Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          BMClUw9clRAnSY3V/hwAKpg1GWgnBwJU4b58yps/RdY=
Subject key identifier:   3C:DF:84:AC:13:B4:1F:22:44:0C:10:4F:67:3D:F8:52:9A:84:18:3B
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       6B48BF49C6BD1406F874EA254AF9F6C13CB83314
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          44
Signing time:             Mon 29 Jun 2026 23:57:36 +0000
Manifest this update:     Mon 29 Jun 2026 23:52:36 +0000
Manifest next update:     Wed 01 Jul 2026 02:50:36 +0000
Files and hashes:         1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
                          2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: HzNe9wOCs4Bsa9NB+1izswamwGg9ez5d1I+4XJURJ0I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 02:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:48:bf:49:c6:bd:14:06:f8:74:ea:25:4a:f9:f6:c1:3c:b8:33:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: Jun 29 23:52:36 2026 GMT
            Not After : Jul  1 02:50:36 2026 GMT
        Subject: CN=3CDF84AC13B41F22440C104F673DF8529A84183B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:37:3a:ce:b9:7a:ae:53:30:9e:d6:03:9e:
                    11:ea:5e:13:43:81:89:de:9d:fd:d6:8a:cf:82:0a:
                    f1:ea:17:3b:71:db:ef:b0:04:f6:4c:0e:94:44:cd:
                    0d:c3:4b:5b:50:78:d5:a5:e0:d0:3e:e7:49:06:5c:
                    aa:03:38:8a:cc:73:01:55:62:0e:ab:70:eb:34:c6:
                    2d:8b:93:af:35:42:47:e1:87:eb:86:2b:32:b0:c1:
                    d5:ff:31:ad:3c:b3:82:b1:47:98:07:ba:a4:38:e1:
                    76:8b:36:48:c9:00:a6:57:57:99:b2:f9:9d:15:cc:
                    34:24:bc:02:9c:72:50:49:96:66:1d:a6:c1:83:55:
                    f8:8b:a8:e1:16:78:3c:de:33:18:ff:b2:5c:f5:c3:
                    42:83:0d:c5:b7:90:83:84:7f:7d:95:f1:9e:01:c0:
                    0c:18:9c:49:91:32:52:97:69:1e:9d:25:d4:32:7d:
                    cd:66:c2:0a:31:2b:82:37:7f:69:af:b8:eb:b8:3e:
                    e9:7c:77:37:45:bb:2d:d7:80:d0:9a:1c:c6:77:45:
                    ee:b5:cb:1d:88:62:d8:34:a4:bc:97:3f:ce:25:78:
                    1a:41:bf:86:ce:e4:51:ec:69:dc:0e:c0:c3:0d:aa:
                    09:b1:4b:9f:19:59:5c:7e:78:c7:a6:8d:aa:f0:ee:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:84:AC:13:B4:1F:22:44:0C:10:4F:67:3D:F8:52:9A:84:18:3B
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ea:b4:c6:ad:b8:33:ec:72:d7:eb:a1:cb:15:c2:bb:22:4e:
         06:f7:54:35:c1:82:e2:bd:b7:83:dc:72:2e:0b:86:a8:78:8b:
         0b:8f:33:c0:3f:a6:2b:5d:75:48:d0:10:77:2a:02:03:fa:12:
         74:a4:15:45:7e:2e:94:e3:f6:3b:ae:c0:43:60:16:2c:3a:27:
         f5:3c:7f:b9:49:18:d7:55:d2:a9:38:f8:b3:80:72:23:c2:5d:
         c7:88:e8:54:cc:2e:52:69:fb:a3:be:01:a8:f7:1c:8a:f7:a1:
         2d:d4:08:4b:6f:a5:18:5d:7e:82:ee:39:6b:fd:be:e2:63:cf:
         8d:85:b0:f7:a9:d6:87:57:ad:98:ee:19:ee:00:9c:f3:ee:0f:
         96:11:5b:3c:e4:d2:8f:b7:7e:b2:36:aa:e9:e4:b3:c0:d9:d2:
         5f:e9:18:05:aa:dd:31:77:45:75:46:18:7c:30:96:e9:e8:b6:
         e6:f6:2f:57:bf:52:4e:78:c6:f5:2e:c0:6e:2b:6e:cd:9e:ea:
         48:38:3c:ac:25:85:ff:55:29:33:6f:99:81:57:21:f6:bf:53:
         12:53:fb:07:d3:8c:68:00:9a:9a:c6:40:92:9f:e5:43:f8:ed:
         4d:d2:72:00:8e:bc:f1:9f:e8:73:ee:42:22:a6:61:68:f5:18:
         4e:58:55:0c
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUa0i/Sca9FAb4dOolSvn2wTy4MxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzMUU2NUE5OEQ4MjczRjk1NzlCRkE1QjhGRTZDQTUy
RDAxQzQxQjAeFw0yNjA2MjkyMzUyMzZaFw0yNjA3MDEwMjUwMzZaMDMxMTAvBgNV
BAMTKDNDREY4NEFDMTNCNDFGMjI0NDBDMTA0RjY3M0RGODUyOUE4NDE4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEDc6zrl6rlMwntYDnhHqXhND
gYnenf3Wis+CCvHqFztx2++wBPZMDpREzQ3DS1tQeNWl4NA+50kGXKoDOIrMcwFV
Yg6rcOs0xi2Lk681Qkfhh+uGKzKwwdX/Ma08s4KxR5gHuqQ44XaLNkjJAKZXV5my
+Z0VzDQkvAKcclBJlmYdpsGDVfiLqOEWeDzeMxj/slz1w0KDDcW3kIOEf32V8Z4B
wAwYnEmRMlKXaR6dJdQyfc1mwgoxK4I3f2mvuOu4Pul8dzdFuy3XgNCaHMZ3Re61
yx2IYtg0pLyXP84leBpBv4bO5FHsadwOwMMNqgmxS58ZWVx+eMemjarw7hSFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUPN+ErBO0HyJEDBBPZz34UpqEGDswHwYDVR0j
BBgwFoAUUDHmWpjYJz+Veb+luP5spS0BxBswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv
MS81MDMxRTY1QTk4RDgyNzNGOTU3OUJGQTVCOEZFNkNBNTJEMDFDNDFCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzUwMzFFNjVBOThEODI3M0Y5NTc5QkZBNUI4RkU2
Q0E1MkQwMUM0MUIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8xLzUwMzFFNjVBOThEODI3
M0Y5NTc5QkZBNUI4RkU2Q0E1MkQwMUM0MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR6rTGrbgz7HLX
66HLFcK7Ik4G91Q1wYLivbeD3HIuC4aoeIsLjzPAP6YrXXVI0BB3KgID+hJ0pBVF
fi6U4/Y7rsBDYBYsOif1PH+5SRjXVdKpOPizgHIjwl3HiOhUzC5SafujvgGo9xyK
96Et1AhLb6UYXX6C7jlr/b7iY8+NhbD3qdaHV62Y7hnuAJzz7g+WEVs85NKPt36y
Nqrp5LPA2dJf6RgFqt0xd0V1Rhh8MJbp6Lbm9i9Xv1JOeMb1LsBuK27NnupIODys
JYX/VSkzb5mBVyH2v1MSU/sH04xoAJqaxkCSn+VD+O1N0nIAjrzxn+hz7kIipmFo
9RhOWFUM
-----END CERTIFICATE-----
Generated at Tue Jun 30 13:11:34 2026 by rpki-client