Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          KNc0pYmY+WezbZ5msEZ044O8tqYvc1QS2Oxjym5o4FA=
Subject key identifier:   3F:DD:89:C4:EE:81:6E:35:08:C5:39:AA:49:8F:16:0B:FB:8E:4B:E9
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       2DA366E422F525AF4CBA678BD64D4A79ABD9DDC1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          7F
Signing time:             Fri 14 Aug 2026 09:06:28 +0000
Manifest this update:     Fri 14 Aug 2026 09:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 12:42:28 +0000
Files and hashes:         1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
                          2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: 6oapF1hB8IYpXpSXut/SiergqGm0brw2b2I6wLVvuFg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 12:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a3:66:e4:22:f5:25:af:4c:ba:67:8b:d6:4d:4a:79:ab:d9:dd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: Aug 14 09:01:28 2026 GMT
            Not After : Aug 15 12:42:28 2026 GMT
        Subject: CN=3FDD89C4EE816E3508C539AA498F160BFB8E4BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:ac:8d:5c:50:37:09:da:0c:b0:38:ac:ed:
                    4c:70:0a:f9:ec:98:9f:1d:23:0a:b3:00:87:87:90:
                    6e:f2:c0:fe:08:f2:e9:33:8c:a6:c7:33:c2:63:3e:
                    d8:d5:bd:4b:b7:5f:25:a6:e4:50:0b:b7:68:4c:97:
                    ce:7f:71:3c:3f:36:bd:21:6b:fb:9b:d4:ac:72:8c:
                    1f:d7:6e:35:83:1c:0d:b5:c3:9d:67:ae:8f:c1:6d:
                    90:81:bc:5a:a3:d8:0e:bb:a6:60:f9:65:c3:f9:54:
                    4e:ee:81:7d:f7:cf:0f:55:93:b7:6d:9c:71:e4:07:
                    53:b6:8e:ce:c2:68:cd:13:a8:4e:83:33:5e:86:e2:
                    da:fe:fc:76:8f:67:36:0e:ef:cc:f4:84:93:02:c0:
                    fb:f0:d5:ee:ee:1e:0b:94:ce:95:86:8b:2d:c6:16:
                    7a:de:0d:17:eb:5e:8b:6c:3a:04:46:bf:f1:a6:94:
                    69:2d:f9:ed:39:c0:21:87:22:6b:be:47:9a:3f:32:
                    37:35:54:2f:9a:c9:b3:49:09:d5:5e:c3:46:a9:d8:
                    f4:98:7a:cd:dd:7a:64:44:71:ea:7a:98:af:b7:18:
                    a0:6b:4f:f7:0d:d1:b9:bb:c8:9d:a0:17:f0:05:b2:
                    1f:62:17:33:f3:c8:ed:a7:a1:db:55:a4:0b:07:8e:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:89:C4:EE:81:6E:35:08:C5:39:AA:49:8F:16:0B:FB:8E:4B:E9
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:59:9d:6d:9f:98:da:c9:d5:c8:01:7f:c3:00:f5:a6:11:
         71:88:3d:c6:3c:d5:7b:90:44:67:98:96:57:07:d5:37:41:63:
         b6:a7:51:af:fb:27:a0:00:c0:16:fe:dc:c3:89:a3:a2:76:65:
         85:c1:92:46:30:a0:ae:fe:78:d3:cd:ab:c5:86:74:68:68:fd:
         22:bd:2f:ea:05:95:eb:57:e0:96:a9:69:fe:da:47:c2:6b:07:
         89:ae:17:cd:44:5c:bf:54:16:86:61:a1:c5:d8:03:1a:53:dd:
         81:88:c3:58:34:92:47:fc:af:05:9a:7c:6f:32:e9:91:0d:1b:
         08:db:a1:ec:e3:44:fa:27:0b:ae:98:a5:7d:13:fe:74:f2:20:
         11:50:7d:a2:ac:11:50:a3:d5:ea:fb:d0:ed:a0:4d:f7:ec:42:
         69:81:02:6c:9b:84:3e:4c:8c:f3:e6:e6:e9:e1:c0:f1:10:6f:
         36:39:a4:60:55:7c:a6:55:12:af:c5:9d:60:e7:85:9e:01:29:
         1f:d7:10:34:5a:9a:64:05:cf:c9:7d:49:40:89:b7:5b:1f:89:
         8d:2f:d8:87:54:53:1f:f4:01:08:be:53:c7:dc:d3:2f:02:da:
         80:f8:f8:4b:91:bb:1b:4e:d6:9d:ac:e3:4a:27:98:1e:b0:5e:
         be:cc:b9:ed
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIULaNm5CL1Ja9MumeL1k1KeavZ3cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1QUNBMDk2Q0VGQ0VC
Q0VENUQxMjAeFw0yNjA4MTQwOTAxMjhaFw0yNjA4MTUxMjQyMjhaMDMxMTAvBgNV
BAMTKDNGREQ4OUM0RUU4MTZFMzUwOEM1MzlBQTQ5OEYxNjBCRkI4RTRCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/6yNXFA3CdoMsDis7UxwCvns
mJ8dIwqzAIeHkG7ywP4I8ukzjKbHM8JjPtjVvUu3XyWm5FALt2hMl85/cTw/Nr0h
a/ub1KxyjB/XbjWDHA21w51nro/BbZCBvFqj2A67pmD5ZcP5VE7ugX33zw9Vk7dt
nHHkB1O2js7CaM0TqE6DM16G4tr+/HaPZzYO78z0hJMCwPvw1e7uHguUzpWGiy3G
FnreDRfrXotsOgRGv/GmlGkt+e05wCGHImu+R5o/Mjc1VC+aybNJCdVew0ap2PSY
es3demREcep6mK+3GKBrT/cN0bm7yJ2gF/AFsh9iFzPzyO2nodtVpAsHjuHRAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUP92JxO6BbjUIxTmqSY8WC/uOS+kwHwYDVR0j
BBgwFoAU0LRYzgvljiF3nVrKCWzvzrztXRIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElBTkdD
QUkvMC9EMEI0NThDRTBCRTU4RTIxNzc5RDVBQ0EwOTZDRUZDRUJDRUQ1RDEyLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5
NkNFRkNFQkNFRDVEMTIuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8wL0QwQjQ1OENF
MEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBC7lmd
bZ+Y2snVyAF/wwD1phFxiD3GPNV7kERnmJZXB9U3QWO2p1Gv+yegAMAW/tzDiaOi
dmWFwZJGMKCu/njTzavFhnRoaP0ivS/qBZXrV+CWqWn+2kfCaweJrhfNRFy/VBaG
YaHF2AMaU92BiMNYNJJH/K8FmnxvMumRDRsI26Hs40T6JwuumKV9E/508iARUH2i
rBFQo9Xq+9DtoE337EJpgQJsm4Q+TIzz5ubp4cDxEG82OaRgVXymVRKvxZ1g54We
ASkf1xA0WppkBc/JfUlAibdbH4mNL9iHVFMf9AEIvlPH3NMvAtqA+PhLkbsbTtad
rONKJ5gesF6+zLnt
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:23 2026 by rpki-client