Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
File:                     B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft (raw, json)
Hash identifier:          T/2iBCflEnW+WFUGDXpvjaLN4ppxofLebJoJjtn0l3k=
Subject key identifier:   EE:BE:A7:6E:CB:C9:FD:DE:57:DB:F8:BF:E4:E3:0E:E4:12:36:20:0B
Authority key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB
Certificate issuer:       /CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
Certificate serial:       78D9DE73D92C3334B6AE25E1224622112C18D3AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 05:17:03 +0000
Manifest this update:     Wed 13 May 2026 05:12:03 +0000
Manifest next update:     Thu 14 May 2026 07:36:03 +0000
Files and hashes:         1: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl (hash: IIjlusgPFCTsRaQ5miFBmSBz9kuSEzFLifZFI8+G5Qw=)
                          2: 3130332e3139312e32322e302f32332d3234203d3e203633383939.roa (hash: 27hTm/nhNb00WioUC9L5MAuYLPzBS9aBOsaC8RsQYps=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl
                          rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d9:de:73:d9:2c:33:34:b6:ae:25:e1:22:46:22:11:2c:18:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
        Validity
            Not Before: May 13 05:12:03 2026 GMT
            Not After : May 14 07:36:03 2026 GMT
        Subject: CN=EEBEA76ECBC9FDDE57DBF8BFE4E30EE41236200B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:9f:3f:d1:82:6a:d3:e6:c4:ba:f8:14:c0:
                    75:25:6e:d8:8a:5b:cd:be:fd:8e:81:36:f6:d6:c4:
                    ea:e3:f0:b9:a8:62:b1:8b:25:35:26:e5:a3:6f:96:
                    d7:0a:13:3f:b5:4c:a1:59:ed:c1:a9:51:d1:b9:3d:
                    0d:c0:b9:31:d1:2d:11:40:a9:81:59:c9:5d:16:a6:
                    eb:6c:98:1b:9b:76:00:96:a7:28:aa:59:3e:c8:14:
                    d5:ae:c7:54:0d:d4:44:3c:05:a1:73:eb:11:8c:62:
                    92:ab:3a:ab:fa:a0:f0:f1:94:8f:c8:e3:e9:2d:a5:
                    a3:1a:7b:63:28:4f:3d:e1:55:48:e7:88:a5:2b:78:
                    c5:08:95:72:33:51:ed:71:a6:c4:38:34:d7:04:3b:
                    87:7a:63:44:9f:2a:02:83:96:e8:a9:5e:50:cd:fa:
                    74:50:4a:57:1e:54:c2:44:19:68:30:a5:4a:1b:67:
                    02:16:2a:aa:b0:90:db:f4:fc:f1:6e:f9:49:77:22:
                    16:72:ee:9d:3d:21:3a:a1:f5:0a:64:4c:74:d4:f2:
                    eb:bf:eb:a8:8d:a0:d1:14:0e:69:db:ce:fa:10:2c:
                    15:c1:2c:70:8e:21:4d:18:81:3b:3e:b4:dc:15:fc:
                    3a:bc:0c:a6:98:02:2b:6e:b5:0b:73:59:30:d9:f2:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:A7:6E:CB:C9:FD:DE:57:DB:F8:BF:E4:E3:0E:E4:12:36:20:0B
            X509v3 Authority Key Identifier:
                keyid:B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:a4:25:90:42:8f:f0:59:80:e3:10:a3:ca:03:ed:c5:04:
         57:81:e4:02:08:d5:bc:c0:66:58:da:ef:8c:9c:d8:1b:69:7b:
         2e:cd:6c:4c:8f:6c:6a:90:69:31:e7:21:60:9d:96:b8:76:15:
         7e:03:8c:4f:ac:2a:32:59:da:de:ad:fd:ec:09:79:27:0e:71:
         90:fe:40:22:3a:58:6b:fc:31:a5:ee:d6:7e:68:42:a7:4b:68:
         a2:5d:fb:ad:e3:15:44:69:bf:08:77:3c:fb:20:20:91:a9:02:
         5c:5a:36:46:38:6d:4b:7f:61:02:f6:c9:c9:3b:0f:d0:88:ba:
         2c:a2:73:f1:60:c7:ac:16:32:1d:91:76:cb:7d:e6:e4:38:88:
         f7:a8:dc:0c:15:00:a6:b4:30:6a:d6:19:5e:cc:aa:99:d4:e8:
         bc:f6:4c:3e:d0:a5:a3:8f:00:5a:39:12:c1:1e:01:61:e5:23:
         1c:90:12:5c:c9:98:b4:36:22:a0:b8:03:3d:14:f0:0a:75:03:
         79:35:25:71:90:77:0c:bc:3f:a3:ac:61:55:e6:33:1d:8e:e7:
         ed:3d:cf:85:b0:0d:b8:f0:05:d1:cd:bd:93:0a:10:53:c1:78:
         62:42:59:0c:c0:0d:54:56:49:f8:33:99:02:87:4e:d3:47:60:
         1d:92:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:12 2026 by rpki-client