Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          5hMP8pf+sqFIgcAaOU8ii2JjA/0k3FPl0+581Caxxis=
Subject key identifier:   A0:E2:CB:EC:70:B3:0A:74:72:3C:62:0A:A2:EA:E9:F2:56:E6:94:75
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       3E7FD6FC7651CB8C2EA88F02623A2789C953FAE5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          08
Signing time:             Fri 15 May 2026 16:02:40 +0000
Manifest this update:     Fri 15 May 2026 15:57:40 +0000
Manifest next update:     Sat 16 May 2026 17:19:40 +0000
Files and hashes:         1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
                          2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: XJuS9d1j++7FfXJajI/ccSAEKa2au2KpAjbRXd8ImHk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 17:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:d6:fc:76:51:cb:8c:2e:a8:8f:02:62:3a:27:89:c9:53:fa:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: May 15 15:57:40 2026 GMT
            Not After : May 16 17:19:40 2026 GMT
        Subject: CN=A0E2CBEC70B30A74723C620AA2EAE9F256E69475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:16:92:6a:42:8d:37:67:8d:3d:b9:f7:f2:
                    e4:12:78:c1:85:95:13:3d:1c:56:81:84:7f:e6:14:
                    33:75:97:e8:ff:b6:a2:80:07:be:29:09:fa:db:09:
                    61:92:e5:85:2a:b0:a2:f4:25:18:bf:87:cd:29:32:
                    c1:2c:56:88:2d:b3:1b:d8:c3:e6:94:64:9d:07:89:
                    f0:4b:17:5a:e6:23:4f:49:81:c8:0c:be:91:1c:de:
                    02:29:49:2c:59:84:3e:4a:7a:f2:c8:48:06:06:0d:
                    31:73:60:83:d6:7c:95:df:95:4f:d6:71:59:9e:fa:
                    c9:20:a3:d7:1a:a7:40:2d:57:af:40:9c:32:4c:ea:
                    bb:a5:09:ba:2a:70:ff:74:b2:04:a5:5f:40:a4:0f:
                    b5:10:68:36:4a:2d:69:33:ba:e1:17:05:9d:73:52:
                    b4:18:ca:31:6b:3a:f6:7b:73:d4:42:c5:a0:3f:c5:
                    cf:be:3c:f0:6f:b0:40:c5:8d:72:c1:36:7d:b4:fe:
                    e4:45:36:c2:9a:fc:46:81:85:73:cd:91:3b:3e:72:
                    53:c3:f4:23:fd:ff:3b:54:68:59:72:cc:dd:7c:9c:
                    bc:6f:2d:4e:1d:5e:db:44:b3:d0:b2:66:0e:0e:f6:
                    b8:09:92:1e:a1:c1:60:44:b8:f2:9a:05:85:36:db:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:CB:EC:70:B3:0A:74:72:3C:62:0A:A2:EA:E9:F2:56:E6:94:75
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:cf:ef:f6:e2:a1:44:97:67:95:d3:d3:e0:ad:81:99:f4:
         a2:a1:90:a1:94:6b:dd:30:d1:a8:8f:41:96:a1:43:d4:b9:b3:
         53:39:02:4f:c0:48:b7:ce:11:d5:83:7c:a7:af:38:10:5e:3f:
         72:36:89:27:e6:cd:92:89:50:c2:24:78:0e:5e:20:2b:9f:1e:
         be:1d:47:6c:d4:a4:0f:ed:97:fb:ce:30:2a:0f:69:de:f1:8a:
         b6:f9:3d:ce:95:8d:86:26:1b:22:24:0e:b1:2d:41:2f:2e:b8:
         eb:ae:66:f3:c4:94:fc:50:bd:25:f5:61:2c:ca:2b:de:5a:c2:
         9e:26:80:3b:95:d3:4b:72:87:f3:cc:7f:65:69:ed:b5:d1:84:
         b4:5b:77:da:1c:79:9a:b7:9b:59:9a:54:9e:fa:62:93:f9:b7:
         4e:49:da:fc:20:b0:3a:81:f3:d0:67:b5:28:c1:f9:7a:57:5d:
         a6:34:c2:aa:c6:3f:6e:10:b1:15:52:7d:6b:17:35:c3:a0:03:
         e5:54:4e:3c:62:d9:fd:02:d0:3b:a8:44:75:00:b8:c5:c9:e2:
         33:1f:46:4d:0c:3b:d4:d0:bd:f5:77:9a:9a:1a:5c:ba:3a:d8:
         52:ff:46:13:2c:d8:c4:b6:2e:d4:60:71:b3:87:0b:25:86:dd:
         ed:22:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:55:57 2026 by rpki-client