Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
File:                     1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft (raw, json)
Hash identifier:          mKaFFlc6aolWfPc8ASAQ5J45GifgnABn0jrQwjSjzm8=
Subject key identifier:   A0:35:C3:50:DD:CB:96:CE:6F:44:9A:B3:EB:91:BD:C8:02:F0:C7:3A
Authority key identifier: 1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Certificate issuer:       /CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Certificate serial:       57D348E504130DD9B9166B271DE9FAE71732646A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
Manifest number:          09
Signing time:             Fri 15 May 2026 11:36:56 +0000
Manifest this update:     Fri 15 May 2026 11:31:56 +0000
Manifest next update:     Sat 16 May 2026 13:11:56 +0000
Files and hashes:         1: 3136302e31392e39302e302f32342d3234203d3e20313532363130.roa (hash: gltrchavwBKMRLSis9WfQ6ZI8We0DSXE9wkeAfUu3NE=)
                          2: 3136302e31392e39312e302f32342d3234203d3e20313532363130.roa (hash: JChDx8EuWzqL1gPeTCGF4ozQOt1mwniQnlS9i/3N+jo=)
                          3: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl (hash: 9R0ccaqge156qQDmMvLP8jH8yXs3c6/4crQqUxgTak8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
                          rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 13:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d3:48:e5:04:13:0d:d9:b9:16:6b:27:1d:e9:fa:e7:17:32:64:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
        Validity
            Not Before: May 15 11:31:56 2026 GMT
            Not After : May 16 13:11:56 2026 GMT
        Subject: CN=A035C350DDCB96CE6F449AB3EB91BDC802F0C73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:2b:c4:0e:ff:17:d0:fb:b5:70:2c:bd:46:
                    88:c6:97:11:df:d9:2e:1e:44:f5:d3:d8:b7:5e:84:
                    e3:43:1d:a9:da:f6:ee:f2:aa:ba:01:6a:a1:a1:08:
                    fe:6a:98:8e:52:c7:26:ab:1e:37:74:01:ec:9a:3e:
                    2d:8a:04:db:b0:8c:03:d4:7b:4c:71:e9:d3:91:a5:
                    61:d9:26:3d:62:75:1c:a1:20:be:a4:90:f7:b5:16:
                    fe:10:26:a5:a2:45:f1:71:72:ba:33:0f:1e:05:de:
                    fd:e1:2c:ba:99:01:ac:4b:2a:1b:5e:23:66:c5:79:
                    a5:ec:73:71:e4:5f:2a:bf:01:63:07:71:de:24:af:
                    50:f7:05:f2:59:9c:b1:7e:c2:91:55:a9:6e:fe:a2:
                    69:b3:d7:eb:89:a5:d8:04:8a:39:49:bc:3d:33:b3:
                    ff:76:28:be:ca:b3:2a:15:c6:57:ca:68:b0:47:fb:
                    3a:b1:85:bd:af:c0:24:03:7d:96:bf:53:e9:23:16:
                    d5:c7:97:42:4f:0d:c4:c2:81:b2:8a:d3:c9:71:94:
                    3a:04:10:09:2d:f0:1b:c6:ce:a4:91:b2:9b:86:3b:
                    5a:40:36:ca:0d:7a:08:ae:24:5f:98:59:a3:ef:0c:
                    9b:1e:c6:ad:7b:d1:0f:19:17:45:de:8f:a7:cf:d2:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:C3:50:DD:CB:96:CE:6F:44:9A:B3:EB:91:BD:C8:02:F0:C7:3A
            X509v3 Authority Key Identifier:
                keyid:1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:22:bf:e7:52:79:7b:86:96:87:1c:5b:a0:20:30:71:35:79:
         3a:21:46:19:f1:8f:80:47:08:78:dd:6f:b3:6b:eb:a6:11:9f:
         cb:1d:8d:a0:56:46:16:7c:30:71:79:36:b9:e5:90:5d:c9:37:
         ac:73:0b:3a:0d:08:87:0d:87:0c:26:08:9b:98:50:b2:35:ce:
         14:39:a5:7e:d0:62:ec:8e:01:9f:8e:53:ee:a1:23:5e:fb:ee:
         0b:9d:73:2b:89:d4:d4:18:75:e5:c8:c0:fa:dd:cf:96:94:a6:
         05:d4:9b:f0:a4:e7:ff:74:c4:6f:08:d3:26:df:1a:26:e2:bd:
         b1:9f:05:aa:df:cf:75:e5:03:27:36:45:fe:eb:76:ed:57:a8:
         ae:e1:bf:d1:70:94:dd:15:ca:c7:66:50:3c:56:dd:98:60:00:
         e7:7f:19:34:07:2d:07:fa:44:7a:09:5f:ac:3f:5d:75:52:c3:
         22:09:1d:94:23:82:13:3f:4c:d6:55:15:8c:6f:a0:a8:ca:98:
         32:cf:15:c2:89:aa:1b:18:d2:4e:91:6d:d5:bf:1a:80:fb:2b:
         a0:a7:4e:f1:c2:c8:3b:0b:44:a5:8f:78:05:6a:fd:88:8c:a9:
         ec:02:05:5b:eb:7d:6e:96:d4:a5:37:c8:2e:39:32:6e:87:10:
         ec:88:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:53:40 2026 by rpki-client