Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
File:                     BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json)
Hash identifier:          yKRPI/uq9MW1nGxqVyy0PjnZW9aA+9TniglIz8Bcumw=
Subject key identifier:   E7:13:D1:40:C7:EA:FA:1D:BC:91:C4:79:2E:EB:EB:25:F4:EE:11:DC
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Certificate issuer:       /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial:       6CA5A0FF67CF4E2C55641A8E75E1E4B82584F66F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
Manifest number:          08
Signing time:             Wed 13 May 2026 07:27:38 +0000
Manifest this update:     Wed 13 May 2026 07:22:38 +0000
Manifest next update:     Thu 14 May 2026 10:12:38 +0000
Files and hashes:         1: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=)
                          2: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: ZOf7lBVtCH2ZZJggbZo0iI3NrqnnET0NIoRgO78gP/E=)
                          3: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=)
                          4: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=)
                          5: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=)
                          6: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
                          rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:a0:ff:67:cf:4e:2c:55:64:1a:8e:75:e1:e4:b8:25:84:f6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
        Validity
            Not Before: May 13 07:22:38 2026 GMT
            Not After : May 14 10:12:38 2026 GMT
        Subject: CN=E713D140C7EAFA1DBC91C4792EEBEB25F4EE11DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:dd:80:b3:d8:e0:ae:f2:19:c6:c5:43:8f:
                    81:63:ac:54:1a:15:ef:bc:94:e9:cc:d2:d4:fc:8e:
                    7b:f7:a5:91:69:df:70:de:dd:48:d3:de:0e:30:ab:
                    db:18:d3:51:2d:cd:40:dc:30:ae:33:d7:db:a4:fb:
                    b2:65:9f:8a:2a:3a:c6:17:bb:7d:10:d9:cc:9d:79:
                    9c:28:0a:7e:4e:0b:20:00:a9:3e:ea:64:1d:91:5b:
                    9d:d8:a6:26:c4:74:97:5b:e3:e4:40:f7:de:35:77:
                    2c:dd:af:0d:e6:fe:21:29:6f:84:90:f1:fe:93:97:
                    bd:51:8b:d8:26:92:ed:7c:ee:af:4b:82:e3:c0:6f:
                    1e:94:f9:0e:7b:3c:8a:f9:28:5f:0f:81:6f:87:4f:
                    7c:1f:70:81:ef:84:db:1c:e4:73:c2:06:77:fd:cd:
                    b9:df:63:ee:9c:ef:d5:ea:5a:70:ae:bc:01:08:8d:
                    86:fb:cc:ca:b6:73:f7:e0:bb:37:9e:08:25:ba:5c:
                    3c:c1:a6:ab:63:58:f0:c4:28:f5:3d:f3:fc:fc:c4:
                    68:e6:03:51:0b:1f:f5:c6:fe:40:5c:be:d1:7f:d5:
                    29:91:4c:f7:51:6a:82:21:b6:f3:14:a3:34:d6:e5:
                    c3:a4:86:db:f9:97:a3:cf:9d:c3:54:f6:7e:54:ed:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:D1:40:C7:EA:FA:1D:BC:91:C4:79:2E:EB:EB:25:F4:EE:11:DC
            X509v3 Authority Key Identifier:
                keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:19:d4:65:de:28:14:d6:e9:c7:33:65:42:bf:7a:64:bf:
         94:cb:64:c3:20:95:36:26:78:5e:7e:06:c5:44:c3:e9:bc:92:
         d4:14:47:c0:fc:de:44:b7:c8:64:68:40:58:a9:3e:5f:cd:52:
         df:bc:15:a0:90:b6:98:bd:a8:6d:b3:6e:ee:52:2b:24:6e:80:
         09:84:1a:03:b9:c1:91:d1:1a:4f:9c:ac:f7:09:fb:46:bc:a9:
         69:2d:15:e3:2c:65:eb:f8:30:ba:0e:ef:ff:63:ec:24:3e:12:
         b5:41:39:2f:52:c6:7f:3c:3d:b8:ac:85:dd:7f:8b:95:62:05:
         60:2d:d2:15:2c:60:74:b2:7a:89:0b:1d:2d:9d:09:a6:d7:10:
         0e:b8:63:c9:3c:43:11:0c:bb:25:24:6e:16:e7:91:a4:bb:17:
         8d:4a:e2:09:3a:e1:61:c8:e1:20:aa:a7:08:72:a7:d8:d4:7f:
         e1:4b:55:34:79:fd:4e:34:88:b1:45:fa:14:de:c5:8b:5b:3a:
         c0:67:8e:f2:02:cb:19:73:4e:d0:62:1e:3c:80:22:4a:f9:a1:
         7d:04:76:67:30:7d:52:25:c5:3d:9b:85:a7:00:27:bc:77:38:
         7a:01:2d:02:a5:6c:16:90:83:d5:85:7d:95:a1:cf:a0:d2:03:
         08:7f:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:32 2026 by rpki-client