Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
File:                     0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft (raw, json)
Hash identifier:          t/eL7P1N41IoKNrDjGIFJU+ecjjqbRtPG4cPZZpvqB0=
Subject key identifier:   1D:54:09:B5:D0:75:78:F3:0F:47:D9:C5:79:41:C2:B3:A5:6E:8B:3E
Authority key identifier: 08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9
Certificate issuer:       /CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
Certificate serial:       248EB65581AAB4008AB72A597F7EC4B585EC8B7E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 01:22:47 +0000
Manifest this update:     Tue 30 Jun 2026 01:17:47 +0000
Manifest next update:     Wed 01 Jul 2026 04:44:47 +0000
Files and hashes:         1: 0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl (hash: +79WjgVe0p1UsRs/tjPq8dgPcnengRfGbCSibd+Bjzk=)
                          2: 323430303a656265303a3a2f33322d3332203d3e203633393038.roa (hash: yiaDMH+RG+1Oi2ZJm9NkMQbKlRz53qXOlLRWHQMDjvY=)
                          3: 3130332e3131352e3130382e302f32332d3234203d3e20313532313739.roa (hash: GnqSOqHIKRnSUe48yc8wA/3RSL3OwN91aIq6irhNf34=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl
                          rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 04:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8e:b6:55:81:aa:b4:00:8a:b7:2a:59:7f:7e:c4:b5:85:ec:8b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
        Validity
            Not Before: Jun 30 01:17:47 2026 GMT
            Not After : Jul  1 04:44:47 2026 GMT
        Subject: CN=1D5409B5D07578F30F47D9C57941C2B3A56E8B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:2d:48:94:80:64:6e:4a:11:2f:81:63:fc:
                    e2:6c:df:c7:0e:cc:e7:86:7b:a2:0e:0d:7b:26:6b:
                    9f:92:c4:62:90:9a:b2:fd:c0:71:db:01:2c:4b:25:
                    69:8c:cf:05:3e:44:6a:95:b1:98:c3:da:60:39:cb:
                    63:0e:9d:d5:e2:5a:82:f5:89:bd:b4:1c:60:44:1a:
                    93:f4:11:cf:da:76:cf:47:44:02:07:28:5d:4f:df:
                    43:89:db:04:98:51:e2:52:a5:88:15:55:3d:ae:0f:
                    6d:3f:a0:62:75:d3:fb:3c:28:90:c2:fe:fd:44:ca:
                    2e:04:38:f4:45:95:c3:18:5a:93:da:71:55:fb:b9:
                    df:38:9b:06:15:bb:7f:38:e2:03:b8:b4:4b:42:fd:
                    59:b4:32:1f:79:c0:93:b7:c9:34:20:19:62:90:df:
                    6f:23:b8:a0:d4:d0:59:0c:f7:51:aa:86:e9:2b:b1:
                    95:85:60:15:8c:73:00:19:9f:26:9b:b6:b9:f6:10:
                    6c:26:57:1d:f3:9e:44:1e:d7:02:3e:60:69:c0:fa:
                    d9:46:c8:43:be:3f:60:dd:21:a3:2f:90:cd:28:9f:
                    75:b2:3d:3a:ae:49:f5:f4:78:fd:73:d6:b5:eb:a4:
                    ab:7b:35:52:57:72:67:3a:e3:59:8b:6d:b6:73:8d:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:09:B5:D0:75:78:F3:0F:47:D9:C5:79:41:C2:B3:A5:6E:8B:3E
            X509v3 Authority Key Identifier:
                keyid:08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:5c:da:12:eb:a3:3f:f6:0a:f9:72:86:d8:65:c2:b9:db:
         8f:f2:de:e3:11:39:3e:1b:8f:ed:46:08:d6:1e:5a:5f:81:60:
         a0:16:ca:fd:b6:17:bf:84:08:15:d2:ec:c6:ce:b0:b4:cf:b4:
         c5:03:f2:6c:a7:de:57:37:0d:78:54:f1:8a:a3:12:a4:74:20:
         92:cb:05:62:62:6a:de:ef:3f:dc:90:71:54:93:b1:19:c0:78:
         5c:b2:14:5c:20:16:39:6e:b3:63:87:61:25:53:95:32:05:2d:
         a5:37:29:30:2c:89:66:be:79:bf:d5:8e:28:ad:72:33:99:c5:
         01:03:aa:2d:33:b1:60:9c:dc:cf:1a:55:c9:5c:8a:79:78:df:
         33:5d:a5:20:9f:82:46:30:25:fd:cc:1e:ce:97:86:97:a8:7e:
         14:d4:69:2a:da:ee:9b:fd:b3:58:0a:71:50:7c:f6:24:f4:46:
         08:f5:8a:a8:2a:54:4c:dc:b4:05:64:67:c7:19:43:5a:32:ee:
         c5:ec:4c:cf:30:c2:92:ef:81:66:82:b3:0f:18:dd:bf:ef:d7:
         c0:86:5d:d0:d6:0f:14:f5:2b:94:a1:ef:70:f5:a6:55:d5:7b:
         7a:92:b0:3d:21:17:be:05:52:77:35:57:89:48:c0:0b:8e:70:
         2a:43:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:05 2026 by rpki-client