Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          ou0t326xwrt4t6fk0DWMIH9H9tfrB9hLP1tfRfXAuPo=
Subject key identifier:   97:52:64:93:82:56:4F:03:0F:96:8D:92:BD:2C:58:3D:57:AF:08:B3
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       1739C1C2075BA6DD42C886C46B0E713095DD94CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 03:58:03 +0000
Manifest this update:     Tue 30 Jun 2026 03:53:03 +0000
Manifest next update:     Wed 01 Jul 2026 04:30:03 +0000
Files and hashes:         1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
                          2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: vw8+VENEIzjhJUN+nwYIVghR/QAhhNbvWY2g8OdwGK0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 04:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:39:c1:c2:07:5b:a6:dd:42:c8:86:c4:6b:0e:71:30:95:dd:94:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: Jun 30 03:53:03 2026 GMT
            Not After : Jul  1 04:30:03 2026 GMT
        Subject: CN=9752649382564F030F968D92BD2C583D57AF08B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:8d:47:59:5d:08:84:26:f7:1e:ca:6d:c8:
                    98:f1:1c:b9:eb:ac:91:06:19:78:ee:1d:09:1e:28:
                    cd:91:85:13:9d:95:0b:05:5a:d3:c2:0a:ea:5d:8a:
                    ca:95:c6:61:c8:cd:29:72:a1:d5:83:29:d3:09:27:
                    d4:ac:44:4f:f3:44:50:10:38:9b:93:f1:cb:d2:3a:
                    75:4e:d5:fe:9b:62:79:16:0e:de:6b:82:f7:6b:f5:
                    9b:9c:78:2d:c3:01:00:06:02:1f:ec:1d:2d:e5:5e:
                    6a:ce:f8:7d:ad:3f:d2:c6:d6:4c:96:14:63:d1:cf:
                    1e:be:0e:2a:c6:da:96:e7:c6:ef:66:02:be:26:6d:
                    14:ef:5e:73:60:10:6f:13:80:ad:cd:3c:1c:da:2a:
                    e9:31:0a:52:c6:48:fb:71:ab:53:8e:dc:67:c8:db:
                    23:8b:dd:81:fe:69:3e:58:60:a9:e6:b1:55:22:85:
                    ad:7e:3a:0b:5b:03:0d:34:d6:56:3f:f6:a9:6c:e4:
                    e1:21:67:77:55:30:e6:a3:1e:6a:5c:85:c2:7a:15:
                    66:6e:55:71:f7:c1:90:b5:e2:2d:31:a8:69:5f:4e:
                    b1:22:73:1d:1a:e2:62:f0:78:e5:34:24:f7:9e:2d:
                    cb:aa:89:66:8c:07:27:1b:c4:ad:86:2d:f9:ee:d5:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:64:93:82:56:4F:03:0F:96:8D:92:BD:2C:58:3D:57:AF:08:B3
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:d0:5f:dc:85:2c:9d:4f:0b:48:77:45:12:60:03:c9:ac:
         ff:a0:de:60:74:a2:69:bc:07:4d:64:43:06:b8:69:25:8f:9c:
         b0:19:9c:11:50:5d:c3:9e:58:f1:9d:8f:8a:e0:29:cf:f1:e7:
         1e:ed:0b:62:41:74:73:e4:5c:a5:0d:8c:63:47:4d:96:37:ee:
         0f:b8:bf:24:1f:11:35:22:6e:20:0f:eb:9c:dd:1a:ec:55:e2:
         6c:4c:37:b8:11:e3:32:67:3e:7d:80:df:cb:ab:cd:d1:13:13:
         a7:f6:51:76:02:f3:ec:ac:0c:a3:45:c5:85:c3:af:d9:25:3a:
         bd:ba:13:9c:89:a3:69:a8:b9:77:15:be:af:9d:b7:fd:87:9e:
         be:bb:4d:5f:b7:5e:6a:66:bd:e1:cb:77:5a:b1:0f:6a:32:89:
         a2:1a:6d:59:c2:37:d8:b2:3c:fe:43:32:67:d0:65:1c:dc:22:
         56:8f:8a:4b:db:f9:e6:2e:09:c6:1b:4a:78:3b:05:a1:3f:c5:
         4f:5d:f3:46:f8:fe:99:60:30:35:c7:71:5e:7d:0d:73:97:f4:
         be:db:6b:37:52:11:28:a7:d4:64:f9:9e:e1:37:76:f3:23:ca:
         1c:93:a6:27:13:9b:58:ea:89:22:92:d6:cd:16:ee:97:8b:12:
         57:0f:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:06 2026 by rpki-client