Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
File:                     B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft (raw, json)
Hash identifier:          ZO3xRTVgLztogc3ZOZDVDoC429UxVOH7hoTvBTmljME=
Subject key identifier:   72:3C:6A:D4:78:25:BF:EB:36:BD:5B:3E:5C:31:43:A9:60:26:EA:A8
Authority key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB
Certificate issuer:       /CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
Certificate serial:       116CACD6CFB360880C4B53A23D2802455B13548D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 15:49:13 +0000
Manifest this update:     Tue 30 Jun 2026 15:44:13 +0000
Manifest next update:     Wed 01 Jul 2026 16:57:13 +0000
Files and hashes:         1: 3130332e3139312e32322e302f32332d3234203d3e203633383939.roa (hash: 27hTm/nhNb00WioUC9L5MAuYLPzBS9aBOsaC8RsQYps=)
                          2: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl (hash: Fg8mE/FliuuJHgSRj4XGS+9yeADfPynjJKv0WpA6mrs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl
                          rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6c:ac:d6:cf:b3:60:88:0c:4b:53:a2:3d:28:02:45:5b:13:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
        Validity
            Not Before: Jun 30 15:44:13 2026 GMT
            Not After : Jul  1 16:57:13 2026 GMT
        Subject: CN=723C6AD47825BFEB36BD5B3E5C3143A96026EAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:91:1a:b5:68:6b:d1:90:7b:09:f9:53:28:
                    ea:6f:ef:de:b2:b0:c9:81:d8:56:8f:68:3d:62:a0:
                    6b:1e:e7:05:98:31:5a:cf:8a:29:17:e3:9c:3b:17:
                    f2:e2:ea:01:5d:f7:79:e5:04:02:19:3a:be:1b:a9:
                    60:67:cd:a1:d4:e8:7f:e0:03:3b:10:b1:00:87:67:
                    e2:fb:6b:2f:19:8b:b0:94:52:44:82:a0:cf:a9:4b:
                    70:dd:13:50:30:a3:14:6f:a1:97:f2:13:12:79:e9:
                    b6:e5:d6:13:af:0e:84:f1:9c:19:92:53:2d:25:33:
                    b9:da:00:d7:8c:dc:42:df:27:a3:64:dc:5d:bc:4e:
                    1f:18:da:6c:37:9a:58:2c:e8:44:21:3f:28:e0:d4:
                    69:98:e3:2b:16:34:67:65:08:0a:90:bd:8b:20:00:
                    30:a4:8b:0b:86:3e:70:8f:8b:e3:16:7e:4f:36:c7:
                    83:f0:6c:39:88:c0:cb:36:17:be:ae:ff:a5:ee:52:
                    84:c7:51:0c:f7:2a:a6:e0:3e:35:20:21:53:b7:31:
                    ca:25:46:f7:2a:52:b9:74:de:0f:cb:cc:49:f5:21:
                    8d:ef:79:e7:63:98:ae:be:a4:dd:a9:22:99:b5:41:
                    d1:8e:fc:9c:ac:e5:df:be:3c:a8:fe:df:dc:6d:e3:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:6A:D4:78:25:BF:EB:36:BD:5B:3E:5C:31:43:A9:60:26:EA:A8
