Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          Ao9Rd7pK6GZFPbYfVAq4TFEwEugYUj4H9wz8r9Ugbbk=
Subject key identifier:   01:D5:1B:20:C4:36:02:E7:77:45:F8:1A:42:43:6D:39:FA:03:38:89
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       7D03E8623542993620AB4296867DDBE875B2E264
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 06:02:13 +0000
Manifest this update:     Wed 13 May 2026 05:57:13 +0000
Manifest next update:     Thu 14 May 2026 09:07:13 +0000
Files and hashes:         1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: CsvelGGhMH2JbysSLT8x5nhgz0Q1tOx8Bq1nyKSSYEs=)
                          2: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
                          3: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:03:e8:62:35:42:99:36:20:ab:42:96:86:7d:db:e8:75:b2:e2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: May 13 05:57:13 2026 GMT
            Not After : May 14 09:07:13 2026 GMT
        Subject: CN=01D51B20C43602E77745F81A42436D39FA033889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:d5:0d:3c:1f:98:01:0b:15:be:f5:06:c3:
                    9c:f0:b7:f9:49:5a:36:83:33:d4:67:8a:77:55:2f:
                    b7:bd:08:00:e4:d8:a6:b1:9e:77:51:2b:ca:88:68:
                    f8:85:e4:49:12:7f:19:c9:d6:9d:7d:24:57:4d:fe:
                    6b:db:89:24:7e:79:04:0e:a9:73:2b:fe:c6:95:25:
                    73:b8:d4:30:3d:9a:24:fe:b3:3a:6c:a3:a7:4d:1b:
                    e8:f9:81:5b:bb:10:0c:c1:48:8c:cf:53:0f:ed:f2:
                    a3:5c:85:8a:ca:e1:c8:f6:43:a0:11:bf:43:d6:b6:
                    15:7d:ed:0d:10:b9:b1:fc:ef:3d:83:52:89:b5:f8:
                    91:34:5d:85:09:1d:a3:d0:75:7b:18:51:d2:dc:df:
                    21:df:d9:88:e9:20:18:60:f4:b2:9b:e3:75:14:bf:
                    5c:4c:07:e0:aa:23:e3:7f:eb:66:89:f3:1a:c9:fe:
                    12:8e:fc:5f:0f:10:bb:fc:3c:bd:cf:5d:6e:66:cb:
                    c2:5f:1b:eb:0c:0c:ab:86:44:5d:bd:d7:21:b9:58:
                    5e:da:c0:c7:c8:70:c0:f2:ee:c5:1d:21:3a:6f:d4:
                    09:0a:98:9b:90:a7:c9:ce:7c:b0:38:b3:a6:31:16:
                    5b:df:35:7b:4e:2a:cb:07:32:7e:12:6d:90:55:50:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:1B:20:C4:36:02:E7:77:45:F8:1A:42:43:6D:39:FA:03:38:89
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:4b:08:bf:19:53:f1:74:54:66:f9:f4:9e:91:b1:6d:07:
         6c:9f:94:a8:6c:c8:18:34:c4:fc:16:38:ca:67:dc:76:05:51:
         89:45:dd:0e:06:3f:35:22:76:62:f9:de:8f:c1:d4:9e:2b:e9:
         52:14:d5:9d:ff:83:cd:07:9b:39:75:bd:8e:87:06:e7:15:97:
         c4:bd:30:4e:d1:09:47:57:f0:e4:49:f3:62:1d:3e:c7:8d:b1:
         93:04:0b:08:ba:d0:17:f1:b6:84:66:bd:09:f0:88:d2:fd:a7:
         a2:95:20:ad:93:ca:2b:51:3a:8a:59:4b:a5:b2:d8:3e:db:bc:
         41:12:b8:0d:88:3f:f5:d5:c8:0f:14:61:3b:92:e8:48:8b:c6:
         62:03:ef:8b:d0:eb:2c:a5:c0:62:e8:c7:ad:36:3a:89:6f:46:
         eb:ee:c0:2c:05:b6:a1:34:04:a8:09:2f:14:5b:65:a8:b4:7f:
         c0:b0:20:11:fc:56:37:14:3d:c5:ea:12:00:af:63:a5:51:24:
         e5:a2:fd:83:d8:bf:d3:30:4b:c8:36:91:d7:a4:af:ef:61:1d:
         c2:4b:97:c9:77:63:1a:4e:55:4a:b7:9a:41:64:68:70:ca:05:
         eb:21:f6:fe:79:b3:03:2d:14:d3:39:46:08:87:c5:0c:36:c1:
         c2:ae:bb:59
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUfQPoYjVCmTYgq0KWhn3b6HWy4mQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4NzhEQTYw
Mjc1RDRGRTAeFw0yNjA1MTMwNTU3MTNaFw0yNjA1MTQwOTA3MTNaMDMxMTAvBgNV
BAMTKDAxRDUxQjIwQzQzNjAyRTc3NzQ1RjgxQTQyNDM2RDM5RkEwMzM4ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBtUNPB+YAQsVvvUGw5zwt/lJ
WjaDM9RnindVL7e9CADk2KaxnndRK8qIaPiF5EkSfxnJ1p19JFdN/mvbiSR+eQQO
qXMr/saVJXO41DA9miT+szpso6dNG+j5gVu7EAzBSIzPUw/t8qNchYrK4cj2Q6AR
v0PWthV97Q0QubH87z2DUom1+JE0XYUJHaPQdXsYUdLc3yHf2YjpIBhg9LKb43UU
v1xMB+CqI+N/62aJ8xrJ/hKO/F8PELv8PL3PXW5my8JfG+sMDKuGRF291yG5WF7a
wMfIcMDy7sUdITpv1AkKmJuQp8nOfLA4s6YxFlvfNXtOKssHMn4SbZBVUKsvAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUAdUbIMQ2Aud3RfgaQkNtOfoDOIkwHwYDVR0j
BBgwFoAUCKA8+cHTr5PP2wosHYeNpgJ11P4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD
SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4
NzhEQTYwMjc1RDRGRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8wOEEwM0NGOUMx
RDNBRjkzQ0ZEQjBBMkMxRDg3OERBNjAyNzVENEZFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp5LCL8Z
U/F0VGb59J6RsW0HbJ+UqGzIGDTE/BY4ymfcdgVRiUXdDgY/NSJ2Yvnej8HUnivp
UhTVnf+DzQebOXW9jocG5xWXxL0wTtEJR1fw5EnzYh0+x42xkwQLCLrQF/G2hGa9
CfCI0v2nopUgrZPKK1E6illLpbLYPtu8QRK4DYg/9dXIDxRhO5LoSIvGYgPvi9Dr
LKXAYujHrTY6iW9G6+7ALAW2oTQEqAkvFFtlqLR/wLAgEfxWNxQ9xeoSAK9jpVEk
5aL9g9i/0zBLyDaR16Sv72EdwkuXyXdjGk5VSreaQWRocMoF6yH2/nmzAy0U0zlG
CIfFDDbBwq67WQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:30 2026 by rpki-client