Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
File:                     59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json)
Hash identifier:          WFugVfau2aU/0OKk49xhmBssVZaymO7w7SEgze2cRzc=
Subject key identifier:   E1:8D:6A:ED:0C:D1:B0:38:43:4F:39:48:51:01:53:42:9D:5C:E9:4D
Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
Certificate issuer:       /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Certificate serial:       4E6AD3558926BD28625DFDE67019E9824D187807
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 03:16:30 +0000
Manifest this update:     Wed 13 May 2026 03:11:30 +0000
Manifest next update:     Thu 14 May 2026 06:16:30 +0000
Files and hashes:         1: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: DUOXOW90EpDkD5PdTn2m0wVoz5Fbsg4SjO7zJzifdYM=)
                          2: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
                          rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:d3:55:89:26:bd:28:62:5d:fd:e6:70:19:e9:82:4d:18:78:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
        Validity
            Not Before: May 13 03:11:30 2026 GMT
            Not After : May 14 06:16:30 2026 GMT
        Subject: CN=E18D6AED0CD1B038434F3948510153429D5CE94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:bd:fc:43:2d:aa:1f:de:be:1b:9f:0c:0d:
                    af:e6:90:c3:39:59:b2:7f:c0:fa:09:23:fd:08:d5:
                    fa:d5:c3:56:54:35:8d:a7:bc:17:34:38:4a:a4:a0:
                    0d:62:6b:53:2f:0d:b0:3b:56:8c:a7:90:1d:71:33:
                    59:4e:21:de:6e:63:58:dc:48:8d:b9:e2:c5:aa:b3:
                    be:7f:46:6e:18:d3:71:30:e1:29:06:c2:d2:9b:19:
                    03:13:c1:32:00:c1:bc:0c:4b:55:b9:e2:cd:55:97:
                    01:a6:c8:2f:ad:71:8b:07:d7:45:fb:e5:8e:d6:53:
                    3d:45:d7:de:3f:36:6f:15:f9:c4:0a:ae:d1:35:d0:
                    1b:cd:c5:26:88:5a:87:0e:0e:5d:91:66:ea:c1:fb:
                    23:c2:74:51:36:9d:da:13:8a:e3:02:9e:a4:7a:00:
                    72:54:b1:22:f2:ba:28:94:20:35:8d:0d:20:f4:b3:
                    dc:b5:bd:f8:80:7b:25:06:fb:b0:c8:62:20:53:23:
                    f7:09:fb:fd:44:59:35:41:f3:af:fe:6f:09:7d:5f:
                    d9:1e:d8:b4:47:5e:46:f4:ea:91:ee:ba:64:90:89:
                    a2:5b:d5:c0:60:bd:87:6c:db:f5:9d:49:61:1f:57:
                    58:1e:7d:d8:36:44:2e:25:49:06:8d:be:b4:e9:45:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:6A:ED:0C:D1:B0:38:43:4F:39:48:51:01:53:42:9D:5C:E9:4D
            X509v3 Authority Key Identifier:
                keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:b2:1b:6e:25:cd:f2:d3:e5:cb:03:3f:db:d7:24:7b:4a:
         77:e2:83:16:d0:18:c7:b5:66:92:f5:0f:bc:11:41:c3:41:8e:
         25:8d:54:06:6e:aa:47:d6:95:b0:9d:39:ab:96:c8:05:20:45:
         d0:e2:8b:ea:f6:a4:d7:5b:0b:ec:d0:a3:4a:85:43:65:0e:81:
         a2:3d:7e:27:1e:70:1f:1d:2f:de:d4:08:74:63:5a:fa:04:93:
         b6:4e:7a:2c:66:64:cb:73:5b:01:6d:e8:3a:9d:b1:c7:6d:a3:
         b8:38:31:92:a2:4c:64:fe:35:63:f4:2f:82:99:3f:8d:da:d9:
         9b:18:8a:55:c3:8a:fa:5e:c5:56:a5:b1:8e:fb:be:75:a4:9a:
         26:eb:18:53:31:ec:bb:7d:d2:f0:4f:ad:ab:f9:3a:c9:26:54:
         16:b2:d2:a7:8b:7a:c5:d1:be:3f:c7:1d:9d:cf:c7:35:dc:4c:
         c5:bb:c8:52:fb:f2:d2:71:d9:96:5a:a5:d5:08:83:d6:a5:75:
         a6:4b:b0:ab:b0:96:ea:75:f6:d1:e1:37:a2:28:18:f2:ad:3c:
         b3:0d:66:39:e2:18:75:1a:f3:7a:25:11:e5:1e:ef:5a:29:96:
         5e:6b:e0:98:6e:20:b8:c8:e1:cc:ce:20:6b:df:77:5b:1e:75:
         c8:f8:51:48
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUTmrTVYkmvShiXf3mcBnpgk0YeAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlEQTY4QjYyMzkzMjREQ0Q2RkQwQzhGRTk5NDlFMkY3
REUxRkZEODAeFw0yNjA1MTMwMzExMzBaFw0yNjA1MTQwNjE2MzBaMDMxMTAvBgNV
BAMTKEUxOEQ2QUVEMENEMUIwMzg0MzRGMzk0ODUxMDE1MzQyOUQ1Q0U5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqb38Qy2qH96+G58MDa/mkMM5
WbJ/wPoJI/0I1frVw1ZUNY2nvBc0OEqkoA1ia1MvDbA7VoynkB1xM1lOId5uY1jc
SI254sWqs75/Rm4Y03Ew4SkGwtKbGQMTwTIAwbwMS1W54s1VlwGmyC+tcYsH10X7
5Y7WUz1F194/Nm8V+cQKrtE10BvNxSaIWocODl2RZurB+yPCdFE2ndoTiuMCnqR6
AHJUsSLyuiiUIDWNDSD0s9y1vfiAeyUG+7DIYiBTI/cJ+/1EWTVB86/+bwl9X9ke
2LRHXkb06pHuumSQiaJb1cBgvYds2/WdSWEfV1gefdg2RC4lSQaNvrTpRRKTAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU4Y1q7QzRsDhDTzlIUQFTQp1c6U0wHwYDVR0j
BBgwFoAUWdpotiOTJNzW/QyP6ZSeL33h/9gwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lOT1BB
Qy8wLzU5REE2OEI2MjM5MzI0RENENkZEMEM4RkU5OTQ5RTJGN0RFMUZGRDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNTlEQTY4QjYyMzkzMjREQ0Q2RkQwQzhGRTk5
NDlFMkY3REUxRkZEOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NJTk9QQUMvMC81OURBNjhCNjIz
OTMyNERDRDZGRDBDOEZFOTk0OUUyRjdERTFGRkQ4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA32yG24l
zfLT5csDP9vXJHtKd+KDFtAYx7VmkvUPvBFBw0GOJY1UBm6qR9aVsJ05q5bIBSBF
0OKL6vak11sL7NCjSoVDZQ6Boj1+Jx5wHx0v3tQIdGNa+gSTtk56LGZky3NbAW3o
Op2xx22juDgxkqJMZP41Y/Qvgpk/jdrZmxiKVcOK+l7FVqWxjvu+daSaJusYUzHs
u33S8E+tq/k6ySZUFrLSp4t6xdG+P8cdnc/HNdxMxbvIUvvy0nHZllql1QiD1qV1
pkuwq7CW6nX20eE3oigY8q08sw1mOeIYdRrzeiUR5R7vWimWXmvgmG4guMjhzM4g
a993Wx51yPhRSA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:32 2026 by rpki-client