Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
File:                     D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json)
Hash identifier:          +H9U3cB54ILwjSgkvaWT3fIjtlMRcvWLFtDlnb8qkIA=
Subject key identifier:   FB:C4:BA:FE:5A:89:18:4B:12:43:57:B7:33:CB:9D:F1:5D:78:A8:9E
Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64
Certificate issuer:       /CN=D7FDD2309EFAC257359F67A560160D59D372E164
Certificate serial:       70DB0ABAEFBDF4B1BD8256656B477128E647AFEB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 03:46:37 +0000
Manifest this update:     Wed 13 May 2026 03:41:37 +0000
Manifest next update:     Thu 14 May 2026 04:33:37 +0000
Files and hashes:         1: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=)
                          2: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=)
                          3: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: 7xqooqiGWVcKbBC7Q0hbkLwQWNRbOmFrWaHvZjRmHy0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl
                          rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:0a:ba:ef:bd:f4:b1:bd:82:56:65:6b:47:71:28:e6:47:af:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164
        Validity
            Not Before: May 13 03:41:37 2026 GMT
            Not After : May 14 04:33:37 2026 GMT
        Subject: CN=FBC4BAFE5A89184B124357B733CB9DF15D78A89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:7a:30:83:92:af:d0:8f:60:24:41:9b:df:
                    ef:23:0b:c2:7c:97:05:fe:c1:1f:0d:cd:28:4b:fc:
                    01:c6:39:15:ad:f3:78:45:60:05:78:31:9d:3d:99:
                    11:6f:06:fd:51:76:13:01:4e:eb:db:45:5b:4c:aa:
                    b6:59:5a:14:aa:6f:a0:a2:38:1f:1a:fc:f2:f5:8a:
                    6c:26:16:d8:0a:59:bd:50:c5:11:bd:79:d1:85:f4:
                    07:92:19:1b:5e:52:a8:06:90:be:d3:65:b7:22:9a:
                    17:a8:a6:06:32:15:f6:2d:9a:7a:20:da:66:f1:42:
                    01:26:5f:9c:1f:5e:42:91:1e:d6:2f:d9:5e:01:9a:
                    dd:f2:2b:3a:82:7b:43:67:ab:cd:b2:f9:a0:eb:b3:
                    4d:71:62:cd:3f:f5:c2:ed:75:e9:47:13:48:9c:15:
                    7b:43:0e:b6:be:30:32:d2:49:a6:e1:7a:23:f9:02:
                    72:92:1a:ae:4b:29:57:38:22:d2:b0:ee:9d:ad:67:
                    10:38:d5:6e:ed:28:36:de:35:45:6d:7b:65:e6:c1:
                    b4:df:c7:25:d3:86:4c:85:40:b1:bf:d1:69:ba:61:
                    0b:f0:a3:81:6e:48:4e:fe:e9:e8:b2:5d:8a:f1:37:
                    22:33:85:d3:28:45:41:5d:7b:eb:e9:ab:14:bb:65:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C4:BA:FE:5A:89:18:4B:12:43:57:B7:33:CB:9D:F1:5D:78:A8:9E
            X509v3 Authority Key Identifier:
                keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7f:d9:84:9d:7d:5b:84:bc:7d:eb:96:bd:32:c3:07:cc:de:
         d7:40:4f:c8:8f:a5:9c:37:a8:f8:bf:0e:62:14:47:02:72:e3:
         9b:aa:c9:e6:98:8a:83:fb:c1:1d:ca:25:a6:aa:c5:10:72:03:
         de:bd:b2:e1:1d:58:41:3c:f6:8a:3d:a3:b0:08:77:8a:33:4a:
         87:5e:0a:b6:30:c7:01:52:9e:56:8f:75:11:7b:55:4f:a0:05:
         d4:cc:5e:22:0b:b6:38:c7:0d:35:53:73:a4:5f:15:ee:12:2b:
         30:54:d6:11:a3:05:74:76:7b:a4:3f:4f:b1:ff:b5:96:1c:35:
         4e:ae:e8:73:b7:54:fd:f9:5b:cb:b2:99:1f:a5:9a:55:61:83:
         e9:39:6a:ce:20:c2:04:cd:db:45:2c:8f:dd:7e:85:6d:6b:f2:
         94:71:f1:48:35:d6:06:e2:51:2b:f5:02:d9:ea:97:8a:fc:fa:
         e4:1e:76:90:dc:44:de:8c:be:4b:2b:d2:78:be:2c:6d:2e:13:
         de:96:ca:c8:89:11:83:43:62:db:11:21:1d:ff:ea:d1:78:d3:
         59:b9:56:d6:b8:ee:ed:da:19:9f:b9:b4:14:a5:64:f7:0c:29:
         4a:66:ed:3e:41:57:7a:cf:c5:b7:04:fa:db:e6:75:81:f1:e3:
         75:82:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:46 2026 by rpki-client