Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File:                     164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier:          SCT1I7aUS4Q0QhPzgJaVmm5zTRf++s6HpQDefs/t2OE=
Subject key identifier:   1C:37:BD:E7:BD:E1:DB:C1:0E:62:29:EF:40:11:F9:16:72:47:D3:B1
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer:       /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial:       4A5A3162217CCDAE5456BEE4417591479F594C65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 07:22:36 +0000
Manifest this update:     Wed 13 May 2026 07:17:36 +0000
Manifest next update:     Thu 14 May 2026 08:39:36 +0000
Files and hashes:         1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: jwokLvHMlZnvjgSI5De+Bv6Cuo2rmCp9Wndi/PHih7Y=)
                          2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
                          rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:31:62:21:7c:cd:ae:54:56:be:e4:41:75:91:47:9f:59:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
        Validity
            Not Before: May 13 07:17:36 2026 GMT
            Not After : May 14 08:39:36 2026 GMT
        Subject: CN=1C37BDE7BDE1DBC10E6229EF4011F9167247D3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:bb:42:82:00:44:fe:7b:96:0c:44:bd:02:
                    7a:bf:2a:e2:f5:4c:bc:1f:11:af:b8:f6:b3:2a:00:
                    76:a1:5f:3f:e1:47:35:0e:15:e8:aa:66:d0:b0:22:
                    9e:d4:54:49:c2:0d:36:4e:c5:85:97:0b:1c:f3:99:
                    0a:58:82:80:a3:c8:70:bc:a9:47:59:16:a9:c4:0d:
                    6e:c5:9f:4a:0c:3e:cb:0b:4c:09:43:1d:2e:95:e2:
                    30:ab:d5:68:80:e7:39:96:cd:14:03:f2:f7:5d:b4:
                    a8:e5:6b:1e:91:d6:1c:29:b6:a5:42:7e:cd:d8:c1:
                    5f:da:8a:f9:7d:ab:09:38:be:b9:5f:c1:ba:0c:1a:
                    43:64:89:e7:69:6c:08:ef:48:c2:ed:1a:83:5d:8c:
                    c7:c8:00:1b:a2:9b:b4:66:1c:89:b6:e5:07:74:96:
                    3e:74:88:83:7c:44:8a:9a:b1:4d:f9:c6:12:76:d6:
                    e1:15:32:76:8e:28:12:8b:90:a0:ff:fa:fd:28:0f:
                    0d:23:6c:6e:5a:c7:fb:39:89:1f:a6:85:3a:53:9a:
                    51:81:7a:29:9c:15:eb:61:69:fa:d0:28:8d:2c:ee:
                    70:93:f7:72:cb:fa:e7:72:4d:e4:6e:8f:27:6f:30:
                    fb:66:e2:42:39:b2:50:ed:99:2b:28:a6:29:1b:db:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:BD:E7:BD:E1:DB:C1:0E:62:29:EF:40:11:F9:16:72:47:D3:B1
            X509v3 Authority Key Identifier:
                keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:12:3e:2b:85:a4:09:b2:4f:e8:6b:af:99:87:3d:ba:71:b3:
         b3:e9:b6:fd:44:28:13:89:b1:5d:77:9d:92:e7:6c:b9:68:1d:
         d6:d4:cb:bd:d4:30:58:96:cd:53:dc:f9:0b:66:04:39:2e:78:
         e5:99:aa:07:a1:e1:76:51:fb:35:1e:7c:02:2f:63:16:ea:67:
         40:41:01:b4:0d:ee:e2:2e:cc:e7:6e:07:6a:0d:d7:be:ec:1b:
         5d:3b:b0:55:48:9f:1b:52:71:b0:67:aa:d3:88:ec:e6:2f:f6:
         be:79:c3:4d:5b:51:0c:c0:f2:9a:33:d7:2b:f7:f4:74:e7:8f:
         23:0a:ec:49:91:05:89:08:86:a8:9d:8e:7d:56:a9:29:f1:dc:
         04:d1:bd:f4:f7:c2:a6:1d:eb:59:7c:50:94:f0:9e:48:86:33:
         53:12:30:0e:1e:0e:a9:36:0b:20:20:73:34:6d:16:40:05:7f:
         1e:6d:cd:d2:61:1d:5c:22:e1:90:53:a6:55:99:35:6a:78:13:
         c5:44:d6:97:f9:d2:34:5d:a7:4e:68:46:1b:cd:58:29:44:35:
         28:74:38:8a:30:67:15:a6:b8:ae:06:a2:24:e7:0c:33:84:91:
         6f:2c:fb:10:d8:bd:f4:2e:d5:ea:95:b5:6f:66:71:29:79:82:
         95:b4:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:04 2026 by rpki-client