Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
File:                     86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json)
Hash identifier:          BomTUfcfCC9Rv4tbaJABAxhLte9iEG524uaYyKaa6G4=
Subject key identifier:   CD:20:19:C2:2A:89:9D:AB:77:07:E4:E2:09:20:97:5B:C0:22:3A:D4
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Certificate issuer:       /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial:       5EA0C452B476DF14836F2224588980C6E5E6EDAB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
Manifest number:          81
Signing time:             Sat 15 Aug 2026 03:29:12 +0000
Manifest this update:     Sat 15 Aug 2026 03:24:12 +0000
Manifest next update:     Sun 16 Aug 2026 06:39:12 +0000
Files and hashes:         1: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=)
                          2: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: odNlBPpD6kuQrTWiumPHqXuNTw23DRMtGF5zs6sNofY=)
                          3: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
                          rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a0:c4:52:b4:76:df:14:83:6f:22:24:58:89:80:c6:e5:e6:ed:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
        Validity
            Not Before: Aug 15 03:24:12 2026 GMT
            Not After : Aug 16 06:39:12 2026 GMT
        Subject: CN=CD2019C22A899DAB7707E4E20920975BC0223AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:ed:83:12:fd:7d:25:74:5b:ea:a9:65:38:
                    c9:83:9b:1d:bf:63:0a:1b:bb:ce:c7:2a:ad:16:30:
                    77:6c:3e:d1:f1:ae:77:68:ea:6e:cd:32:26:2f:54:
                    88:7f:c8:0a:64:08:e7:d1:72:77:87:d0:69:71:07:
                    51:9f:fd:c0:43:e2:cb:97:80:d2:32:5f:16:ac:58:
                    1c:eb:2c:e0:ca:5d:9f:ee:04:15:01:bc:e2:38:15:
                    fc:7c:6e:81:46:4e:bd:e7:23:f6:61:36:86:9b:22:
                    bd:57:6a:55:42:b6:5d:51:74:79:ce:bc:5f:b3:6a:
                    92:d0:7f:2c:3f:eb:7a:10:3e:e5:b5:4b:86:dc:a8:
                    7a:7f:0b:9f:38:a8:76:f4:d0:f7:27:45:40:0e:ba:
                    41:16:94:45:de:e6:f1:77:48:8b:ef:d8:fb:8f:c0:
                    41:bc:00:80:c0:d9:94:c9:b4:88:bc:39:c8:e3:6c:
                    48:45:c0:98:06:1a:1a:2d:b9:f1:f2:2d:c9:9a:f9:
                    99:79:be:f9:74:7e:be:48:d7:78:08:62:82:d0:28:
                    1c:7f:7e:2f:16:69:17:29:7f:b1:11:6a:0e:0d:97:
                    c6:21:42:be:8c:75:a6:ce:3e:c7:dd:61:19:7a:70:
                    5d:1f:1f:0f:ff:e9:7f:2e:cc:6b:da:00:0c:a6:42:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:19:C2:2A:89:9D:AB:77:07:E4:E2:09:20:97:5B:C0:22:3A:D4
            X509v3 Authority Key Identifier:
                keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:50:1a:51:e2:7b:07:75:6b:56:1f:7d:7f:41:6d:01:5f:65:
         fc:1d:7f:38:b3:cb:e2:3d:0f:e3:bd:cc:82:77:ac:8e:62:89:
         4f:e9:7c:3d:b2:4b:f2:9d:ec:fa:54:1c:d7:cc:90:6c:34:bb:
         4c:6a:ec:d8:a9:a2:cd:14:ee:20:49:ae:1e:4d:72:60:64:3f:
         24:b9:ca:15:47:24:f0:5a:f5:91:52:ed:16:61:a0:7f:41:fc:
         37:dd:6b:dc:df:00:9b:56:54:e2:1d:4a:83:e1:ad:b2:0e:47:
         a2:7f:a5:1a:68:02:e8:d1:07:0a:43:b1:b4:7b:c4:ed:3b:78:
         da:a3:fa:d1:16:c7:56:9d:e9:d6:31:72:57:ff:8d:be:d5:99:
         59:fe:1e:13:6c:78:6f:dc:c2:94:94:d8:a0:d5:34:89:9d:05:
         cb:0c:1f:b4:78:05:3e:98:d3:3a:9d:93:cc:af:16:23:d3:41:
         88:bb:84:57:68:3f:6d:ae:8c:14:a8:48:ed:23:35:db:9e:ae:
         91:0e:f8:07:15:04:cb:b0:aa:4f:b6:2e:1e:6d:6d:76:3c:cd:
         3b:1d:f7:84:78:99:67:8d:c4:1a:bc:76:e0:2e:20:80:66:9a:
         9b:b8:ff:fe:73:a9:fa:0d:82:a0:7a:de:be:a5:49:79:66:34:
         b8:6c:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:21 2026 by rpki-client