Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File:                     C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier:          8JxtehmVoiY5JGKXT0F/e1Fqd6btchycp+y0V1unWr0=
Subject key identifier:   86:AE:28:CB:75:52:1E:FB:25:47:D5:DD:1D:FC:39:B9:29:9A:80:CB
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer:       /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial:       07B0EEEF22F1B3A2F0A52F57B78B0A7D87A6F707
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number:          82
Signing time:             Fri 14 Aug 2026 12:01:46 +0000
Manifest this update:     Fri 14 Aug 2026 11:56:46 +0000
Manifest next update:     Sat 15 Aug 2026 15:58:46 +0000
Files and hashes:         1: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
                          2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: G3WwYC4CY1/1oCfXOr8vyczCk9BiFJfP1Hqxurh7uto=)
                          3: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
                          rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b0:ee:ef:22:f1:b3:a2:f0:a5:2f:57:b7:8b:0a:7d:87:a6:f7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
        Validity
            Not Before: Aug 14 11:56:46 2026 GMT
            Not After : Aug 15 15:58:46 2026 GMT
        Subject: CN=86AE28CB75521EFB2547D5DD1DFC39B9299A80CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:c3:30:43:fb:5e:89:4d:af:4b:45:a1:8e:
                    03:04:ab:04:86:74:1e:17:9e:4f:df:3c:55:f6:5a:
                    b8:95:e0:3b:1b:ba:ab:4e:81:6b:bf:78:4a:15:c9:
                    b8:3f:68:43:67:de:14:ee:31:e1:af:63:ab:ca:25:
                    47:43:a5:be:0e:0c:ec:e8:5b:a9:80:66:15:89:aa:
                    f7:7b:b2:68:87:f2:ad:6c:d9:16:9f:1c:39:40:d8:
                    a1:5a:5f:a8:1a:86:38:19:2e:3e:e7:21:c7:26:b1:
                    53:64:5d:86:db:20:71:62:af:d8:8a:bc:35:29:ef:
                    7c:54:5a:99:4d:0e:14:3d:9e:dc:51:5f:27:20:93:
                    ba:d9:db:56:a3:91:93:df:ab:08:d3:0b:f4:17:f1:
                    37:6a:14:0f:57:18:b6:a9:fc:b8:77:f5:e3:9a:cc:
                    43:99:33:5e:4d:69:fe:c1:bc:26:14:ca:0c:59:62:
                    9d:3e:90:ca:9f:e2:f1:10:ed:ee:59:36:b9:5b:f7:
                    e7:0f:8a:4e:d4:81:df:02:4f:a8:93:b1:4a:ad:91:
                    c9:ad:7e:88:be:42:bf:a5:fc:7b:3c:71:f9:b8:33:
                    94:d4:22:19:85:1b:58:01:56:e3:4e:79:9c:dd:c6:
                    1a:45:3a:c6:f0:58:48:ac:16:94:14:67:ca:48:69:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:28:CB:75:52:1E:FB:25:47:D5:DD:1D:FC:39:B9:29:9A:80:CB
            X509v3 Authority Key Identifier:
                keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:11:13:93:c8:9b:83:a5:0a:61:bb:bb:cc:0d:8c:8f:32:
         21:8a:fb:70:50:26:cb:24:b5:4b:20:38:93:1f:98:67:8c:07:
         2f:cc:1b:78:27:b7:b1:55:01:14:4d:d0:ac:5c:cd:c1:e6:34:
         48:0f:57:02:89:9c:76:ae:cd:79:a2:ab:e7:60:66:a6:f3:63:
         fd:fc:4a:7a:ff:ac:66:4c:23:e2:22:b8:fa:ba:30:bb:6e:fc:
         6e:b0:71:9c:1b:b3:67:37:ca:e5:69:a6:dd:a2:be:84:3a:c3:
         27:3a:1f:68:62:33:2e:fa:0a:83:4f:e5:8e:07:15:36:a0:6a:
         35:d9:0d:0f:28:b8:45:8f:8a:17:02:43:01:aa:0b:08:41:39:
         0f:b3:5e:61:b4:f1:42:bc:15:6e:d4:a1:10:f2:39:d2:83:44:
         d8:f6:0c:24:1a:17:09:03:11:78:80:61:74:8a:2b:00:41:f7:
         2d:7e:3f:d8:aa:19:d0:4e:d4:5b:d2:3c:69:1b:4e:8e:06:38:
         cb:6f:8b:1c:7a:83:63:86:29:f7:48:87:b3:c8:4e:7e:93:4d:
         a7:ea:8f:bc:93:47:9d:58:aa:9e:e3:67:e3:6b:b1:b6:0b:96:
         ae:89:2f:dc:03:08:c7:3f:0d:4a:26:87:c2:19:18:6a:3c:c2:
         1a:f3:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:38 2026 by rpki-client