Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
File:                     8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json)
Hash identifier:          UsXw6O6YX08jZ5nv+YqXlqelHGqcmDBVsFCI6rdNOkg=
Subject key identifier:   72:49:D0:F8:94:84:14:D8:0D:4F:36:F2:DB:FB:2C:14:4F:EF:EC:48
Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4
Certificate issuer:       /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
Certificate serial:       5168E9F0AEF1F07938D4CE82A68B7982C1741700
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 05:23:11 +0000
Manifest this update:     Tue 30 Jun 2026 05:18:11 +0000
Manifest next update:     Wed 01 Jul 2026 08:22:11 +0000
Files and hashes:         1: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: gelBmDUXaSVTPmZ4WWquuq9OdHWXFeNnMUh4IwN17NA=)
                          2: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 08:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:e9:f0:ae:f1:f0:79:38:d4:ce:82:a6:8b:79:82:c1:74:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
        Validity
            Not Before: Jun 30 05:18:11 2026 GMT
            Not After : Jul  1 08:22:11 2026 GMT
        Subject: CN=7249D0F8948414D80D4F36F2DBFB2C144FEFEC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:8f:66:88:02:3e:a9:9a:37:e0:83:b1:f1:
                    7e:3c:6b:38:d8:09:0e:c3:c2:4f:20:ef:a9:cd:57:
                    a2:b0:92:85:b9:32:41:f6:f7:ba:70:9a:4f:a2:9b:
                    07:67:8b:ee:83:fe:bd:11:e8:ff:9d:ea:df:51:67:
                    64:a9:9b:3c:79:f8:7c:3c:d5:79:c9:bd:61:05:63:
                    32:24:e1:84:20:f0:f2:fc:12:e6:6c:b7:8a:99:c5:
                    75:ae:75:84:bd:11:6d:2e:52:68:02:ae:36:3a:55:
                    3a:d2:cf:27:d5:ae:98:a8:cc:f2:c8:ea:de:8d:90:
                    66:4b:9e:a8:c8:f3:11:4e:5a:fd:cb:60:84:83:09:
                    60:44:ef:d9:a9:3d:8b:74:a5:83:62:c8:be:65:76:
                    13:af:c1:3c:8a:76:0a:ea:c3:b1:89:99:95:66:c3:
                    79:05:48:c6:8f:cf:0f:6c:17:0b:d2:8a:a3:8d:b5:
                    82:72:d2:ea:38:d0:68:ac:46:fe:ca:92:1d:92:ed:
                    31:65:95:e1:e7:50:98:32:e9:a4:a2:12:ea:3a:88:
                    cf:41:2e:e2:3b:65:3b:1f:0d:82:4a:5e:ce:07:ef:
                    f1:bf:89:7c:8b:52:3b:f4:34:76:0c:53:39:24:f9:
                    1e:a2:c9:2b:a0:ad:b2:80:c7:b3:87:50:35:a9:7e:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:D0:F8:94:84:14:D8:0D:4F:36:F2:DB:FB:2C:14:4F:EF:EC:48
            X509v3 Authority Key Identifier:
                keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:22:49:e3:99:8f:11:a5:48:0b:4f:95:92:68:22:e9:5a:81:
         b9:13:92:5c:af:13:16:d0:b1:1d:68:ab:d8:1f:f3:24:5e:b0:
         7e:37:47:94:05:91:f1:30:7b:e9:10:15:68:9c:d7:73:18:f7:
         32:44:b7:66:d1:f3:9f:f1:a2:73:15:67:93:a8:2f:c3:b8:7c:
         8e:1b:83:8a:51:09:df:c2:4e:ca:1f:10:78:76:e0:73:a2:fa:
         5a:07:b8:25:23:3f:e3:fe:8e:99:07:53:f1:23:be:b5:09:db:
         51:2f:95:ac:92:ac:b2:a8:65:63:24:23:dd:c3:6a:69:56:d1:
         2f:23:0b:43:3a:5b:e4:25:60:eb:01:ef:88:62:67:31:3c:69:
         86:05:f6:a2:36:bf:8b:d6:2a:0b:a1:81:f5:91:38:04:46:c5:
         59:6b:4b:c2:00:81:62:68:ae:4f:01:fe:e8:7e:e7:bb:df:a1:
         14:00:25:b9:e9:27:b3:c4:00:c9:d8:9d:dc:65:e2:26:51:56:
         cd:b9:f2:c3:01:a2:52:d2:ad:1e:dc:b9:29:df:d5:ac:ad:1a:
         dd:64:c5:8f:5e:a7:9e:67:29:b1:bc:da:58:28:ab:f2:9f:2e:
         97:b1:6b:65:75:90:b0:28:64:59:5b:ce:18:dd:a6:12:68:66:
         0a:a6:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:58 2026 by rpki-client