Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
File:                     D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json)
Hash identifier:          5DVOGjW0oF/10PeTTWPJE+p9pOWKZEL2xELxf3lBQgo=
Subject key identifier:   F1:B8:1F:30:DD:5D:0D:08:5B:43:26:02:45:94:29:59:04:78:3D:7A
Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64
Certificate issuer:       /CN=D7FDD2309EFAC257359F67A560160D59D372E164
Certificate serial:       46ECC9DDDB6EF823A3B22B2FCC776E4C34C9EAE2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 15:37:11 +0000
Manifest this update:     Fri 14 Aug 2026 15:32:11 +0000
Manifest next update:     Sat 15 Aug 2026 15:39:11 +0000
Files and hashes:         1: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=)
                          2: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: oCLWOYmqzv+JdC1KGYCOjGdc9V1LN1joWGJIOqIAEGY=)
                          3: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl
                          rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ec:c9:dd:db:6e:f8:23:a3:b2:2b:2f:cc:77:6e:4c:34:c9:ea:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164
        Validity
            Not Before: Aug 14 15:32:11 2026 GMT
            Not After : Aug 15 15:39:11 2026 GMT
        Subject: CN=F1B81F30DD5D0D085B4326024594295904783D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:a0:d3:62:41:aa:6c:cc:d5:05:98:c5:a4:
                    33:fa:c1:af:c7:df:4a:e0:b5:b9:4d:db:f2:37:9a:
                    eb:35:0c:e1:63:40:ff:01:a9:8d:03:08:b3:02:82:
                    cd:6f:bf:73:26:84:1f:1b:e4:f4:5a:22:98:01:22:
                    28:bf:0e:81:72:ff:23:db:2a:50:47:a1:6f:91:7b:
                    fe:9f:1e:6a:6a:08:b1:e9:74:07:fc:c3:b4:eb:79:
                    21:a9:fb:3f:8d:c1:45:9b:e9:73:ed:89:f0:c5:89:
                    20:45:dc:48:fa:77:ca:b3:75:1d:8b:97:0e:c8:0f:
                    81:24:20:5d:e2:43:c1:73:92:ab:ec:f6:3f:5a:f7:
                    87:4f:11:7c:d8:39:98:a7:3b:02:8b:14:51:3a:51:
                    49:12:c6:6b:48:20:5f:6b:a2:71:e7:72:34:cd:19:
                    42:dc:79:92:d8:30:a1:a8:62:44:cb:ef:5b:60:1c:
                    41:bd:85:58:da:f0:6f:da:56:46:b6:4b:80:97:6b:
                    9c:d8:a6:85:0b:17:70:d0:3f:59:ba:6a:de:ee:24:
                    84:ae:82:08:09:9e:f9:ba:99:1c:40:25:07:94:46:
                    0f:4f:97:c1:61:c4:bc:11:e3:03:56:9c:d9:36:db:
                    80:55:3b:3c:e0:f4:94:f3:19:38:e1:43:ca:e1:ae:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:1F:30:DD:5D:0D:08:5B:43:26:02:45:94:29:59:04:78:3D:7A
            X509v3 Authority Key Identifier:
                keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:89:7e:bb:78:37:66:76:cc:8c:3c:f5:d1:43:df:b6:30:25:
         3d:f1:37:c5:b6:c1:87:fb:4d:82:b7:32:5e:a9:a0:3d:d4:f8:
         e9:b5:18:c4:21:94:7c:5c:57:22:68:a0:ef:69:e3:9a:e8:26:
         fa:0c:10:63:74:c0:7d:33:63:0f:f8:94:aa:d2:d0:85:61:aa:
         79:7a:a3:18:bd:96:84:8a:6a:c9:0b:f5:99:1e:dc:bf:2f:92:
         75:a7:22:54:2c:fa:74:54:ec:20:45:63:75:59:93:77:77:82:
         45:2d:47:cd:16:1c:68:49:e0:65:8d:41:83:1f:f5:ca:d3:dd:
         24:0d:9d:1c:5b:13:6e:0d:2a:bd:02:4c:d8:81:3d:8e:2c:cd:
         f6:a9:f6:36:ea:fe:06:d1:b4:45:aa:7a:65:58:e2:32:3d:22:
         01:cb:2d:ad:dd:38:2a:ca:37:c8:a8:0f:2b:c1:95:b1:b7:c0:
         d1:5a:d2:8b:93:54:a8:16:55:74:30:20:d6:a3:e0:19:5d:29:
         53:84:e0:76:f4:4c:7e:40:92:15:e9:80:d7:b4:fd:ba:3b:80:
         d2:cc:d9:9b:40:1f:32:13:b7:aa:e0:14:7e:75:3c:3a:d3:26:
         6f:65:d7:d0:d3:96:0e:4e:30:f0:03:d3:31:81:ae:13:cd:04:
         08:72:18:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:39 2026 by rpki-client