Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
File:                     BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft (raw, json)
Hash identifier:          fg6Rkny6pQOd4gGcavZIqJB0TgVXpD6UFyQxjNXE3cY=
Subject key identifier:   58:6D:82:5D:FE:3E:5C:F1:1A:9F:E3:67:FD:5E:49:CA:F0:B9:B4:DD
Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B
Certificate issuer:       /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
Certificate serial:       5E08B37C8EF29B95156F5115CD72506DCB2516B1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
Manifest number:          C5
Signing time:             Sun 04 Oct 2026 05:19:16 +0000
Manifest this update:     Sun 04 Oct 2026 05:14:16 +0000
Manifest next update:     Mon 05 Oct 2026 08:11:16 +0000
Files and hashes:         1: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (hash: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=)
                          2: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl (hash: lmJPXGvT9M2+TbP6cn2wLDNh43MOaK0B/4LAdKuJJKw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl
                          rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 08:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:b3:7c:8e:f2:9b:95:15:6f:51:15:cd:72:50:6d:cb:25:16:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
        Validity
            Not Before: Oct  4 05:14:16 2026 GMT
            Not After : Oct  5 08:11:16 2026 GMT
        Subject: CN=586D825DFE3E5CF11A9FE367FD5E49CAF0B9B4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:7c:9e:dd:bc:ef:8d:df:e4:ac:9a:5c:26:
                    7d:63:be:bd:cc:9a:9e:77:86:d0:98:cc:3e:e7:c0:
                    d7:3b:d6:74:08:23:c2:16:4a:29:24:69:7f:26:f9:
                    81:31:84:2a:6e:50:52:3f:4c:84:12:ee:78:53:dd:
                    09:05:d3:1a:fb:4a:c4:9f:05:ef:9a:cb:cd:29:14:
                    fd:0b:26:54:f4:c9:96:9d:12:4a:50:76:d7:58:1b:
                    68:8b:e4:b1:6d:74:7c:52:d7:cd:d0:cc:af:14:7e:
                    19:28:44:85:24:73:ca:7f:ef:c9:21:96:23:2e:65:
                    c1:99:82:cc:0d:ff:0d:77:b4:41:b7:28:f0:d3:1f:
                    f1:fe:0e:43:a2:12:ca:26:d4:eb:d1:b7:5d:51:c5:
                    a5:5b:49:04:5e:ce:ca:25:9e:4f:0e:6f:bb:c2:ec:
                    54:5c:0f:d9:45:46:10:62:fc:9d:20:11:8f:c9:9c:
                    b5:3b:30:84:74:a3:e0:cf:c7:d3:c0:15:8a:7f:99:
                    ce:f6:d9:aa:54:c3:18:82:6a:a8:16:84:32:79:46:
                    05:1b:31:35:64:dd:40:e3:dd:d6:94:89:c9:96:83:
                    ae:b4:71:49:6c:2e:ec:75:fb:22:ad:50:a9:c7:b8:
                    49:f7:88:37:ed:4b:3e:ac:99:11:1f:fc:f4:9d:cd:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:82:5D:FE:3E:5C:F1:1A:9F:E3:67:FD:5E:49:CA:F0:B9:B4:DD
            X509v3 Authority Key Identifier:
                keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:14:13:77:26:48:5e:8f:b6:5c:30:37:c1:77:8a:8b:e5:e3:
         3e:c6:61:45:8c:dd:f8:9c:07:5e:e6:bf:24:3a:89:46:15:6f:
         cd:e0:24:fa:3c:5b:ee:66:88:7f:fa:d8:42:09:c6:eb:34:86:
         84:83:a7:7a:ab:53:c1:bd:a6:e8:f5:54:b5:a5:0c:95:12:78:
         f5:de:ab:1a:00:f9:0c:a0:96:83:c3:f8:2f:3d:d9:69:5c:9f:
         d5:de:59:ae:14:69:53:86:01:ac:53:e6:ae:21:80:20:12:21:
         db:42:71:1c:1e:05:39:ea:5d:7f:54:61:42:f8:cf:98:26:50:
         02:6e:62:e8:4b:6e:1c:5c:70:bf:ee:9f:de:ab:e7:23:16:6a:
         1d:83:6a:4c:a8:2c:8b:d8:25:63:6e:a2:26:20:b0:da:cb:e6:
         20:7f:63:0e:f5:81:c0:27:f7:24:7d:d6:95:ad:97:fc:73:0c:
         22:19:6b:73:2a:e1:ea:61:44:9b:0a:59:a2:d4:2d:8b:6d:93:
         0b:e0:40:6a:98:12:e2:69:88:4b:96:7b:86:79:94:6f:c9:dc:
         62:9b:a4:d1:59:e4:67:c7:13:a6:68:e2:f1:ab:a3:07:22:c1:
         77:b8:b3:03:a5:63:49:e8:53:56:8c:39:4a:c9:f9:e2:31:51:
         71:12:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:18:45 2026 by rpki-client