Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
File:                     86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json)
Hash identifier:          FFW+XTHMWgnnxiDl6elVBQ2VHEM+XQzLjeWx/IM/d9k=
Subject key identifier:   EC:B2:64:9D:EA:A4:2F:41:29:23:36:94:2B:CD:37:B7:20:FB:56:11
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Certificate issuer:       /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial:       2CB45651E6514FDC560F1C03256EDB459DB8DF81
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 02:12:54 +0000
Manifest this update:     Tue 30 Jun 2026 02:07:54 +0000
Manifest next update:     Wed 01 Jul 2026 05:50:54 +0000
Files and hashes:         1: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=)
                          2: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: UzF2B4HCCzGd4XYu5CDKNOu1s4yPCa6PFDjKX/AwpGc=)
                          3: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
                          rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 05:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b4:56:51:e6:51:4f:dc:56:0f:1c:03:25:6e:db:45:9d:b8:df:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
        Validity
            Not Before: Jun 30 02:07:54 2026 GMT
            Not After : Jul  1 05:50:54 2026 GMT
        Subject: CN=ECB2649DEAA42F41292336942BCD37B720FB5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:a5:0d:10:53:25:4b:78:01:30:99:69:e8:
                    e7:a5:e9:fd:fb:35:9a:89:d6:45:b0:c1:34:2c:03:
                    88:23:c9:28:18:88:d1:51:6e:6c:f6:6a:e4:b8:8e:
                    f0:32:94:59:8c:de:9e:7c:f9:f9:3f:66:29:31:4f:
                    b6:8c:f5:85:97:af:58:d1:06:c6:bd:51:35:f0:33:
                    a5:e0:55:fd:c7:e1:e7:67:73:9c:da:7f:6c:c3:a1:
                    fb:15:e7:08:59:ba:bc:a2:a4:b4:aa:61:d5:67:0b:
                    70:72:c3:5d:7e:46:17:e0:18:06:9d:04:28:05:37:
                    0a:ac:bb:24:ec:d2:80:55:e4:e5:fd:30:ce:7e:3f:
                    af:50:75:bb:b3:80:fa:56:e1:72:95:11:b1:98:44:
                    68:c8:a5:85:93:34:50:8d:2d:f9:ef:d8:2b:b7:b2:
                    91:26:d3:fc:9e:09:8f:2b:72:a6:5c:7e:75:a6:c8:
                    e0:52:79:4c:7f:a1:f2:49:1d:73:2f:dd:55:72:05:
                    c0:a1:89:d0:33:71:13:c0:98:7c:d1:b5:a1:11:5e:
                    fa:5e:d1:4f:91:36:91:d8:04:ec:dc:0f:15:35:c4:
                    7c:ea:0f:7f:e0:b9:21:5a:ef:9e:5a:33:e1:e5:bc:
                    c7:28:62:12:de:43:0e:00:85:1d:49:da:62:d4:e5:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B2:64:9D:EA:A4:2F:41:29:23:36:94:2B:CD:37:B7:20:FB:56:11
            X509v3 Authority Key Identifier:
                keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:68:9e:19:a8:e9:1f:c4:fd:60:a7:bb:cc:a5:89:d3:07:
         d4:d3:d2:46:93:8d:48:54:14:5f:78:a7:a0:1a:3b:29:59:a4:
         b9:02:e9:9c:54:a6:6a:9f:76:e8:7a:80:84:2a:ab:e0:67:07:
         b5:1d:de:ee:df:1e:36:c6:bd:c2:7b:b6:99:cd:9a:97:cf:58:
         4e:02:ed:26:68:d7:59:fa:bb:96:df:d5:98:c1:46:1b:d1:63:
         f1:c8:0f:04:bd:6a:d6:8a:97:24:78:8b:36:ed:3f:37:f2:3e:
         31:ee:46:2b:a4:6f:14:7a:a5:26:cf:48:33:82:b0:ad:4d:9f:
         e0:06:af:86:69:de:9c:af:99:75:52:cb:0e:de:9d:57:ba:4e:
         ba:70:f8:50:01:47:3c:4b:68:f9:7b:a5:ca:fc:39:e5:f2:1d:
         72:5e:69:90:e4:bf:ac:f8:8e:1c:e5:76:9c:7c:08:6f:d2:df:
         76:da:94:b0:f9:1f:1c:9b:e0:71:78:63:cf:bd:4f:63:28:d2:
         0a:de:18:a6:0b:7b:fa:40:ee:ce:1d:c1:9e:4a:c0:aa:ef:9d:
         05:ae:ff:cc:17:93:e7:71:88:be:d3:9a:99:bf:ec:e3:f4:4c:
         47:15:50:0e:8f:4a:55:ef:17:57:02:25:48:4c:43:1f:45:34:
         1a:b0:5f:b9
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIULLRWUeZRT9xWDxwDJW7bRZ2434EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1
QThCRTg0OTAeFw0yNjA2MzAwMjA3NTRaFw0yNjA3MDEwNTUwNTRaMDMxMTAvBgNV
BAMTKEVDQjI2NDlERUFBNDJGNDEyOTIzMzY5NDJCQ0QzN0I3MjBGQjU2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxDaUNEFMlS3gBMJlp6Oel6f37
NZqJ1kWwwTQsA4gjySgYiNFRbmz2auS4jvAylFmM3p58+fk/ZikxT7aM9YWXr1jR
Bsa9UTXwM6XgVf3H4ednc5zaf2zDofsV5whZuryipLSqYdVnC3Byw11+RhfgGAad
BCgFNwqsuyTs0oBV5OX9MM5+P69QdbuzgPpW4XKVEbGYRGjIpYWTNFCNLfnv2Cu3
spEm0/yeCY8rcqZcfnWmyOBSeUx/ofJJHXMv3VVyBcChidAzcRPAmHzRtaERXvpe
0U+RNpHYBOzcDxU1xHzqD3/guSFa755aM+HlvMcoYhLeQw4AhR1J2mLU5VjhAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQU7LJkneqkL0EpIzaUK803tyD7VhEwHwYDVR0j
BBgwFoAUhpcVBPQrewrxiD6N+luqVVqL6EkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAv
ODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1QThCRTg0OS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS84Njk3MTUwNEY0MkI3QjBBRjE4ODNFOERGQTVCQUE1
NTVBOEJFODQ5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAvODY5NzE1MDRGNDJCN0IwQUYx
ODgzRThERkE1QkFBNTU1QThCRTg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALTBaJ4ZqOkfxP1gp7vM
pYnTB9TT0kaTjUhUFF94p6AaOylZpLkC6ZxUpmqfduh6gIQqq+BnB7Ud3u7fHjbG
vcJ7tpnNmpfPWE4C7SZo11n6u5bf1ZjBRhvRY/HIDwS9ataKlyR4izbtPzfyPjHu
RiukbxR6pSbPSDOCsK1Nn+AGr4Zp3pyvmXVSyw7enVe6Trpw+FABRzxLaPl7pcr8
OeXyHXJeaZDkv6z4jhzldpx8CG/S33balLD5Hxyb4HF4Y8+9T2Mo0greGKYLe/pA
7s4dwZ5KwKrvnQWu/8wXk+dxiL7Tmpm/7OP0TEcVUA6PSlXvF1cCJUhMQx9FNBqw
X7k=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:50 2026 by rpki-client