Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File:                     68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier:          trmldNAr7UY45ZpR91gJRH6tzRYGO+p2aNHWJLvtvRI=
Subject key identifier:   BC:4D:55:1F:BE:B6:FC:2C:24:8F:D4:FF:E5:0B:25:C2:61:50:66:2C
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer:       /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial:       357215DE61D5FC8862DB1BC293AD766B09DB9757
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number:          46
Signing time:             Tue 30 Jun 2026 09:53:38 +0000
Manifest this update:     Tue 30 Jun 2026 09:48:38 +0000
Manifest next update:     Wed 01 Jul 2026 11:57:38 +0000
Files and hashes:         1: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: 9pgAmWnNbU2osf8WSjnrwF6seJzfYYR526ZV7EBWUAk=)
                          2: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
                          3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
                          4: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
                          rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 11:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:15:de:61:d5:fc:88:62:db:1b:c2:93:ad:76:6b:09:db:97:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
        Validity
            Not Before: Jun 30 09:48:38 2026 GMT
            Not After : Jul  1 11:57:38 2026 GMT
        Subject: CN=BC4D551FBEB6FC2C248FD4FFE50B25C26150662C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:aa:98:41:0d:71:99:97:c3:19:b0:95:7b:
                    11:a9:9d:48:80:85:87:dc:40:16:64:8b:50:91:bb:
                    47:fd:7d:e1:18:41:9e:25:a5:54:f2:6e:3b:84:2b:
                    80:bc:12:cb:ee:f8:5d:9c:5b:2f:cb:0b:5f:2b:de:
                    13:4e:5f:42:5f:d5:38:73:b0:fc:14:c8:85:c0:53:
                    c3:ab:9f:22:08:5f:fe:2d:b6:a4:59:14:65:a8:07:
                    c9:9c:8f:f6:1f:f4:55:e3:a5:71:22:f2:01:e3:b1:
                    18:a0:4a:08:26:e4:4e:63:1b:06:7d:c4:72:bb:ac:
                    bc:3d:61:b8:91:b6:93:87:e7:d9:85:d4:d5:4e:bb:
                    65:ef:2a:87:7b:00:a5:0c:22:ba:e4:97:1c:5c:e9:
                    bd:17:eb:39:78:94:cc:65:19:3d:8b:b9:85:cc:72:
                    7d:c2:50:11:c4:3a:4d:7a:b4:0e:e9:e9:46:80:13:
                    3c:be:80:6e:65:c1:db:c8:ca:75:47:87:29:56:fd:
                    22:84:2c:f4:b0:ef:88:75:85:ec:d7:7a:ef:4f:d1:
                    b1:5c:69:ca:65:a7:1b:ab:de:97:a3:95:88:d8:3c:
                    ad:a1:0a:6d:0b:7b:78:54:38:ce:6f:30:67:0e:17:
                    50:6b:b6:54:29:f2:12:49:a2:95:31:2c:5a:48:31:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:55:1F:BE:B6:FC:2C:24:8F:D4:FF:E5:0B:25:C2:61:50:66:2C
            X509v3 Authority Key Identifier:
                keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:60:97:e6:68:fb:46:41:54:af:8c:69:a8:dd:24:c1:5c:
         7d:35:ce:cf:d7:03:5c:4b:78:c0:f8:7a:f8:0f:35:f8:b0:ec:
         6d:0d:4e:19:9b:e1:a7:38:e7:a1:94:e1:91:97:96:ce:63:5a:
         a1:3a:ed:2c:a3:0d:c7:36:b7:ed:d8:fd:91:00:73:ac:dd:af:
         98:d8:a7:43:d8:a4:ee:9b:41:d9:d4:e9:15:f9:13:c5:0b:aa:
         8a:19:5f:3a:26:af:de:e0:03:02:93:8c:01:86:53:5d:09:80:
         a1:a8:80:3d:c8:68:73:b2:bf:3e:35:4f:ce:42:6b:49:45:50:
         e4:58:b6:ec:93:02:45:ad:a1:ba:0a:31:4a:ff:b3:6b:90:57:
         f8:dd:3a:66:91:76:95:9c:15:16:bf:59:41:fe:b9:eb:47:05:
         da:7f:bf:b5:58:36:26:2b:27:66:9d:ae:d5:22:e4:45:db:03:
         b2:0a:16:37:42:43:88:01:7d:94:37:57:fa:2b:72:98:d8:bd:
         0d:c0:86:df:a6:41:e1:ef:f6:55:5f:dc:1d:51:31:f8:de:48:
         50:4f:72:0c:ba:b6:d6:2f:7e:ff:5c:8b:44:5c:bd:48:da:6f:
         9f:78:8c:47:50:cb:37:45:a0:0f:af:c1:6e:1e:5c:57:41:9b:
         18:0b:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:57 2026 by rpki-client