            X509v3 Authority Key Identifier:
                keyid:B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:7e:6a:fb:28:57:fc:4a:56:d6:10:cd:c2:f0:96:21:fd:
         39:68:8b:83:9e:f8:7c:91:f5:cd:19:4a:df:c8:25:be:5d:4d:
         2f:3e:a6:38:61:50:fe:eb:dd:cb:02:aa:d8:e1:f5:f6:18:fb:
         87:42:6a:bc:18:e2:ae:f6:8c:d6:51:a5:d5:0e:fa:83:27:27:
         fc:8f:1a:18:f2:63:64:0e:11:8f:58:d2:1c:b6:62:4f:ea:d4:
         b1:db:63:20:ae:94:74:97:e3:71:58:52:d7:9c:06:77:71:3a:
         02:1b:9f:ad:47:91:75:c6:51:74:50:37:d6:0d:4f:38:76:05:
         37:c2:6c:80:76:94:f2:03:e2:99:b6:c7:41:31:bb:d0:28:c1:
         6b:55:2f:e2:35:09:68:7c:16:37:a7:84:bd:7a:6e:98:3e:6e:
         4a:ae:20:6c:7e:79:1a:dc:88:da:4f:fb:b6:b1:dc:74:83:d3:
         5d:c3:3e:b6:40:07:aa:bb:65:8a:19:e7:a8:0c:aa:d3:9a:e9:
         06:fc:45:c5:a6:1c:c7:31:d5:4b:e1:c1:ba:39:3e:1f:a2:69:
         22:a3:78:b7:dd:02:d2:0b:64:bc:e2:bb:18:c6:ba:83:b3:dd:
         25:0a:e2:2f:ff:f2:dc:0f:ad:07:a9:5c:31:06:5f:b6:b7:b1:
         db:a1:c8:80
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUEWys1s+zYIgMS1OiPSgCRVsTVI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ2OUM4QUY4OEYxNDE3REYzRTU1RTBCQzVFRUNBREE5
MjUwRTVDQjAeFw0yNjA2MzAxNTQ0MTNaFw0yNjA3MDExNjU3MTNaMDMxMTAvBgNV
BAMTKDcyM0M2QUQ0NzgyNUJGRUIzNkJENUIzRTVDMzE0M0E5NjAyNkVBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ypEatWhr0ZB7CflTKOpv796y
sMmB2FaPaD1ioGse5wWYMVrPiikX45w7F/Li6gFd93nlBAIZOr4bqWBnzaHU6H/g
AzsQsQCHZ+L7ay8Zi7CUUkSCoM+pS3DdE1AwoxRvoZfyExJ56bbl1hOvDoTxnBmS
Uy0lM7naANeM3ELfJ6Nk3F28Th8Y2mw3mlgs6EQhPyjg1GmY4ysWNGdlCAqQvYsg
ADCkiwuGPnCPi+MWfk82x4PwbDmIwMs2F76u/6XuUoTHUQz3KqbgPjUgIVO3Mcol
RvcqUrl03g/LzEn1IY3veedjmK6+pN2pIpm1QdGO/Jys5d++PKj+39xt40+7AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUcjxq1Hglv+s2vVs+XDFDqWAm6qgwHwYDVR0j
BBgwFoAUtGnIr4jxQX3z5V4Lxe7K2pJQ5cswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRVU1RD
Q0FETS8wL0I0NjlDOEFGODhGMTQxN0RGM0U1NUUwQkM1RUVDQURBOTI1MEU1Q0Iu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQjQ2OUM4QUY4OEYxNDE3REYzRTU1RTBC
QzVFRUNBREE5MjUwRTVDQi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UVVNUQ0NBRE0vMC9CNDY5
QzhBRjg4RjE0MTdERjNFNTVFMEJDNUVFQ0FEQTkyNTBFNUNCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
GX5+avsoV/xKVtYQzcLwliH9OWiLg574fJH1zRlK38glvl1NLz6mOGFQ/uvdywKq
2OH19hj7h0JqvBjirvaM1lGl1Q76gycn/I8aGPJjZA4Rj1jSHLZiT+rUsdtjIK6U
dJfjcVhS15wGd3E6AhufrUeRdcZRdFA31g1POHYFN8JsgHaU8gPimbbHQTG70CjB
a1Uv4jUJaHwWN6eEvXpumD5uSq4gbH55GtyI2k/7trHcdIPTXcM+tkAHqrtlihnn
qAyq05rpBvxFxaYcxzHVS+HBujk+H6JpIqN4t90C0gtkvOK7GMa6g7PdJQriL//y
3A+tB6lcMQZftrex26HIgA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:17 2026 by rpki-client