Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          eX3I9n1qZoqcKKoKee8oKlY1k9UKX2Ursq6dAdxnKYE=
Subject key identifier:   95:FF:09:3D:92:68:DA:DB:2E:2D:8C:B1:AF:FF:BF:49:FF:DE:CB:E6
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       4E44A98B6FE2F03A7C3BBEBC0C09C862D20E80B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 08:47:49 +0000
Manifest this update:     Wed 13 May 2026 08:42:49 +0000
Manifest next update:     Thu 14 May 2026 12:36:49 +0000
Files and hashes:         1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
                          2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: 1WMFC+EXuZCRl1S9C2u7Qozx+RKdtP99JnM3FmYGyqc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:44:a9:8b:6f:e2:f0:3a:7c:3b:be:bc:0c:09:c8:62:d2:0e:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: May 13 08:42:49 2026 GMT
            Not After : May 14 12:36:49 2026 GMT
        Subject: CN=95FF093D9268DADB2E2D8CB1AFFFBF49FFDECBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:f9:00:db:80:00:7e:bf:fa:dd:e1:d1:7d:
                    c3:57:ed:21:71:c5:4e:02:2a:b0:f7:72:41:55:e9:
                    22:04:fa:fe:61:93:a6:30:c8:9b:87:ac:ab:58:16:
                    d7:42:3b:3d:64:36:ab:30:04:71:e9:ea:88:62:b2:
                    ed:bd:36:e0:6a:16:e3:51:99:fd:d9:a5:c5:f1:9d:
                    e8:ed:4d:1b:8c:f1:68:96:55:85:3e:dd:4e:7a:4b:
                    18:ed:24:d8:22:db:1f:71:23:7d:46:f1:88:97:0d:
                    da:52:84:b9:d9:4c:b8:1a:e9:8d:3f:ca:26:29:33:
                    2c:a6:ac:6e:77:91:d0:c2:47:c1:98:7f:44:d6:38:
                    b7:db:53:87:8f:7e:de:d1:cf:d9:ac:f4:92:e1:a6:
                    f9:f1:3c:73:19:fd:6c:d2:26:43:23:7d:ca:ed:6e:
                    f1:1a:f9:17:c6:81:e1:0a:6d:63:f2:39:f4:b0:cd:
                    51:d0:f4:bf:2d:7c:49:9a:ac:5e:35:27:5e:fb:13:
                    89:3d:8a:0e:5d:d5:95:41:5e:34:5d:f3:a9:63:57:
                    c8:30:b5:80:90:9a:45:0a:15:0d:41:fa:ef:72:11:
                    24:79:b5:2f:00:25:90:87:5b:e6:85:40:01:25:31:
                    5b:f2:63:f7:7a:d0:20:34:43:9b:f0:a9:ee:97:c6:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:09:3D:92:68:DA:DB:2E:2D:8C:B1:AF:FF:BF:49:FF:DE:CB:E6
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:77:06:2c:b5:a2:35:83:f7:32:ed:b2:ad:3a:87:4f:a6:
         a0:68:14:4e:8a:88:3b:65:9d:0c:19:89:9a:9c:9c:8b:9c:16:
         ee:05:b2:99:b1:6d:11:eb:6a:23:2d:68:98:f0:2f:50:74:7e:
         fb:f3:d9:5b:c7:a3:77:8a:88:cc:ec:af:d2:c6:94:d6:0b:b3:
         f5:bf:65:f7:3d:d4:16:c6:dc:5a:50:fd:79:86:68:95:1c:d9:
         16:fd:f5:4f:b5:25:bc:5e:d0:6f:3b:49:cf:ee:72:4b:20:3f:
         39:39:f4:a0:c7:da:b9:a6:e9:6d:91:a3:e7:a9:3c:6e:ec:8c:
         e5:12:a0:60:92:86:2f:b0:a3:90:02:0c:f6:1a:2d:8a:43:20:
         0d:6a:6c:17:c7:c2:94:08:39:d5:11:e3:73:5a:2a:4c:97:86:
         50:34:62:ba:6f:95:8a:07:76:b4:c8:ca:d4:84:46:36:a3:52:
         16:9c:ec:d0:36:69:21:51:69:89:3c:dd:03:0c:ad:f1:3c:8b:
         a0:0e:aa:03:d7:3d:e4:b4:e5:9a:1f:47:1c:b2:b3:d8:88:57:
         71:8d:1c:e7:aa:2a:3c:78:58:1c:3b:4b:18:d9:03:30:67:fb:
         53:fa:d8:b3:22:67:a6:30:86:63:40:3d:48:a2:7a:19:00:bf:
         18:35:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:10 2026 by rpki-client