Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
File:                     203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft (raw, json)
Hash identifier:          tUJhvlebwAvGq+SrIjG2ErnDnwsXhL/BTmsoEHrD214=
Subject key identifier:   19:47:54:FF:5A:ED:C7:3C:6B:59:51:C1:92:AA:73:90:AA:6B:88:F3
Authority key identifier: 20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52
Certificate issuer:       /CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252
Certificate serial:       367917714322127785D2AD10A36EE2C48FFD19B1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
Manifest number:          34
Signing time:             Wed 17 Jun 2026 04:16:44 +0000
Manifest this update:     Wed 17 Jun 2026 04:11:44 +0000
Manifest next update:     Thu 18 Jun 2026 06:47:44 +0000
Files and hashes:         1: 203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl (hash: A2wAr5eOvouzHCgxPDNhOSpLMGES4yiE4vjZ1s2acAU=)
                          2: 3135372e31352e33322e302f32332d3234203d3e203138303431.roa (hash: NbJQ5exevbZjAb1JTjXmsBF9cRuA1KI0zVWB1TfI//E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl
                          rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:17:71:43:22:12:77:85:d2:ad:10:a3:6e:e2:c4:8f:fd:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252
        Validity
            Not Before: Jun 17 04:11:44 2026 GMT
            Not After : Jun 18 06:47:44 2026 GMT
        Subject: CN=194754FF5AEDC73C6B5951C192AA7390AA6B88F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:80:99:24:8a:f8:25:a2:b2:18:d2:49:ed:
                    17:8a:8a:c2:47:7e:f0:e4:6a:db:bb:a6:55:26:49:
                    7e:60:ef:31:d3:6e:b5:60:cf:91:7d:14:8a:a1:83:
                    c1:64:40:83:25:65:40:52:c7:e7:0e:c2:aa:6e:87:
                    94:46:3c:e8:aa:d3:43:8c:a7:c2:da:e9:3a:30:f9:
                    ce:7d:12:ed:bb:e6:38:71:0d:1c:98:f8:41:f7:bc:
                    61:56:81:43:75:c6:14:b7:cd:65:73:64:1e:cb:c5:
                    3e:56:31:81:1b:4c:9b:4f:b8:2e:04:f1:3d:3f:a4:
                    66:f6:a1:c8:36:79:ea:97:f7:b1:e6:e7:9b:32:fa:
                    e0:25:ea:fa:c1:50:f8:64:c8:0a:e3:66:cf:53:16:
                    c7:39:05:27:f6:f4:74:17:44:35:bd:c6:af:b7:ec:
                    43:6f:7a:fa:1c:c6:97:11:8b:57:fc:ee:90:9f:be:
                    63:2d:00:a3:1d:2b:34:ba:be:35:fe:80:5b:6b:d1:
                    8d:8f:ef:37:c8:5c:80:38:e0:70:3d:1d:36:d2:10:
                    33:f3:69:5e:a5:23:a2:ee:58:6c:3a:81:da:c1:2a:
                    7c:6c:e4:67:34:c3:32:7a:30:7b:5c:d5:a0:05:08:
                    2b:fb:b8:85:a7:6b:4a:bd:72:21:37:1d:7c:ca:22:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:54:FF:5A:ED:C7:3C:6B:59:51:C1:92:AA:73:90:AA:6B:88:F3
            X509v3 Authority Key Identifier:
                keyid:20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:f3:c3:39:92:6c:68:d1:b7:c4:52:69:53:a2:2a:2b:cc:
         2b:43:ca:50:ee:16:43:86:05:40:db:04:26:cb:40:ee:a0:54:
         bd:5f:b0:3c:31:14:62:2d:d0:59:90:13:da:70:80:76:2a:8c:
         38:be:b4:eb:0a:12:7c:b7:68:c2:bf:14:c5:e1:b3:1b:5a:6d:
         12:07:2b:d2:b5:b2:d4:21:4c:2c:98:ee:4b:ce:2a:22:10:2a:
         1a:86:9d:fd:2c:ad:7a:12:e8:a1:44:6e:0c:9c:3f:1f:85:c8:
         ee:46:f0:7f:ef:e4:6e:6b:6a:1e:4c:46:3c:5e:ca:d6:19:a1:
         2e:27:06:9a:7f:7f:d6:8a:85:81:7e:49:ce:4a:1c:8b:af:8d:
         b5:3d:04:bd:e0:8f:d8:2d:72:ed:55:ee:c2:32:85:28:e2:3e:
         07:2f:92:28:d1:2e:34:c4:01:53:30:4e:25:0d:62:07:8b:6f:
         88:f9:92:98:75:6d:a6:9e:98:24:ea:22:bd:90:e9:e0:91:de:
         0c:6d:60:93:56:e7:8e:46:87:f9:8a:70:9a:66:2f:3d:96:e2:
         fe:f9:29:2d:51:eb:04:b9:13:83:5a:ae:12:91:3a:0e:dc:e8:
         da:fe:03:c7:e8:d0:c1:b8:e2:4b:44:1f:df:a4:6f:b2:85:d0:
         e1:1b:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:59 2026 by rpki-client