Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File:                     164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier:          xUo3q5942LwMLWMPchlXjmJ5H9Pk6KRZRtBQGEkwCeY=
Subject key identifier:   02:3E:9E:A8:B0:D4:F6:A0:C5:3B:6A:DA:23:EC:CC:AC:57:BC:9A:94
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer:       /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial:       630DF6A58EA6574496F5A0C71FB94F0F74B1CA73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number:          81
Signing time:             Sat 15 Aug 2026 00:03:51 +0000
Manifest this update:     Fri 14 Aug 2026 23:58:51 +0000
Manifest next update:     Sun 16 Aug 2026 03:05:51 +0000
Files and hashes:         1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: r9T7Yf/GL5ZtZVdtUgocIfopz6YH1ezGSKNRKkuUxSE=)
                          2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
                          rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0d:f6:a5:8e:a6:57:44:96:f5:a0:c7:1f:b9:4f:0f:74:b1:ca:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
        Validity
            Not Before: Aug 14 23:58:51 2026 GMT
            Not After : Aug 16 03:05:51 2026 GMT
        Subject: CN=023E9EA8B0D4F6A0C53B6ADA23ECCCAC57BC9A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:51:33:68:8f:0f:fe:e0:e0:5b:8d:29:af:
                    b4:c2:3f:79:90:f7:4b:47:b0:d2:7a:49:bf:91:0b:
                    c1:32:96:67:14:7b:8d:18:d1:7b:86:cf:ad:3d:52:
                    cd:09:97:c8:e7:55:70:90:e1:d9:0e:7b:87:33:c8:
                    14:93:b0:a8:b2:8c:9d:dc:59:e4:fc:6d:bb:fc:c2:
                    a0:19:cf:6d:24:ef:a4:f5:60:f6:7c:7a:c9:b1:10:
                    8b:b7:3f:f5:f3:9b:d2:5b:a7:dc:b1:42:2b:59:99:
                    b1:ae:45:3f:c3:d8:bf:72:be:33:83:85:d1:ea:5d:
                    6c:91:fe:c1:78:32:99:de:94:f4:b2:13:a1:b7:13:
                    0c:91:47:d7:39:27:75:54:b7:58:b6:59:0b:40:06:
                    11:ac:8c:ae:d1:a0:40:86:cf:c8:34:c6:23:6a:7a:
                    d6:7a:30:b4:a7:67:39:3b:92:ec:cb:6d:6e:b1:ea:
                    21:06:bc:4e:ae:c9:b1:29:01:af:ca:0c:70:2c:ee:
                    99:c4:2f:c9:7c:5c:71:ae:3f:d8:c7:25:d2:ba:ee:
                    14:da:9d:25:53:a4:5f:36:46:b4:8a:84:c9:d2:26:
                    f0:88:72:34:09:41:f9:88:3d:0c:98:84:4e:85:3f:
                    6e:63:46:2a:36:82:62:ca:a2:3d:0f:c3:5b:97:85:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3E:9E:A8:B0:D4:F6:A0:C5:3B:6A:DA:23:EC:CC:AC:57:BC:9A:94
            X509v3 Authority Key Identifier:
                keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:50:f0:7a:ff:3a:36:f9:f7:9f:66:a8:57:0e:5b:90:e6:36:
         2a:d3:c5:90:19:6a:7c:e7:f7:22:06:48:be:11:e5:a1:9d:4d:
         aa:c8:7e:16:94:aa:d7:a1:94:dd:92:b8:d9:da:85:4d:a2:dc:
         43:3c:56:a3:18:1b:5f:40:a6:ae:83:50:43:eb:ea:0b:36:86:
         c6:8f:03:a3:90:eb:d9:14:96:68:ae:00:08:04:c4:b8:b4:5c:
         da:0a:fd:d5:64:f5:42:cb:eb:5d:45:e5:12:90:17:24:1e:0c:
         43:de:e5:bb:16:dd:f4:3c:27:8f:a8:d9:23:a6:18:dc:5f:79:
         2b:85:20:1d:7e:f5:ae:97:11:a5:ea:5f:8e:ff:9b:20:90:76:
         aa:41:92:c8:e7:5f:9e:31:96:a0:69:48:12:79:43:b1:cb:93:
         10:69:83:eb:5e:85:a2:37:a9:11:62:b8:c4:50:ea:3c:7e:bb:
         8a:7f:bd:39:ed:18:4c:81:1d:17:28:79:c3:d8:93:db:3b:2f:
         e7:b5:57:cf:8d:b0:40:d6:16:2b:1c:e4:ac:3d:66:da:39:cd:
         ef:d0:a5:1b:a5:17:f5:a6:4a:e2:5d:fd:8b:fd:3e:6e:b9:4e:
         12:ff:04:bb:d8:a1:6c:ad:4b:46:dc:03:53:55:9d:f2:5f:b5:
         12:f3:3a:e5
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUYw32pY6mV0SW9aDHH7lPD3SxynMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQz
NzIzOTM2MzAeFw0yNjA4MTQyMzU4NTFaFw0yNjA4MTYwMzA1NTFaMDMxMTAvBgNV
BAMTKDAyM0U5RUE4QjBENEY2QTBDNTNCNkFEQTIzRUNDQ0FDNTdCQzlBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKlEzaI8P/uDgW40pr7TCP3mQ
90tHsNJ6Sb+RC8EylmcUe40Y0XuGz609Us0Jl8jnVXCQ4dkOe4czyBSTsKiyjJ3c
WeT8bbv8wqAZz20k76T1YPZ8esmxEIu3P/Xzm9Jbp9yxQitZmbGuRT/D2L9yvjOD
hdHqXWyR/sF4MpnelPSyE6G3EwyRR9c5J3VUt1i2WQtABhGsjK7RoECGz8g0xiNq
etZ6MLSnZzk7kuzLbW6x6iEGvE6uybEpAa/KDHAs7pnEL8l8XHGuP9jHJdK67hTa
nSVTpF82RrSKhMnSJvCIcjQJQfmIPQyYhE6FP25jRio2gmLKoj0Pw1uXhXL7AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUAj6eqLDU9qDFO2raI+zMrFe8mpQwHwYDVR0j
BBgwFoAUFk63ENeqg8tn7i5wm08ZVDcjk2MwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VS
LzAvMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNjRFQjcxMEQ3QUE4M0NCNjdFRTJFNzA5QjRG
MTk1NDM3MjM5MzYzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VSLzAvMTY0RUI3MTBEN0FB
ODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADJQ8Hr/Ojb5
959mqFcOW5DmNirTxZAZanzn9yIGSL4R5aGdTarIfhaUqtehlN2SuNnahU2i3EM8
VqMYG19Apq6DUEPr6gs2hsaPA6OQ69kUlmiuAAgExLi0XNoK/dVk9ULL611F5RKQ
FyQeDEPe5bsW3fQ8J4+o2SOmGNxfeSuFIB1+9a6XEaXqX47/myCQdqpBksjnX54x
lqBpSBJ5Q7HLkxBpg+tehaI3qRFiuMRQ6jx+u4p/vTntGEyBHRcoecPYk9s7L+e1
V8+NsEDWFisc5Kw9Zto5ze/QpRulF/WmSuJd/Yv9Pm65ThL/BLvYoWytS0bcA1NV
nfJftRLzOuU=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:41 2026 by rpki-client