Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
File:                     B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json)
Hash identifier:          SRuIhA3oBPbWN8NK4podAA+nXHbIdM39OBUlecgXwuo=
Subject key identifier:   59:68:05:6C:8D:00:65:4C:65:9A:A2:02:4E:64:67:4E:CD:7E:BD:ED
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Certificate issuer:       /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial:       56A8BDB42E55B3942C15949D6BF56CDF40D03ABB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
Manifest number:          85
Signing time:             Fri 14 Aug 2026 17:27:41 +0000
Manifest this update:     Fri 14 Aug 2026 17:22:41 +0000
Manifest next update:     Sat 15 Aug 2026 18:21:41 +0000
Files and hashes:         1: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=)
                          2: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=)
                          3: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: wpcjq/2q+9xhKxcRWLrBcmtaKU0qru0VuHsxzSF4ExM=)
                          4: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=)
                          5: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 18:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a8:bd:b4:2e:55:b3:94:2c:15:94:9d:6b:f5:6c:df:40:d0:3a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
        Validity
            Not Before: Aug 14 17:22:41 2026 GMT
            Not After : Aug 15 18:21:41 2026 GMT
        Subject: CN=5968056C8D00654C659AA2024E64674ECD7EBDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:46:71:d8:ca:2b:58:b0:c9:9a:6c:47:16:
                    50:3e:43:8b:c8:35:d3:23:d0:c9:80:ed:33:c8:98:
                    4b:ec:08:7a:5d:60:07:e0:5e:a5:0c:9b:df:ea:33:
                    dc:73:7a:1a:04:f5:f8:9e:87:fd:4d:0c:72:df:e9:
                    4a:64:a3:f0:79:96:73:98:f2:23:51:ec:1e:c4:f0:
                    90:56:5a:3f:6c:a0:5d:ea:c8:f8:de:bb:fa:23:ef:
                    6d:5e:19:d9:87:8c:48:88:7e:e1:77:2f:9d:b1:47:
                    5b:7c:83:81:c9:97:2e:df:58:eb:1b:af:87:0b:4a:
                    3a:ce:58:bf:ce:48:1b:72:8d:a3:a8:53:33:c6:7d:
                    78:48:99:6e:00:11:3c:f0:23:4c:e4:b4:1a:f9:0f:
                    ad:2e:8a:6e:37:18:67:12:f6:14:76:ac:5b:e6:37:
                    1a:a2:ed:ca:24:85:23:4b:5a:04:1a:60:23:5c:91:
                    8d:34:f6:fd:91:c8:5b:7c:d9:2f:0d:17:b7:7a:ed:
                    0c:f5:38:42:8d:7b:7f:a1:20:90:e4:f9:f1:82:c4:
                    69:5b:2c:b5:6b:5f:44:b0:5e:ed:fc:31:e6:a1:fc:
                    67:c0:6c:ef:c1:63:14:c9:7d:0e:52:93:a6:fc:38:
                    c7:21:c1:52:db:a7:ad:c2:f3:32:d7:51:e6:f8:ba:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:68:05:6C:8D:00:65:4C:65:9A:A2:02:4E:64:67:4E:CD:7E:BD:ED
            X509v3 Authority Key Identifier:
                keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:e0:3b:3b:b7:d4:00:59:38:74:50:5d:a5:a2:0e:25:02:
         37:5b:1e:9f:51:a6:b7:9c:0e:b4:f1:82:5f:33:49:4e:96:e3:
         93:2b:56:1a:da:a9:28:38:72:02:74:dc:e9:d0:dc:d4:ae:37:
         33:93:94:fd:d8:ad:0d:f6:67:51:50:ae:f7:9d:b0:f8:f0:86:
         16:ed:b4:4f:13:74:bc:9c:60:9e:ae:bd:e6:80:81:bd:cf:92:
         72:dd:54:9b:96:e0:2e:44:7c:36:19:20:b0:55:74:dd:39:68:
         33:06:0d:39:c6:77:c4:34:4b:0a:59:1a:62:b0:eb:6c:79:80:
         a4:72:79:80:0a:ea:e4:38:de:50:19:10:fc:b2:74:21:e7:7a:
         88:93:02:74:1d:6b:da:97:dc:4c:36:6e:be:de:0e:d4:fb:14:
         1b:8e:fe:bd:af:60:7f:35:d3:5b:4c:73:4d:f6:87:6d:86:35:
         8e:d0:68:68:53:4e:53:e0:ee:de:70:19:52:d2:28:10:10:f6:
         75:c0:25:b4:27:70:4b:e8:e9:89:cc:bc:c4:53:b0:51:46:e2:
         59:37:64:e7:7a:f1:98:85:47:51:28:4d:61:b7:ff:be:d6:51:
         5b:73:fc:bc:c6:5b:c9:c7:c2:27:e2:92:cb:21:16:2f:39:9a:
         75:d3:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:16:21 2026 by rpki-client