Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
File:                     FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft (raw, json)
Hash identifier:          TX0tO+5NtXiT5B3Ny8HGKhImwIvmcWaIJy9OMq3z9wQ=
Subject key identifier:   E9:72:C0:D3:E8:B7:A3:B2:74:29:F1:9A:E4:99:76:AB:12:C5:9F:FA
Authority key identifier: FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
Certificate issuer:       /CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Certificate serial:       648A94B1420A7794B66E6CAFC3B3AB2DCFA1C2BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
Manifest number:          08
Signing time:             Fri 15 May 2026 14:32:30 +0000
Manifest this update:     Fri 15 May 2026 14:27:30 +0000
Manifest next update:     Sat 16 May 2026 17:14:30 +0000
Files and hashes:         1: FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl (hash: NvuaqXGr9D7sjSHQwyYaMB0AnM4rL8rJtvQ+zheXKvw=)
                          2: 3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa (hash: 2l7F3xR6CEzktzgJrO3SJv5piK3jtEcJIxeyuIWLklM=)
                          3: 3136312e3234382e3136302e302f32342d3234203d3e203633383937.roa (hash: jKx2LGW2OnV91lTfg/6Tk6smI31nkyG3PHeGMr/XEew=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl
                          rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 17:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8a:94:b1:42:0a:77:94:b6:6e:6c:af:c3:b3:ab:2d:cf:a1:c2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
        Validity
            Not Before: May 15 14:27:30 2026 GMT
            Not After : May 16 17:14:30 2026 GMT
        Subject: CN=E972C0D3E8B7A3B27429F19AE49976AB12C59FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:6f:f0:30:cd:5b:ff:6b:ca:9e:cd:2e:e5:
                    b9:04:39:77:8f:fe:12:fc:dc:49:38:8c:1e:1c:bc:
                    cd:3d:fe:c1:16:eb:ee:0b:90:5d:cf:d3:00:49:31:
                    4c:21:39:31:fb:14:cb:b4:79:4d:c9:53:8c:42:c2:
                    94:f6:ad:bb:5b:71:fb:d0:2e:4f:77:ea:43:80:6c:
                    ee:b7:30:7c:e3:f9:83:97:cc:36:a6:d2:8b:e3:80:
                    dc:44:60:e0:e8:0d:89:c8:f0:50:55:81:bc:9c:4f:
                    05:43:e5:43:01:4a:b8:19:b1:97:8f:c3:74:5f:a4:
                    72:76:51:d5:5a:cb:2c:a6:cd:ad:81:70:a0:e1:64:
                    10:e0:e8:79:6b:57:4b:b0:eb:cf:11:29:f3:07:23:
                    24:1f:a4:31:d9:c3:c7:9e:78:5a:fa:80:a7:be:cf:
                    49:57:b9:8b:6c:85:54:2b:12:2b:cb:17:ed:bd:56:
                    07:10:2f:7f:89:bf:34:58:34:ee:dd:83:c8:b8:a3:
                    15:1d:2d:48:77:5d:f0:ab:52:31:e9:92:72:9b:59:
                    b4:13:f9:72:e8:2d:ed:7c:e4:db:75:04:23:02:e4:
                    65:5a:7b:8a:d7:d4:c4:c1:4c:9c:91:83:e8:34:65:
                    ce:95:0b:65:8d:7c:da:a8:f1:65:0f:d4:b2:8c:c6:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:C0:D3:E8:B7:A3:B2:74:29:F1:9A:E4:99:76:AB:12:C5:9F:FA
            X509v3 Authority Key Identifier:
                keyid:FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:4d:a2:f2:18:26:aa:c9:c2:f0:e8:63:bf:64:9d:71:ef:4f:
         da:f3:53:04:b4:2b:03:0c:bd:9f:f2:5c:f4:fc:f8:ca:a2:21:
         57:a3:93:09:dd:e7:e0:5c:b3:3f:97:cb:4b:4f:35:43:53:dc:
         66:eb:e6:02:1b:0d:4c:40:eb:a2:85:40:35:6f:c4:18:7b:18:
         fa:47:2a:b2:46:a3:3d:40:9a:b6:74:a1:3e:02:1e:ca:7d:91:
         1d:22:ae:ef:8d:1f:bd:8e:f6:5c:02:97:48:50:9b:41:d8:05:
         4d:ea:19:61:bc:f5:ce:3e:f1:a1:69:39:e9:21:68:25:d3:3d:
         0a:48:62:9c:05:c6:91:b2:fb:a2:63:09:17:a7:76:df:a9:79:
         0c:01:91:11:45:4b:2c:df:a0:9f:6a:81:89:d1:1b:df:17:a4:
         d2:15:75:78:32:f1:28:81:c1:2f:b4:42:13:83:f4:e0:f3:4f:
         67:47:20:67:f4:8a:c7:19:19:44:c5:9b:d2:6d:6d:d6:12:46:
         fb:87:ef:cf:64:ce:83:99:9f:69:0e:37:75:6a:d1:a5:37:66:
         7a:94:fb:7c:9d:28:c9:96:46:4e:ad:d5:34:c0:ff:70:93:b9:
         9b:3c:8f:57:20:a4:f1:c3:79:3f:f7:a9:f0:93:0b:a8:f8:b7:
         de:b3:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:47:25 2026 by rpki-client