Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
File:                     36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json)
Hash identifier:          /xfG7TbmJ/0POt+t+dNYY3WssjQrKhUDR61e8gMH1cs=
Subject key identifier:   00:23:A0:FE:30:93:22:53:A5:47:B7:5B:3A:79:89:31:20:D3:14:A1
Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8
Certificate issuer:       /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
Certificate serial:       468582FEC984F7E894C58DF7D568561102C0D8C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
Manifest number:          34
Signing time:             Wed 17 Jun 2026 00:56:30 +0000
Manifest this update:     Wed 17 Jun 2026 00:51:30 +0000
Manifest next update:     Thu 18 Jun 2026 04:02:30 +0000
Files and hashes:         1: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=)
                          2: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=)
                          3: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: HNUm3F4GO6FSK5kbrB6yPZ6Wgn4+g1OSXK6jR9vpOCA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl
                          rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:82:fe:c9:84:f7:e8:94:c5:8d:f7:d5:68:56:11:02:c0:d8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
        Validity
            Not Before: Jun 17 00:51:30 2026 GMT
            Not After : Jun 18 04:02:30 2026 GMT
        Subject: CN=0023A0FE30932253A547B75B3A79893120D314A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:e2:9b:65:ca:e3:74:5f:6d:e6:2c:86:3d:
                    68:90:7c:3b:04:50:6b:8e:90:66:7a:05:e0:e8:97:
                    d6:6a:6a:48:36:64:ab:33:a6:40:06:b7:4e:f2:6f:
                    44:39:f2:09:4a:32:5a:6b:0b:04:89:09:d6:0b:a6:
                    8c:b1:b8:26:f2:97:70:68:f6:d1:60:af:9f:d3:41:
                    93:0d:9f:84:e6:ac:04:7e:c5:8f:68:42:85:80:70:
                    fb:39:24:d1:f7:83:47:80:1c:0a:4c:18:71:62:3c:
                    05:22:ff:c3:d9:84:8a:cc:87:d6:7d:f7:8e:07:a5:
                    56:79:ba:c8:d5:59:9f:60:55:2d:85:2b:22:6a:7e:
                    88:df:c0:a4:4e:4e:4e:25:f1:38:8f:7a:ef:9f:20:
                    d4:b6:1e:e5:d3:99:6a:64:a6:19:04:b1:0f:7f:4b:
                    c4:dd:5b:b4:88:e9:04:2e:84:4c:6e:6a:8e:64:1c:
                    ce:07:c4:bc:89:bf:8d:17:80:b2:19:a1:49:e9:43:
                    49:17:cd:31:d2:f8:2a:98:e0:2b:ac:1b:a2:c3:e0:
                    26:b7:3e:86:8a:f2:c4:a4:d9:44:e0:fc:fc:f4:e4:
                    26:92:d2:b9:06:48:9b:8c:f6:a8:90:ac:b7:b1:b9:
                    c0:20:ee:66:54:da:bf:5d:36:7e:66:dd:ae:ae:29:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:23:A0:FE:30:93:22:53:A5:47:B7:5B:3A:79:89:31:20:D3:14:A1
            X509v3 Authority Key Identifier:
                keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:69:df:19:29:1e:96:b8:f9:c1:68:06:83:a6:f0:2b:61:
         de:49:0c:0f:b2:7d:c3:f0:7d:6f:a3:2e:c9:0f:d2:9e:60:eb:
         ea:0f:4f:1d:27:0d:d1:34:42:81:de:49:51:39:f4:41:0f:d9:
         94:a4:b7:a9:74:99:9b:e6:54:dc:7b:18:52:4a:f3:72:3f:97:
         05:0b:4a:7d:be:aa:b3:80:35:3c:0a:1c:51:38:c8:11:a7:3b:
         fc:57:13:5d:a4:3a:85:f4:58:d0:df:ad:d4:13:57:d5:b2:b3:
         28:0b:83:78:d0:95:ea:3b:54:ee:78:38:a7:6c:92:8d:c0:aa:
         ab:c9:c2:52:56:55:85:ec:f7:72:07:dd:c2:35:a4:75:be:08:
         ba:88:4f:2f:67:5e:3c:6e:52:8d:ea:e1:55:4f:8c:5c:15:05:
         49:7e:af:a3:a1:6a:f8:69:24:34:9b:9c:83:d7:99:2c:45:93:
         f1:c7:00:41:c7:9f:16:2c:43:8f:d3:65:ef:16:93:11:62:42:
         bf:2f:2b:a1:91:a1:da:d8:dc:d5:40:f3:57:ff:0a:a9:5a:6d:
         3c:06:da:3c:28:5d:12:88:a1:20:04:33:f1:80:af:92:bf:f9:
         e5:f7:16:20:a2:57:36:c6:49:77:25:31:ae:18:35:2d:ce:c7:
         42:06:a1:48
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURoWC/smE9+iUxY331WhWEQLA2MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG
NUFEN0REODAeFw0yNjA2MTcwMDUxMzBaFw0yNjA2MTgwNDAyMzBaMDMxMTAvBgNV
BAMTKDAwMjNBMEZFMzA5MzIyNTNBNTQ3Qjc1QjNBNzk4OTMxMjBEMzE0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZnuKbZcrjdF9t5iyGPWiQfDsE
UGuOkGZ6BeDol9Zqakg2ZKszpkAGt07yb0Q58glKMlprCwSJCdYLpoyxuCbyl3Bo
9tFgr5/TQZMNn4TmrAR+xY9oQoWAcPs5JNH3g0eAHApMGHFiPAUi/8PZhIrMh9Z9
944HpVZ5usjVWZ9gVS2FKyJqfojfwKROTk4l8TiPeu+fINS2HuXTmWpkphkEsQ9/
S8TdW7SI6QQuhExuao5kHM4HxLyJv40XgLIZoUnpQ0kXzTHS+CqY4CusG6LD4Ca3
PoaK8sSk2UTg/Pz05CaS0rkGSJuM9qiQrLexucAg7mZU2r9dNn5m3a6uKVmzAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUACOg/jCTIlOlR7dbOnmJMSDTFKEwHwYDVR0j
BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X
QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx
NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy
REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVD2nf
GSkelrj5wWgGg6bwK2HeSQwPsn3D8H1voy7JD9KeYOvqD08dJw3RNEKB3klROfRB
D9mUpLepdJmb5lTcexhSSvNyP5cFC0p9vqqzgDU8ChxROMgRpzv8VxNdpDqF9FjQ
363UE1fVsrMoC4N40JXqO1TueDinbJKNwKqrycJSVlWF7PdyB93CNaR1vgi6iE8v
Z148blKN6uFVT4xcFQVJfq+joWr4aSQ0m5yD15ksRZPxxwBBx58WLEOP02XvFpMR
YkK/LyuhkaHa2NzVQPNX/wqpWm08Bto8KF0SiKEgBDPxgK+Sv/nl9xYgolc2xkl3
JTGuGDUtzsdCBqFI
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:32 2026 by rpki-client