Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File:                     E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier:          eZT4osr6eJosz4SgAF7sSzrr8fpOxsCwycDt6E4aXo8=
Subject key identifier:   8C:D5:61:8E:1C:13:D7:8B:A7:DF:B7:47:64:FF:A0:6A:33:8E:64:5D
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer:       /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial:       5F4EA32DDBEE0E6CD0D9B8E2CD14164499D65025
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number:          85
Signing time:             Sat 15 Aug 2026 01:34:02 +0000
Manifest this update:     Sat 15 Aug 2026 01:29:02 +0000
Manifest next update:     Sun 16 Aug 2026 01:49:02 +0000
Files and hashes:         1: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
                          2: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: X6EMQPB/y3+6SUEe2DaVXcU606Qx4QyzFbltkVdwHh4=)
                          3: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 01:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:a3:2d:db:ee:0e:6c:d0:d9:b8:e2:cd:14:16:44:99:d6:50:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
        Validity
            Not Before: Aug 15 01:29:02 2026 GMT
            Not After : Aug 16 01:49:02 2026 GMT
        Subject: CN=8CD5618E1C13D78BA7DFB74764FFA06A338E645D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:30:42:d5:4b:09:5a:00:e8:50:42:ac:62:
                    4b:73:5f:6a:79:32:5f:66:f1:98:3b:75:ca:e6:2b:
                    72:1f:f6:a4:a8:cd:61:21:ce:29:2e:0f:e8:c6:50:
                    f6:3c:17:74:62:76:1a:51:d9:9d:71:95:e4:0f:33:
                    c0:68:3d:63:f7:7f:a4:f3:dd:01:ed:12:7d:71:9a:
                    2e:f5:7e:c3:e4:0c:2d:99:4d:5c:9c:7e:f6:54:23:
                    65:6a:21:08:72:54:fb:d4:90:4d:64:0a:13:d3:f2:
                    00:90:07:34:e8:a4:b5:04:1e:2a:32:f9:59:34:22:
                    f9:68:d0:81:bc:aa:05:3f:92:12:d0:eb:43:0d:11:
                    78:ab:4e:a4:58:67:80:c9:5c:96:55:60:b6:15:37:
                    50:0c:af:e3:55:be:76:10:d9:45:57:bf:93:9a:cc:
                    df:1d:60:9b:db:c4:2d:55:32:ba:2b:51:ac:c4:d3:
                    8a:70:8f:bd:93:a6:11:95:a6:3b:58:9d:95:1a:aa:
                    af:5e:73:76:ee:d3:b3:3d:1d:58:4a:37:90:1c:84:
                    60:9c:8f:c1:8e:46:bc:72:6d:d9:db:32:d0:88:11:
                    bf:de:19:ba:07:50:80:21:e8:ad:a8:d1:a5:ad:24:
                    d5:44:2e:81:47:81:56:1b:ce:d5:18:a0:1b:e9:00:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:61:8E:1C:13:D7:8B:A7:DF:B7:47:64:FF:A0:6A:33:8E:64:5D
            X509v3 Authority Key Identifier:
                keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:ce:73:a6:97:d1:62:2f:99:e7:4c:66:4f:e9:5b:89:ce:
         24:61:df:12:b3:46:71:5e:a3:ab:64:f1:21:c0:ad:52:74:c0:
         8e:23:6e:f3:11:f8:18:37:4b:ed:0f:f1:d1:74:7e:ed:cc:f8:
         be:75:b7:e1:97:e2:1e:9f:f7:f7:39:19:a6:3e:99:d9:ab:f4:
         6a:f0:87:e8:c5:f8:fa:e6:ef:33:26:be:53:08:8a:de:38:21:
         e0:77:51:aa:f9:68:5b:6f:36:5c:75:aa:18:b7:4c:ed:c9:b8:
         f8:76:1a:f6:27:e8:3d:f1:00:a7:c6:11:0d:3f:db:e4:fc:6a:
         76:2b:a8:a8:95:94:20:7b:dc:f1:68:7e:de:97:ca:a4:05:d8:
         33:35:df:a5:63:51:88:23:0f:b9:33:9c:f5:bb:40:77:0b:cb:
         6d:2d:66:00:86:c4:72:9b:96:2c:f2:2a:11:3e:0e:01:3f:af:
         c3:a2:79:a6:aa:cc:09:dc:33:97:5a:36:25:0f:76:1a:c0:2d:
         e2:b3:3b:c3:e4:af:c4:64:a1:3a:a7:63:b1:fc:66:5a:5a:9d:
         23:62:9a:dd:7e:65:46:67:f7:1e:13:13:a5:96:95:56:54:10:
         d3:27:8d:6e:5d:fd:f3:18:c7:c5:66:bd:26:0a:96:21:8e:97:
         70:09:9c:28
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUX06jLdvuDmzQ2bjizRQWRJnWUCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBQTNCMEY5RjU4QzkzNDIxQzY0ODIwNEFCNDMxQTRB
REM0QjBDQjAeFw0yNjA4MTUwMTI5MDJaFw0yNjA4MTYwMTQ5MDJaMDMxMTAvBgNV
BAMTKDhDRDU2MThFMUMxM0Q3OEJBN0RGQjc0NzY0RkZBMDZBMzM4RTY0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGDBC1UsJWgDoUEKsYktzX2p5
Ml9m8Zg7dcrmK3If9qSozWEhzikuD+jGUPY8F3RidhpR2Z1xleQPM8BoPWP3f6Tz
3QHtEn1xmi71fsPkDC2ZTVycfvZUI2VqIQhyVPvUkE1kChPT8gCQBzTopLUEHioy
+Vk0Ivlo0IG8qgU/khLQ60MNEXirTqRYZ4DJXJZVYLYVN1AMr+NVvnYQ2UVXv5Oa
zN8dYJvbxC1VMrorUazE04pwj72TphGVpjtYnZUaqq9ec3bu07M9HVhKN5AchGCc
j8GORrxybdnbMtCIEb/eGboHUIAh6K2o0aWtJNVELoFHgVYbztUYoBvpAMe7AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUjNVhjhwT14un37dHZP+gajOOZF0wHwYDVR0j
BBgwFoAU5ao7D59YyTQhxkggSrQxpK3EsMswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v
MC9FNUFBM0IwRjlGNThDOTM0MjFDNjQ4MjA0QUI0MzFBNEFEQzRCMENCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0U1QUEzQjBGOUY1OEM5MzQyMUM2NDgyMDRBQjQz
MUE0QURDNEIwQ0IuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8wL0U1QUEzQjBGOUY1OEM5
MzQyMUM2NDgyMDRBQjQzMUE0QURDNEIwQ0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Gc5zppfRYi+Z
50xmT+lbic4kYd8Ss0ZxXqOrZPEhwK1SdMCOI27zEfgYN0vtD/HRdH7tzPi+dbfh
l+Ien/f3ORmmPpnZq/Rq8Ifoxfj65u8zJr5TCIreOCHgd1Gq+WhbbzZcdaoYt0zt
ybj4dhr2J+g98QCnxhENP9vk/Gp2K6iolZQge9zxaH7el8qkBdgzNd+lY1GIIw+5
M5z1u0B3C8ttLWYAhsRym5Ys8ioRPg4BP6/DonmmqswJ3DOXWjYlD3YawC3iszvD
5K/EZKE6p2Ox/GZaWp0jYprdfmVGZ/ceExOllpVWVBDTJ41uXf3zGMfFZr0mCpYh
jpdwCZwo
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:27:25 2026 by rpki-client