Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
File:                     5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json)
Hash identifier:          XGo4vYc2lsylE1tVsrxE/31WTVQqQObWiRkB+I75spc=
Subject key identifier:   75:56:EA:81:79:BB:B0:5D:0B:21:00:EE:5D:A9:25:63:59:56:A9:42
Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
Certificate issuer:       /CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Certificate serial:       7EBE57D95EB3015FD861B3FBF21C586CF18A27EB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
Manifest number:          84
Signing time:             Fri 14 Aug 2026 21:38:32 +0000
Manifest this update:     Fri 14 Aug 2026 21:33:32 +0000
Manifest next update:     Sat 15 Aug 2026 23:04:32 +0000
Files and hashes:         1: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=)
                          2: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=)
                          3: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: bVjXVOU65pO4gd4oaC00jLekU3VG9r9Y42iuJy2c/WA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:57:d9:5e:b3:01:5f:d8:61:b3:fb:f2:1c:58:6c:f1:8a:27:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB
        Validity
            Not Before: Aug 14 21:33:32 2026 GMT
            Not After : Aug 15 23:04:32 2026 GMT
        Subject: CN=7556EA8179BBB05D0B2100EE5DA925635956A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:08:74:15:22:cc:1d:94:d3:97:e1:7c:2d:
                    b4:0f:5a:1b:11:59:ae:c3:35:0c:be:20:46:ed:fd:
                    bc:a9:8b:c5:79:e4:9a:37:f2:b2:07:9e:e8:6c:ab:
                    23:74:70:8a:95:92:8c:55:25:56:70:73:4e:48:37:
                    67:c6:fe:66:59:84:96:5c:9f:8f:9e:a2:9b:68:ba:
                    0d:fb:a6:09:12:59:b7:3a:d3:c7:21:15:f9:3d:8e:
                    07:bd:2f:52:90:ce:5f:42:80:92:82:a5:83:ee:36:
                    45:9c:0b:81:df:16:64:de:40:a2:1d:13:dc:3e:f5:
                    c1:7a:0d:e6:e9:d8:99:32:e6:20:7b:c1:5b:c0:c6:
                    0e:a9:1a:d3:3e:01:bd:74:ac:ad:5c:e6:21:a0:5f:
                    c8:91:bb:76:9f:26:43:c0:12:81:c4:3a:46:f9:71:
                    d1:be:26:70:0e:37:88:56:ed:8b:17:60:dc:35:bc:
                    63:ec:8b:10:69:75:40:d2:34:42:04:67:31:12:af:
                    c4:12:92:fc:28:1b:d1:11:b7:3a:6b:9d:a3:4d:e8:
                    7c:95:93:20:48:7c:09:39:35:33:e4:a9:66:fb:b5:
                    ad:af:a6:e8:df:4b:e3:13:d5:bb:b2:30:b2:3f:f7:
                    8d:81:d8:b2:2e:41:12:46:b3:84:28:85:75:2e:55:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:56:EA:81:79:BB:B0:5D:0B:21:00:EE:5D:A9:25:63:59:56:A9:42
            X509v3 Authority Key Identifier:
                keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:aa:2f:d7:c9:15:45:f7:93:14:bb:32:4d:e3:b7:83:20:
         e1:35:4a:d2:9b:39:63:53:28:43:38:f4:b8:0d:2c:b4:9e:33:
         3a:16:20:cd:f9:32:cf:16:73:a5:a1:69:06:ab:28:1f:c0:b2:
         24:99:58:b7:57:3a:e3:ff:b5:f5:c5:ff:94:d3:28:16:16:15:
         e6:74:95:ca:6d:41:e6:5c:df:3a:63:6a:96:5d:65:c9:c5:d1:
         1a:24:f4:57:90:aa:df:43:23:3f:de:c7:33:3b:3d:c0:65:70:
         62:b2:1a:b8:39:12:5c:c1:87:39:57:01:e4:c6:e6:bd:09:08:
         5c:a5:97:82:3f:f9:0a:70:12:0c:8a:f0:18:6f:4c:eb:9a:69:
         3b:1d:43:7c:25:42:b7:a3:4e:d6:75:2a:f8:f4:b4:5e:2c:4c:
         57:4e:c4:b6:d4:0d:f8:23:05:f3:ba:9a:da:1c:ab:c1:e9:e3:
         1c:e5:5e:fe:11:fb:56:29:a4:26:91:17:58:b9:a1:1f:d3:a4:
         fd:09:56:d8:26:c7:72:f5:c4:00:0e:8e:87:95:83:67:6f:9c:
         b5:36:3a:4a:76:f5:32:d3:ad:a2:bd:c4:85:36:2c:97:95:2b:
         64:6a:2a:ff:90:02:de:5f:f8:47:01:2a:73:7a:b3:f2:88:8e:
         d8:47:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:08 2026 by rpki-client