7a:6d:75:55:56:
                    3d:27:65:97:d1:4d:ec:10:0c:de:b4:fe:46:d7:74:
                    fc:49:6b:77:9a:df:87:17:5c:9a:72:08:f6:49:35:
                    67:01:96:17:5d:93:98:74:de:00:fd:00:13:16:3e:
                    5f:ac:b6:9a:a0:cc:d2:83:1c:62:69:cf:1c:c0:a4:
                    e4:42:9c:82:8c:66:df:45:ee:dc:e4:47:72:59:ab:
                    98:e7:98:b9:28:9a:51:b0:aa:e0:b8:d0:6b:28:9d:
                    b4:a7:4e:fd:24:55:f3:66:4e:e7:50:e6:c7:c9:8a:
                    23:0e:ff:80:9c:4c:d2:69:84:ed:be:44:73:ca:93:
                    d0:d3:ad:ab:ee:d0:88:bf:fd:87:8e:2a:b4:17:0f:
                    ac:57:e3:79:a9:f5:bd:2d:03:41:8f:b9:2f:82:ad:
                    bc:b4:04:5b:a5:cc:20:fb:af:50:d3:d5:9d:15:07:
                    30:6e:9f:60:59:d7:df:aa:88:f7:00:09:58:47:25:
                    4a:12:cb:be:e5:86:30:45:9d:95:a2:fe:ee:47:a2:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5C:7D:1D:50:F9:26:2F:90:3C:9F:E9:DE:DF:10:59:E9:3F:31:86
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1b:bf:7f:7b:f7:44:cb:1b:28:1d:3a:6a:63:59:d2:bf:f6:
         36:43:85:93:55:88:d2:32:82:d9:a3:b9:1e:0c:15:69:ff:e8:
         ce:42:30:47:4e:29:96:91:74:77:75:23:c4:ee:d7:d1:f7:7f:
         c0:c8:29:ae:77:25:69:66:c8:8d:80:44:04:15:02:8f:36:f3:
         a3:8b:0d:28:81:21:31:4b:7c:fc:72:21:4d:73:4a:92:92:95:
         c6:5e:dd:ec:4a:36:3b:c3:69:02:b8:99:14:b3:b7:bc:70:50:
         55:25:bd:60:1c:d6:9e:62:8d:56:72:42:0d:84:20:fe:c9:38:
         cb:17:a8:7a:17:dd:0b:c1:c6:e5:79:75:e8:7e:79:57:08:75:
         97:75:bd:ff:d6:b2:bc:f0:b1:b6:1e:50:25:77:05:ae:51:0b:
         26:09:53:27:e4:d1:ee:b3:37:f5:e8:30:67:02:d1:81:06:e7:
         39:95:be:2a:6e:8e:fe:2b:4c:b0:d5:dd:50:f1:46:4a:1f:93:
         24:9f:a4:5e:8b:7b:33:0e:94:2b:6a:03:08:5a:c3:1c:60:34:
         e4:66:7c:3a:89:b7:eb:46:e5:b9:af:a5:20:45:b0:86:69:18:
         5a:4f:e6:cf:f6:a3:bb:18:67:ef:b9:18:e5:f8:5c:af:a7:a0:
         4f:e0:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:56:54 2026 by rpki-client