Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json)
Hash identifier:          3R6Sxje7w3E21VH5R2D7F9X+MI2yUvCwQkunXn4f/lc=
Subject key identifier:   5A:2C:AB:76:E1:F4:B4:93:E1:4B:84:6B:20:CD:BA:F2:AC:12:4C:46
Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Certificate issuer:       /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
Certificate serial:       19D209FD9E296B5FEC1253C4095DFA3BCA9966DC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
Manifest number:          82
Signing time:             Fri 14 Aug 2026 23:28:43 +0000
Manifest this update:     Fri 14 Aug 2026 23:23:43 +0000
Manifest next update:     Sun 16 Aug 2026 00:28:43 +0000
Files and hashes:         1: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=)
                          2: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: rtPSpOWg+03Tz8dHiVQBu0uTd3jmTvZtMvPQm0wTvac=)
                          3: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=)
                          4: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl
                          rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 00:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:09:fd:9e:29:6b:5f:ec:12:53:c4:09:5d:fa:3b:ca:99:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Validity
            Not Before: Aug 14 23:23:43 2026 GMT
            Not After : Aug 16 00:28:43 2026 GMT
        Subject: CN=5A2CAB76E1F4B493E14B846B20CDBAF2AC124C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:17:72:f5:f3:52:7c:c2:2f:41:b8:fd:af:
                    56:3c:b1:06:da:c1:81:c5:52:33:e5:a9:e1:96:40:
                    5e:06:79:2b:d9:5b:d2:be:27:4e:0d:a5:5c:7c:90:
                    5c:84:e2:14:aa:02:3e:e8:bd:31:de:94:cf:0e:c5:
                    e9:3a:c5:bd:bc:7a:b3:38:1e:eb:80:26:34:76:4b:
                    51:02:8e:50:6e:d8:25:e2:c9:1f:09:73:22:fc:e7:
                    ab:56:57:fb:04:05:e6:4e:94:8e:ba:df:83:5e:ab:
                    60:de:39:18:a6:5c:86:da:6f:6a:17:c4:49:bc:00:
                    43:64:d9:aa:2e:15:e2:70:eb:d3:22:f4:7d:6d:86:
                    18:07:06:66:35:bb:c4:9e:d7:3c:69:3d:f3:95:45:
                    95:fb:cd:b2:b0:02:e2:54:8c:70:94:fe:59:97:00:
                    96:b9:9b:56:b4:5d:20:f2:6f:28:04:6b:05:04:81:
                    89:1e:be:00:fc:ad:47:18:0d:76:fe:39:cf:bd:a7:
                    e8:39:1b:42:cb:29:0f:58:af:b2:65:dd:5c:7c:8a:
                    87:35:d8:de:67:8b:d3:7f:f4:5c:b5:a0:6e:be:b0:
                    6c:dc:a4:07:6f:71:c6:da:d0:ab:70:f9:6c:14:94:
                    89:86:9b:ad:4e:8c:eb:d4:88:bc:ad:83:05:e5:3b:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:AB:76:E1:F4:B4:93:E1:4B:84:6B:20:CD:BA:F2:AC:12:4C:46
            X509v3 Authority Key Identifier:
                keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:73:85:91:65:19:d6:ea:01:44:62:37:39:6d:cd:95:aa:
         0a:0a:53:66:3c:4e:e3:d8:67:36:5e:0b:d5:51:33:4f:e6:b6:
         ef:80:ee:05:86:45:02:22:85:70:ff:6e:67:51:1a:1d:68:50:
         56:21:6a:74:61:38:90:fb:44:91:e9:f7:b6:92:ae:b4:96:0c:
         0e:31:dd:d3:5b:0b:0a:7d:90:94:e1:79:1a:d8:e6:41:00:b9:
         3e:5f:86:aa:0e:26:06:2d:5b:44:f0:01:cb:38:d1:b4:ae:08:
         84:8b:7c:92:85:07:46:d8:f5:eb:36:b9:29:57:dc:3b:e7:d2:
         a1:da:02:a9:40:73:a6:9d:aa:09:2f:54:97:a1:5e:ee:f0:40:
         21:43:1f:11:81:af:35:62:d8:44:b0:1c:83:3b:3b:96:77:e3:
         b1:bc:ad:2c:83:f9:bb:d2:39:ea:75:87:9e:d6:9f:e8:96:3b:
         30:b2:e9:c1:d9:b2:d1:e4:7b:14:85:04:56:a0:bd:6a:59:1b:
         4a:6e:51:4a:01:01:e9:23:97:83:95:ac:6b:0a:17:c9:b4:3b:
         c9:9c:3c:7f:38:08:b8:39:ca:e5:20:75:84:c3:44:bf:ab:2f:
         d5:58:ec:b6:b6:e7:57:4c:42:af:cc:82:e7:3d:42:5e:e2:33:
         34:a6:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:24 2026 by rpki-client