Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
File:                     2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json)
Hash identifier:          Isr/7MJ0Ms3oif886GCXjIRn8NsbqaA9h7r9h76AVvE=
Subject key identifier:   44:52:C9:5D:DB:EA:9C:45:D7:69:57:00:8A:C2:99:95:BD:61:0B:00
Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22
Certificate issuer:       /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
Certificate serial:       39BE057BD5628D14514BE615AC1C9004819A284B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 23:38:43 +0000
Manifest this update:     Fri 14 Aug 2026 23:33:43 +0000
Manifest next update:     Sun 16 Aug 2026 01:18:43 +0000
Files and hashes:         1: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=)
                          2: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: D392lUdKkts8zFe2B1anaeRi47spa1YvBVMlBuMOhWE=)
                          3: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl
                          rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 01:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:be:05:7b:d5:62:8d:14:51:4b:e6:15:ac:1c:90:04:81:9a:28:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
        Validity
            Not Before: Aug 14 23:33:43 2026 GMT
            Not After : Aug 16 01:18:43 2026 GMT
        Subject: CN=4452C95DDBEA9C45D76957008AC29995BD610B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:83:c5:54:83:5c:1f:1a:39:cc:ca:45:86:
                    04:b8:b0:10:31:71:f3:1d:76:60:0e:fe:64:94:73:
                    bd:ff:3f:ed:60:bb:8e:fa:0c:7e:4c:94:56:c3:41:
                    f7:c7:ea:4e:76:da:e1:95:95:b1:cf:ae:9b:71:4e:
                    5b:1e:d8:92:87:a3:11:a8:55:8f:df:44:0a:1b:5b:
                    44:5e:2e:1e:58:5c:51:fd:3c:dd:fa:b1:01:ec:40:
                    fb:92:38:05:a6:68:c2:9e:9d:67:43:92:38:95:c3:
                    da:71:4c:ff:13:40:4e:21:b0:3c:0c:93:c6:25:5e:
                    07:a7:1f:5f:7e:7f:68:e8:e3:38:de:99:8f:bc:e7:
                    dc:4b:2a:73:ea:a3:0e:ea:03:02:5a:ba:05:e4:38:
                    1a:07:6e:f1:66:eb:1d:a8:3c:07:6c:cd:a9:ef:f0:
                    2e:1b:81:5c:32:e5:66:29:79:d8:f0:60:b5:22:d8:
                    44:2a:0f:83:ef:c7:09:06:c8:76:d9:be:ef:48:17:
                    41:8a:f9:10:47:4b:66:79:31:07:80:41:e9:99:bb:
                    13:ae:38:a6:48:3a:10:42:98:e3:44:6c:16:11:aa:
                    09:f2:38:a8:7d:05:94:97:a3:23:bf:19:b6:b9:24:
                    89:bc:da:dc:67:54:b7:d9:ed:f4:b5:d6:2a:f7:75:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:C9:5D:DB:EA:9C:45:D7:69:57:00:8A:C2:99:95:BD:61:0B:00
            X509v3 Authority Key Identifier:
                keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:a1:54:0a:e0:da:ca:aa:22:c5:22:77:31:8e:07:fa:55:
         b9:03:ea:8c:f7:20:7f:48:00:1f:ea:80:99:03:bf:39:53:55:
         28:48:4a:37:e2:06:a8:ef:1d:44:5c:e4:dc:61:b1:e3:4d:a8:
         ba:75:10:c2:50:32:92:da:eb:93:e5:80:1b:e2:a1:41:b5:04:
         fe:1c:38:ae:38:2c:13:96:b6:60:64:38:73:a2:9b:7a:15:2e:
         18:32:3e:d6:17:89:36:36:99:a9:74:57:59:cc:d4:74:03:bb:
         73:4a:fa:93:e2:4e:dc:7a:96:2a:02:dc:21:79:54:fc:37:a2:
         0e:df:dc:67:49:64:05:94:55:12:f8:7e:f1:58:cb:05:55:c3:
         78:be:15:bb:7c:be:9a:e8:33:05:df:0d:01:7b:d3:3f:14:4a:
         61:88:75:7e:35:91:6a:64:3e:16:80:a2:60:78:74:ff:c6:20:
         50:63:6e:74:3a:b9:d0:b1:85:82:cd:6a:7a:a3:b0:e4:6f:8c:
         e7:31:20:4c:01:b3:f5:72:6b:7b:d4:b5:08:de:55:d8:c2:1c:
         e1:7d:db:e6:49:d3:71:10:bc:ea:8e:09:bb:15:30:94:75:63:
         9d:d3:00:f0:27:a3:8f:e7:ee:9a:90:23:a2:d2:bb:fe:35:30:
         4d:d0:7f:fd
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUOb4Fe9VijRRRS+YVrByQBIGaKEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4
QzY3NUQyMjAeFw0yNjA4MTQyMzMzNDNaFw0yNjA4MTYwMTE4NDNaMDMxMTAvBgNV
BAMTKDQ0NTJDOTVEREJFQTlDNDVENzY5NTcwMDhBQzI5OTk1QkQ2MTBCMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVt4PFVINcHxo5zMpFhgS4sBAx
cfMddmAO/mSUc73/P+1gu476DH5MlFbDQffH6k522uGVlbHPrptxTlse2JKHoxGo
VY/fRAobW0ReLh5YXFH9PN36sQHsQPuSOAWmaMKenWdDkjiVw9pxTP8TQE4hsDwM
k8YlXgenH19+f2jo4zjemY+859xLKnPqow7qAwJaugXkOBoHbvFm6x2oPAdszanv
8C4bgVwy5WYpedjwYLUi2EQqD4PvxwkGyHbZvu9IF0GK+RBHS2Z5MQeAQemZuxOu
OKZIOhBCmONEbBYRqgnyOKh9BZSXoyO/Gba5JIm82txnVLfZ7fS11ir3dVWNAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQURFLJXdvqnEXXaVcAisKZlb1hCwAwHwYDVR0j
BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w
LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB
RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE
RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcehVArg2sqqIsUi
dzGOB/pVuQPqjPcgf0gAH+qAmQO/OVNVKEhKN+IGqO8dRFzk3GGx402ounUQwlAy
ktrrk+WAG+KhQbUE/hw4rjgsE5a2YGQ4c6KbehUuGDI+1heJNjaZqXRXWczUdAO7
c0r6k+JO3HqWKgLcIXlU/DeiDt/cZ0lkBZRVEvh+8VjLBVXDeL4Vu3y+mugzBd8N
AXvTPxRKYYh1fjWRamQ+FoCiYHh0/8YgUGNudDq50LGFgs1qeqOw5G+M5zEgTAGz
9XJre9S1CN5V2MIc4X3b5knTcRC86o4JuxUwlHVjndMA8Cejj+fumpAjotK7/jUw
TdB//Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:11 2026 by rpki-client