Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
File:                     D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json)
Hash identifier:          wYE4zL4De2cUYY3o96z+xGcRSe00Y440ZHlnvY2hwV4=
Subject key identifier:   EF:C3:CE:9B:C9:15:8B:23:17:95:44:A7:86:F0:B8:8B:D5:4D:B9:D6
Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64
Certificate issuer:       /CN=D7FDD2309EFAC257359F67A560160D59D372E164
Certificate serial:       57F45AE0642B7B8B30EBA0F1324A2B8390461E76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 16:44:18 +0000
Manifest this update:     Tue 30 Jun 2026 16:39:18 +0000
Manifest next update:     Wed 01 Jul 2026 17:02:18 +0000
Files and hashes:         1: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=)
                          2: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=)
                          3: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: eGJ3ukUSY6sTPPRr1MkoT8//GgEXgyl5hn2hxj0B7Ck=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl
                          rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f4:5a:e0:64:2b:7b:8b:30:eb:a0:f1:32:4a:2b:83:90:46:1e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164
        Validity
            Not Before: Jun 30 16:39:18 2026 GMT
            Not After : Jul  1 17:02:18 2026 GMT
        Subject: CN=EFC3CE9BC9158B23179544A786F0B88BD54DB9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:50:f3:7e:92:0f:0a:89:22:85:a8:6d:0c:
                    7e:d3:08:74:4b:b7:37:ec:3e:5c:bb:3f:8d:05:b0:
                    96:9f:4d:27:35:7f:65:1b:96:fe:ed:88:c0:b7:be:
                    61:00:63:88:ab:55:e0:21:67:d5:30:62:91:0f:50:
                    fc:7b:22:14:70:e8:f6:16:bc:a3:02:02:3e:b9:96:
                    3e:80:84:a9:c2:3b:de:5e:4a:59:52:a9:48:3e:56:
                    0f:bd:e8:c1:59:95:2d:82:15:42:72:57:92:72:19:
                    4c:d1:e5:66:8f:57:88:c8:9f:48:7a:d7:54:6f:58:
                    df:c6:70:b1:78:6d:f8:e2:98:3f:02:47:f5:12:84:
                    68:13:64:cd:36:4d:ad:d1:fe:8a:8a:8d:14:bc:0f:
                    80:ea:f9:3b:2d:8e:45:98:bd:c3:8b:7b:f9:da:62:
                    0c:02:2d:de:bf:02:f6:0f:ed:6d:f9:52:6d:f3:da:
                    1e:68:81:ca:eb:f4:2f:ad:62:bc:94:d8:c1:38:ca:
                    65:b1:88:a6:a7:14:b6:b9:9b:cf:29:77:19:27:7c:
                    1e:89:b2:cc:cc:32:6f:5c:4f:f3:f7:d0:74:8c:75:
                    a8:70:7e:fc:e1:bd:21:56:76:cb:ed:a8:84:ed:70:
                    74:5d:2a:ee:80:0e:d2:75:e2:b3:46:be:d8:c3:6d:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:CE:9B:C9:15:8B:23:17:95:44:A7:86:F0:B8:8B:D5:4D:B9:D6
            X509v3 Authority Key Identifier:
                keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:7d:ff:2e:49:2b:18:83:04:7b:48:9d:ea:f1:29:4b:9c:9d:
         0b:95:28:29:86:a7:92:d8:4a:58:92:f2:9b:5e:b9:06:40:db:
         2c:10:ba:98:f2:ce:bc:c1:2f:d7:f3:36:e6:10:9b:ea:9c:0b:
         b4:fa:79:a1:b2:d6:b6:09:f7:b9:b4:44:be:48:08:ce:10:b2:
         21:35:e9:08:d3:62:8b:ab:30:0f:02:8e:84:17:07:d5:d3:bb:
         15:7f:4b:2f:f0:ec:c0:4d:bb:8c:a7:f6:1e:c8:4c:9c:65:71:
         bd:0f:9e:96:14:de:71:a7:26:97:2c:68:63:c1:2e:ec:01:79:
         c0:16:fc:2e:fd:60:03:f4:85:3f:a7:d0:f2:99:b4:f5:e9:6d:
         4e:aa:d9:73:ab:a0:82:9d:b6:2e:d7:27:41:dd:63:6a:16:d1:
         4d:37:02:52:13:bb:a2:01:4a:d1:14:1f:5e:5a:b5:93:ec:b1:
         c9:f6:f8:79:fc:b9:c1:6c:8d:e4:8f:63:02:73:71:86:17:d5:
         5e:b1:4e:3d:a6:2f:6a:d8:a4:f1:65:f0:c6:6a:8b:54:15:3c:
         14:d3:67:4c:e8:50:23:70:25:ed:1d:27:be:cf:b2:68:a8:c4:
         33:84:d7:1f:62:38:5f:fc:29:55:93:f3:c0:fe:fb:94:bf:d9:
         92:f9:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:53 2026 by rpki-client