Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File:                     7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier:          ZQuaMkjAFilfPaCTEffcvcP0fW1cys1xfVdHTIlD8GY=
Subject key identifier:   62:F5:B7:55:F1:BB:CC:60:51:08:E9:8D:84:FA:BA:47:38:94:C5:7D
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer:       /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial:       7B2FDF73641077A3EF0CF28311D27BC41322C3C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number:          07
Signing time:             Wed 13 May 2026 05:47:12 +0000
Manifest this update:     Wed 13 May 2026 05:42:12 +0000
Manifest next update:     Thu 14 May 2026 08:43:12 +0000
Files and hashes:         1: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
                          2: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
                          3: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
                          4: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: 6doDumtNO8wkmgMQPeRNUJtqQ7a/IhGfou08nqjTWfs=)
                          5: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
                          rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2f:df:73:64:10:77:a3:ef:0c:f2:83:11:d2:7b:c4:13:22:c3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
        Validity
            Not Before: May 13 05:42:12 2026 GMT
            Not After : May 14 08:43:12 2026 GMT
        Subject: CN=62F5B755F1BBCC605108E98D84FABA473894C57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:0f:cd:94:e1:cc:5a:7e:de:7f:a3:cb:c2:
                    35:14:a2:be:19:f7:59:8e:09:b2:2a:cd:90:76:92:
                    0c:89:67:ec:c3:fa:11:b5:1d:8e:90:f0:d0:84:53:
                    8e:0f:bf:3a:a5:08:bc:3f:31:9c:b5:7f:41:18:5c:
                    1f:b7:54:e6:35:d9:c1:1c:a6:bf:d3:cc:79:1f:8b:
                    42:b0:3e:27:67:c6:55:59:d1:ea:a3:48:18:37:68:
                    6a:c6:97:bd:6d:a3:97:ce:ce:dd:c3:59:1d:ab:3b:
                    43:48:75:4c:24:47:16:e6:15:33:f9:34:86:2f:41:
                    da:d9:80:e4:e7:a0:3f:76:30:5d:d3:63:d5:ff:a5:
                    48:ab:b8:61:f4:1a:3f:92:10:c6:6b:38:3c:45:d0:
                    ab:ae:81:45:83:02:89:cc:88:c1:f6:f8:4c:04:5e:
                    dc:c8:d5:bc:de:4e:ab:6a:24:9a:72:73:54:a5:f8:
                    30:c9:6d:14:dc:4f:f2:82:57:0f:ca:37:c6:46:30:
                    2b:1e:74:d3:45:66:7b:bd:7a:67:b4:43:c9:63:e5:
                    a5:af:1a:5e:43:e8:ba:ec:94:94:c7:51:3b:45:ef:
                    a8:1c:cb:b6:ac:72:c7:76:73:67:89:ab:ce:76:08:
                    e1:b8:00:a0:4b:53:bd:af:27:91:6b:97:26:3a:b2:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:B7:55:F1:BB:CC:60:51:08:E9:8D:84:FA:BA:47:38:94:C5:7D
            X509v3 Authority Key Identifier:
                keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3c:34:49:27:95:f6:74:6c:fd:49:a1:54:56:6c:ef:48:0a:
         f3:73:f2:4c:56:af:4e:70:c1:9c:36:26:9d:e3:74:68:f2:b1:
         f0:c1:33:4c:e9:15:49:9e:50:e4:ce:0e:0b:88:18:9b:f5:49:
         76:5e:a8:88:94:3e:d3:0a:7d:e9:ca:fe:3e:0e:bf:5f:8d:a3:
         01:a1:7d:ac:96:21:af:ba:3e:e0:db:41:e0:21:f1:d7:e9:d7:
         eb:0e:5d:19:b3:fb:2e:5e:f0:d4:ca:1d:c4:aa:20:76:dc:f5:
         6f:a2:c2:01:68:a9:01:5e:91:fb:c4:06:0a:67:73:eb:ff:83:
         ca:c5:ca:ea:34:8f:30:33:b3:29:eb:44:cc:d3:2e:05:43:1c:
         47:8d:66:1c:a5:a2:09:0d:d3:58:ec:a4:ee:b5:0d:ac:b6:e3:
         16:74:d4:2d:96:25:03:f9:1a:96:17:3f:70:f5:fb:2f:04:b9:
         3c:e0:fc:18:c6:e2:6d:d0:10:3e:e9:96:f5:27:f7:b3:23:a3:
         10:5c:79:9d:95:3e:c6:71:8a:20:d3:2a:a6:6e:8f:89:0e:89:
         4d:4e:54:69:77:3d:b2:be:77:d3:72:65:e6:84:d2:b5:92:8b:
         a8:74:5d:ef:4b:b3:bc:85:8c:03:5d:d5:8e:d0:59:04:7b:22:
         02:72:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:35:57 2026 by rpki-client