Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File:                     CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier:          R4TJoXy9T1q8V+jH+/AXrNkatS39VzXRaQNgaFrYS7Y=
Subject key identifier:   98:F6:4D:9B:D0:1B:79:6B:16:7A:94:8C:E6:2D:FF:1C:15:BB:D9:B0
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer:       /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial:       572343B5ED983D32B0A8156937FD7AD1E0853FA9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 17:49:37 +0000
Manifest this update:     Tue 28 Jul 2026 17:44:37 +0000
Manifest next update:     Wed 29 Jul 2026 21:39:37 +0000
Files and hashes:         1: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: SZhyAwKIFbIZHoa8wc0zHbXIPJ+lKyzcoBmh2bh8l90=)
                          2: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
                          rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:23:43:b5:ed:98:3d:32:b0:a8:15:69:37:fd:7a:d1:e0:85:3f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
        Validity
            Not Before: Jul 28 17:44:37 2026 GMT
            Not After : Jul 29 21:39:37 2026 GMT
        Subject: CN=98F64D9BD01B796B167A948CE62DFF1C15BBD9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:9c:5a:19:8b:6e:2e:88:7b:c4:dd:72:62:
                    d2:89:d8:90:62:2d:31:48:06:aa:f4:98:ff:48:5f:
                    d1:8b:9f:c3:68:32:fe:29:e8:b1:64:9f:3c:48:c0:
                    58:d6:39:b6:5a:f0:ed:d0:ff:61:89:aa:27:d5:a9:
                    a2:23:12:51:43:8d:1a:26:b4:a8:71:3f:95:c5:c9:
                    b0:53:89:be:ef:00:33:ad:21:45:cb:bf:1b:73:24:
                    83:94:28:92:5b:41:11:fc:bd:d9:61:4b:30:4d:92:
                    5d:20:5d:53:a6:5b:d9:b4:14:44:03:66:6a:25:e5:
                    43:eb:f0:6b:c5:e6:0a:92:7f:b1:0e:a7:2e:bb:56:
                    5d:0c:27:15:96:bb:1a:39:ae:61:b8:e2:ca:f2:7a:
                    9f:57:6b:be:79:d3:e5:05:4c:c0:df:d7:37:a7:6c:
                    85:c0:0a:3e:76:c9:57:d2:63:ad:07:2c:a5:7b:d8:
                    6c:c1:34:e3:f6:4c:3f:55:bf:cf:dd:8c:a2:8c:2b:
                    20:e7:21:05:2d:86:c1:8c:72:ed:ea:06:b6:b9:25:
                    f9:95:5c:78:a2:a6:53:9c:f8:06:36:ba:3d:7f:20:
                    46:d6:a5:e2:bd:cc:fa:92:c8:7b:6a:7d:38:46:72:
                    72:c5:53:a9:e3:7a:42:64:34:2b:d6:6e:be:41:e1:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:4D:9B:D0:1B:79:6B:16:7A:94:8C:E6:2D:FF:1C:15:BB:D9:B0
            X509v3 Authority Key Identifier:
                keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:af:c0:7a:7b:b4:b3:21:93:22:53:19:3c:41:66:ed:24:
         08:a2:39:4d:ef:03:8d:b6:b5:8c:59:79:66:62:d6:3a:5f:38:
         d2:b9:84:09:95:5c:f1:67:26:b1:1a:f1:18:41:4c:06:d2:13:
         75:95:bc:52:11:c7:a8:7a:e5:8c:68:2c:da:47:74:ae:a9:01:
         82:f3:3b:8c:d4:c8:32:6e:ad:cc:a7:a2:37:b1:98:d4:21:08:
         73:48:af:e7:e1:a9:74:af:c1:6b:f9:06:24:25:2a:b2:6c:5f:
         45:55:9f:29:18:b2:09:c7:db:21:12:5f:45:97:69:12:0d:32:
         81:00:94:80:c0:c7:c3:a6:b1:84:a4:75:36:5e:3b:26:38:b9:
         bd:5d:03:d1:90:ca:8d:1c:d6:2d:8a:50:9e:ca:04:e3:87:c0:
         a8:6e:4c:85:33:1f:b9:67:f0:f2:28:36:76:73:0b:c5:c3:86:
         89:3f:84:79:d7:37:f2:9b:7a:d4:e2:e6:20:c4:37:c0:88:cd:
         c0:ca:d5:24:a1:0f:b1:d7:70:56:2e:03:9d:7a:af:b1:d6:c5:
         a4:98:1d:4a:8f:a0:b8:c1:61:66:5a:49:1c:4d:f1:3e:c7:0d:
         6f:66:d3:57:8e:f5:81:df:f7:35:66:0f:b0:48:5a:a2:1b:3f:
         11:31:f6:b4
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUVyNDte2YPTKwqBVpN/160eCFP6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FEMzYyRjNCRkFGRTVCOTMwNzkxN0UyM0I5M0ZFOEQw
MzkzMDg1QzAeFw0yNjA3MjgxNzQ0MzdaFw0yNjA3MjkyMTM5MzdaMDMxMTAvBgNV
BAMTKDk4RjY0RDlCRDAxQjc5NkIxNjdBOTQ4Q0U2MkRGRjFDMTVCQkQ5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeJxaGYtuLoh7xN1yYtKJ2JBi
LTFIBqr0mP9IX9GLn8NoMv4p6LFknzxIwFjWObZa8O3Q/2GJqifVqaIjElFDjRom
tKhxP5XFybBTib7vADOtIUXLvxtzJIOUKJJbQRH8vdlhSzBNkl0gXVOmW9m0FEQD
Zmol5UPr8GvF5gqSf7EOpy67Vl0MJxWWuxo5rmG44sryep9Xa7550+UFTMDf1zen
bIXACj52yVfSY60HLKV72GzBNOP2TD9Vv8/djKKMKyDnIQUthsGMcu3qBra5JfmV
XHiiplOc+AY2uj1/IEbWpeK9zPqSyHtqfThGcnLFU6njekJkNCvWbr5B4bwzAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUmPZNm9AbeWsWepSM5i3/HBW72bAwHwYDVR0j
BBgwFoAUytNi87+v5bkweRfiO5P+jQOTCFwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVJDSEUv
MC9DQUQzNjJGM0JGQUZFNUI5MzA3OTE3RTIzQjkzRkU4RDAzOTMwODVDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0NBRDM2MkYzQkZBRkU1QjkzMDc5MTdFMjNCOTNG
RThEMDM5MzA4NUMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8wL0NBRDM2MkYzQkZBRkU1
QjkzMDc5MTdFMjNCOTNGRThEMDM5MzA4NUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzsK/Aenu0syGT
IlMZPEFm7SQIojlN7wONtrWMWXlmYtY6XzjSuYQJlVzxZyaxGvEYQUwG0hN1lbxS
EceoeuWMaCzaR3SuqQGC8zuM1Mgybq3Mp6I3sZjUIQhzSK/n4al0r8Fr+QYkJSqy
bF9FVZ8pGLIJx9shEl9Fl2kSDTKBAJSAwMfDprGEpHU2XjsmOLm9XQPRkMqNHNYt
ilCeygTjh8CobkyFMx+5Z/DyKDZ2cwvFw4aJP4R51zfym3rU4uYgxDfAiM3AytUk
oQ+x13BWLgOdeq+x1sWkmB1Kj6C4wWFmWkkcTfE+xw1vZtNXjvWB3/c1Zg+wSFqi
Gz8RMfa0
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:08 2026 by rpki-client