Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
File:                     2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json)
Hash identifier:          EPUm0DnYrbvkJBcztTWWE931xumCuj/Mfuc13d7prbs=
Subject key identifier:   43:F7:10:9B:50:D5:E8:59:B2:CD:A7:EE:57:0C:DB:26:E9:3F:E3:96
Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
Certificate issuer:       /CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Certificate serial:       6DE7C1DC3596FFF009D85819FAD6888FBC38733D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
Manifest number:          C6
Signing time:             Mon 05 Oct 2026 00:01:03 +0000
Manifest this update:     Sun 04 Oct 2026 23:56:03 +0000
Manifest next update:     Tue 06 Oct 2026 01:27:03 +0000
Files and hashes:         1: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: uJcHdjXh5SfrkzYdLESgSGTHwLYgrMFPcCHURUD4jLo=)
                          2: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl
                          rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:c1:dc:35:96:ff:f0:09:d8:58:19:fa:d6:88:8f:bc:38:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853
        Validity
            Not Before: Oct  4 23:56:03 2026 GMT
            Not After : Oct  6 01:27:03 2026 GMT
        Subject: CN=43F7109B50D5E859B2CDA7EE570CDB26E93FE396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:fd:ec:d4:6b:7f:7f:17:a6:63:5b:b6:3b:
                    b6:bc:b1:62:51:61:08:90:71:2c:db:8c:b4:5b:57:
                    f5:f3:31:0c:1b:6a:c5:6d:78:e9:0a:16:4c:b6:c6:
                    7e:72:fa:4f:f1:d7:67:25:cf:05:e9:d0:f3:09:da:
                    0b:66:58:64:c0:df:c8:aa:e7:07:83:00:5d:3c:9e:
                    e0:df:a6:a5:cd:4b:c3:5c:0f:65:b5:7a:3f:66:e6:
                    4d:12:03:03:70:79:05:b9:19:0c:65:92:9e:65:0d:
                    1f:45:85:6c:9c:0f:c8:6e:e4:43:8c:95:56:67:0c:
                    41:85:1b:5c:1f:dc:5a:3b:28:ba:bd:39:6a:d8:72:
                    2b:12:6a:81:d1:27:8f:3d:17:45:8d:53:66:ad:6e:
                    69:51:78:d4:a8:c1:74:ba:a3:da:67:4e:dd:b9:f2:
                    b8:44:24:ad:80:16:82:3c:7a:2d:cc:21:53:6c:2d:
                    58:27:ad:09:02:1c:fd:fc:e5:12:4a:b9:70:8a:25:
                    c7:78:0f:31:2d:b1:10:53:0f:6e:2c:cb:54:dd:c4:
                    a9:38:ec:9f:cb:f5:18:8a:f5:f6:e3:f1:4a:70:71:
                    92:d6:34:59:38:6e:e8:16:8b:53:fa:05:57:94:5d:
                    63:5f:b4:6f:71:d1:30:64:c3:f6:03:c9:f9:d7:5d:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F7:10:9B:50:D5:E8:59:B2:CD:A7:EE:57:0C:DB:26:E9:3F:E3:96
            X509v3 Authority Key Identifier:
                keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:14:0d:f0:60:49:02:c9:5e:b8:05:ba:7c:c3:ad:f8:cb:
         50:c1:05:54:00:55:91:c1:63:a3:f8:ed:5a:f7:02:d8:cc:da:
         46:22:9b:1d:d0:59:f2:a5:1e:75:8b:60:d7:4f:f6:b2:37:b1:
         2b:88:da:ac:47:c3:80:72:bb:77:8d:96:ba:39:a8:88:87:51:
         2b:50:d1:d2:56:b1:bf:61:57:b8:62:bb:bd:45:a5:ac:fe:c2:
         e9:c0:bc:b1:8e:2f:9e:b7:15:0d:09:ca:f1:af:cd:46:f2:d5:
         a6:25:04:e9:d3:0c:0e:6f:5a:85:8a:36:54:93:f0:d2:01:bb:
         95:55:52:0c:7e:3d:a7:62:04:2a:4b:4d:a6:37:ba:e3:44:df:
         38:49:3a:a4:5a:5f:26:d7:57:7f:ac:0e:df:5d:da:54:f1:0c:
         8d:ba:35:2f:10:db:b0:bc:82:95:f0:a4:f2:67:22:13:31:1f:
         13:ea:6c:61:1a:76:09:98:88:40:9c:74:dd:2b:da:8d:64:ad:
         1a:a4:73:bb:4b:a4:58:5c:b7:33:b0:7d:0f:98:dc:db:0a:0f:
         38:30:19:a4:ab:ea:d3:67:52:be:5e:27:95:c5:35:d4:e6:7a:
         83:f1:96:fc:0f:f9:bc:8f:5d:c5:5a:d8:ae:64:7d:82:3d:56:
         02:b0:91:ed
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUbefB3DWW//AJ2FgZ+taIj7w4cz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ2M0QwMjEzMDEwQTc0NjUxQTE2MTI3N0VCOUNCREM5
Q0Y2NTg1MzAeFw0yNjEwMDQyMzU2MDNaFw0yNjEwMDYwMTI3MDNaMDMxMTAvBgNV
BAMTKDQzRjcxMDlCNTBENUU4NTlCMkNEQTdFRTU3MENEQjI2RTkzRkUzOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZ/3s1Gt/fxemY1u2O7a8sWJR
YQiQcSzbjLRbV/XzMQwbasVteOkKFky2xn5y+k/x12clzwXp0PMJ2gtmWGTA38iq
5weDAF08nuDfpqXNS8NcD2W1ej9m5k0SAwNweQW5GQxlkp5lDR9FhWycD8hu5EOM
lVZnDEGFG1wf3Fo7KLq9OWrYcisSaoHRJ489F0WNU2atbmlReNSowXS6o9pnTt25
8rhEJK2AFoI8ei3MIVNsLVgnrQkCHP385RJKuXCKJcd4DzEtsRBTD24sy1TdxKk4
7J/L9RiK9fbj8UpwcZLWNFk4bugWi1P6BVeUXWNftG9x0TBkw/YDyfnXXWmrAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUQ/cQm1DV6FmyzafuVwzbJuk/45YwHwYDVR0j
BBgwFoAULWPQITAQp0ZRoWEnfrnL3Jz2WFMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv
MC8yRDYzRDAyMTMwMTBBNzQ2NTFBMTYxMjc3RUI5Q0JEQzlDRjY1ODUzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzJENjNEMDIxMzAxMEE3NDY1MUExNjEyNzdFQjlD
QkRDOUNGNjU4NTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8wLzJENjNEMDIxMzAxMEE3
NDY1MUExNjEyNzdFQjlDQkRDOUNGNjU4NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCDBQN8GBJAsle
uAW6fMOt+MtQwQVUAFWRwWOj+O1a9wLYzNpGIpsd0FnypR51i2DXT/ayN7EriNqs
R8OAcrt3jZa6OaiIh1ErUNHSVrG/YVe4Yru9RaWs/sLpwLyxji+etxUNCcrxr81G
8tWmJQTp0wwOb1qFijZUk/DSAbuVVVIMfj2nYgQqS02mN7rjRN84STqkWl8m11d/
rA7fXdpU8QyNujUvENuwvIKV8KTyZyITMR8T6mxhGnYJmIhAnHTdK9qNZK0apHO7
S6RYXLczsH0PmNzbCg84MBmkq+rTZ1K+XieVxTXU5nqD8Zb8D/m8j13FWtiuZH2C
PVYCsJHt
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:10:17 2026 by rpki-client