Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json)
Hash identifier:          oQf+vYxkVJqirFCcqNb1M/oyBFBLtS+Z0rolc8fweNE=
Subject key identifier:   10:71:0B:F7:98:B5:9F:E1:ED:05:DD:36:FA:7A:C0:9F:FE:0D:00:85
Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Certificate issuer:       /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
Certificate serial:       1646D01B4896D8A947DEE5D7591E167F68A097B3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
Manifest number:          06
Signing time:             Wed 13 May 2026 08:17:46 +0000
Manifest this update:     Wed 13 May 2026 08:12:46 +0000
Manifest next update:     Thu 14 May 2026 08:52:46 +0000
Files and hashes:         1: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=)
                          2: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=)
                          3: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: 8JO0KVA82EZ6iuWFJsCyiKwILE2e7WMEAAXDzo0f2uI=)
                          4: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl
                          rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:d0:1b:48:96:d8:a9:47:de:e5:d7:59:1e:16:7f:68:a0:97:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Validity
            Not Before: May 13 08:12:46 2026 GMT
            Not After : May 14 08:52:46 2026 GMT
        Subject: CN=10710BF798B59FE1ED05DD36FA7AC09FFE0D0085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:4f:de:13:b7:d2:87:70:fc:58:70:12:37:
                    21:df:b7:4b:77:31:bd:b8:3c:0b:ae:e6:dc:e8:08:
                    50:e0:0a:2e:40:73:a7:b0:06:bd:7c:50:59:bc:0f:
                    1d:4b:f3:04:6a:60:ba:ba:82:66:f3:08:da:0b:05:
                    0b:31:4f:29:47:b5:66:dd:01:b8:5a:35:43:51:ce:
                    b3:98:9f:b0:19:1a:6e:b0:4a:23:60:27:09:29:b0:
                    b5:67:37:a4:d6:47:6f:57:64:aa:d1:fb:95:76:10:
                    42:b4:65:2f:5b:36:3f:f7:36:ec:34:8d:b3:08:38:
                    c1:d8:83:c7:3a:bc:89:6a:00:85:7e:d2:19:50:ad:
                    cf:ca:ab:7b:e2:fc:ea:ee:52:70:69:36:a5:07:f0:
                    0d:02:e9:27:45:eb:48:45:02:66:0d:75:92:89:76:
                    db:b0:56:7b:40:ea:c1:a3:3a:98:d5:7e:b1:19:4b:
                    c4:99:bd:e1:cb:e8:a7:c7:f2:01:75:c1:3c:46:32:
                    82:37:bf:2b:18:dd:77:29:e2:2b:14:22:82:70:59:
                    1b:77:c5:66:5f:e2:19:d8:e5:4d:db:20:b5:3f:9f:
                    d7:eb:1d:13:37:38:bd:08:c9:7f:b2:ff:e8:4e:c8:
                    c5:89:e9:d6:09:37:e2:df:a0:a5:69:66:55:e5:2d:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:0B:F7:98:B5:9F:E1:ED:05:DD:36:FA:7A:C0:9F:FE:0D:00:85
            X509v3 Authority Key Identifier:
                keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9e:da:c6:58:5b:36:64:ab:71:3d:80:8c:be:95:3c:e6:6a:
         a0:43:a8:a6:d3:57:a0:ef:35:56:75:19:a7:2b:10:77:d9:51:
         1c:a5:b7:ad:29:70:7e:af:aa:d5:17:37:30:b8:31:20:45:46:
         02:85:26:30:98:ca:35:1a:c6:3d:06:72:de:44:ef:de:e8:45:
         0e:a0:23:14:f7:da:8d:b8:bb:a1:c7:d9:52:fe:15:74:ae:aa:
         1f:c5:61:dc:02:9b:d7:a7:09:53:01:09:74:c9:ea:7c:71:14:
         11:41:92:61:4d:0f:53:4f:98:77:9b:ab:07:05:8f:c9:a4:8d:
         07:be:b4:d6:f0:14:59:59:22:95:f3:27:d4:1e:35:e7:cf:6a:
         c6:4e:ca:7a:d0:0d:ee:51:9c:23:5a:ce:84:28:28:cb:5d:ab:
         fd:8b:9e:62:2a:f2:0c:7f:54:5a:53:98:d9:9a:9e:a0:7f:4e:
         3b:54:55:2e:54:c7:47:c1:0e:aa:00:99:9d:29:eb:33:ba:ed:
         68:4d:4c:af:b3:d4:aa:84:72:07:99:9b:76:a1:45:18:3e:b3:
         8d:d8:56:a7:96:ff:16:36:a8:94:01:0f:d0:3f:e8:31:4f:be:
         3e:ba:dd:b1:a7:cd:f8:04:dc:d6:7a:e5:82:40:d3:0a:e6:4a:
         87:bc:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:09 2026 by rpki-client