Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
File:                     FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft (raw, json)
Hash identifier:          v4iOjR06djcAKmJck2VClj4ccKapymMzUuiJD3OZqFs=
Subject key identifier:   73:FB:B9:94:AB:CA:A0:A0:50:2B:B8:6C:CC:74:C1:AE:00:15:17:9F
Authority key identifier: FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
Certificate issuer:       /CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Certificate serial:       417A9522E93CC1412EE02BEB2400A88C447ACACF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 10:53:41 +0000
Manifest this update:     Tue 30 Jun 2026 10:48:41 +0000
Manifest next update:     Wed 01 Jul 2026 14:28:41 +0000
Files and hashes:         1: 3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa (hash: 2l7F3xR6CEzktzgJrO3SJv5piK3jtEcJIxeyuIWLklM=)
                          2: 3136312e3234382e3136302e302f32342d3234203d3e203633383937.roa (hash: jKx2LGW2OnV91lTfg/6Tk6smI31nkyG3PHeGMr/XEew=)
                          3: FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl (hash: slF2JVD8S6fFeVK/SzWxD/lXbOxfnXjLbTWhtSvDcRw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl
                          rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 19:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7a:95:22:e9:3c:c1:41:2e:e0:2b:eb:24:00:a8:8c:44:7a:ca:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
        Validity
            Not Before: Jun 30 10:48:41 2026 GMT
            Not After : Jul  1 14:28:41 2026 GMT
        Subject: CN=73FBB994ABCAA0A0502BB86CCC74C1AE0015179F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:aa:74:d9:65:b5:7f:2d:d3:e9:f2:98:54:
                    55:ca:6c:e4:76:f3:da:9e:f6:4c:c7:57:0c:0e:79:
                    36:29:f0:a2:f6:d0:d2:9f:5e:46:31:cc:7e:22:d4:
                    42:14:7f:72:8d:78:8d:57:e3:4e:f4:34:35:85:22:
                    bf:2c:ad:7c:37:40:04:5e:7d:a1:d6:a0:45:9c:64:
                    2c:80:ef:05:c0:99:1e:71:d5:54:aa:ea:b4:f7:b7:
                    b9:b4:e7:f1:71:49:2b:34:e9:fa:bb:3d:89:26:df:
                    07:e1:86:2f:dc:1c:5c:28:93:45:85:43:b4:e5:2b:
                    8a:b7:9a:33:56:38:ea:5a:f4:82:29:ad:a7:78:4a:
                    3c:61:81:70:3a:0e:4e:e0:2e:c1:52:76:0a:e5:0c:
                    5d:8a:2a:be:78:25:7f:d0:9a:6a:39:72:5b:5d:8a:
                    db:d4:40:02:c9:dc:92:d1:11:ea:6b:3d:ac:21:c6:
                    50:8b:79:ea:35:51:e9:41:37:47:f5:12:12:ab:47:
                    16:6b:01:26:f7:82:a2:79:62:28:8d:d1:88:7e:ce:
                    91:f5:fe:ed:28:16:92:ab:a8:d1:9c:68:b0:ee:cb:
                    a1:fa:a3:f0:4f:38:59:75:0a:f0:ff:ff:54:8b:5f:
                    68:58:cd:18:02:63:dd:bf:0c:b2:6e:83:8a:59:bb:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:B9:94:AB:CA:A0:A0:50:2B:B8:6C:CC:74:C1:AE:00:15:17:9F
            X509v3 Authority Key Identifier:
                keyid:FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:0e:da:60:fa:6e:bb:a1:ee:b5:27:61:85:93:9d:c7:94:
         e0:fc:12:de:d8:e8:a7:6b:ce:d4:9a:19:1f:d0:e2:97:3e:6c:
         43:23:b2:84:f0:e5:dc:01:a5:7e:69:d6:16:80:70:e3:45:15:
         0d:be:8f:c7:e4:59:53:4b:82:8d:a9:85:8d:84:9f:7a:17:d8:
         c9:08:d9:c4:bf:29:f2:9f:e4:46:fd:16:61:05:2e:f9:70:ea:
         dd:1f:6a:72:21:a4:f4:f8:3f:a7:e3:40:97:95:8c:1d:aa:9b:
         f4:a7:19:10:d5:55:3f:e6:8e:9d:46:32:5c:94:ac:58:52:fa:
         9f:7b:70:6a:90:fb:4c:ce:b7:d0:17:a1:45:93:c7:06:8c:20:
         5a:ef:3e:d6:76:03:b5:4a:8c:c7:15:ee:03:6c:b0:fd:f0:9a:
         0b:8e:a8:06:e6:82:8b:60:48:c4:b8:90:06:fa:d5:47:39:5e:
         a1:15:12:81:e6:eb:6c:cc:9a:18:b6:61:dd:34:fa:c1:82:30:
         52:2a:9f:02:17:d6:92:cf:9f:e7:af:c3:3b:09:37:ec:2a:e5:
         49:fa:3e:3b:4f:66:f1:d5:e6:13:92:9a:df:fa:3c:88:1d:7d:
         3e:97:63:d5:84:f3:c1:84:fc:55:5a:53:4f:dc:60:3c:3c:84:
         f0:b0:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:09:12 2026 by rpki-client