Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
File:                     0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft (raw, json)
Hash identifier:          BO31hdxjHKlE/9nnGTkjDKeUmMlXMKML88+/y0+wA+4=
Subject key identifier:   91:B6:1F:41:60:49:B3:57:79:B3:C1:13:4E:FD:AB:81:23:E1:44:94
Authority key identifier: 0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
Certificate issuer:       /CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Certificate serial:       6633CC961FA452039EEA93D0DB13264636E94B9E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
Manifest number:          6C
Signing time:             Tue 28 Jul 2026 21:04:53 +0000
Manifest this update:     Tue 28 Jul 2026 20:59:53 +0000
Manifest next update:     Wed 29 Jul 2026 21:41:53 +0000
Files and hashes:         1: 3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa (hash: C7eNmWkgWq7ZRC4sPl4B5Q7nePEgx3UhGfhX2eQZEcc=)
                          2: 0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl (hash: 4X1OFmQWH6q7l89flH1wEsPChqBWdrmVxX5/DEqK4Qc=)
                          3: 3130332e3136312e37392e302f32342d3234203d3e20313331323733.roa (hash: YAFpG1/bPoaxYEeGXLp+QJ9xPDcGgfmJ/UlyMfUItNA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl
                          rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:33:cc:96:1f:a4:52:03:9e:ea:93:d0:db:13:26:46:36:e9:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
        Validity
            Not Before: Jul 28 20:59:53 2026 GMT
            Not After : Jul 29 21:41:53 2026 GMT
        Subject: CN=91B61F416049B35779B3C1134EFDAB8123E14494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:b1:0f:12:40:8f:c8:85:4c:41:01:9e:b8:
                    1f:37:d4:7e:79:37:2e:87:67:4f:80:58:ad:b1:fd:
                    43:4a:6b:cb:ab:7e:bd:23:e7:18:85:3b:cd:83:0a:
                    5c:6b:7d:85:eb:48:16:73:69:31:17:55:31:94:36:
                    b3:44:fb:23:06:45:b2:46:e7:4c:df:86:18:91:92:
                    f0:02:39:2c:a5:00:66:ef:ef:cf:95:0c:0f:35:14:
                    e3:ba:54:87:2a:e0:8b:ae:8b:78:b9:eb:88:ee:a0:
                    ad:43:fe:9c:d0:51:d7:b0:85:74:ab:f3:56:e5:ee:
                    e2:03:36:d5:84:5e:3f:6a:c3:87:e5:e4:69:f1:7d:
                    da:47:7f:83:db:72:0a:02:ba:04:1e:0d:dd:2b:04:
                    fb:2c:7a:e2:cd:c8:3d:ab:f6:60:e3:5e:25:32:f1:
                    ed:5a:d5:f2:ca:cd:1c:f6:f9:c3:c1:91:3a:ee:5e:
                    54:19:94:a2:0a:1c:67:bb:9b:0e:eb:c4:23:f7:45:
                    50:4f:86:e0:aa:d5:68:11:83:49:6d:80:0f:96:ec:
                    b4:37:a9:0d:14:d9:de:04:81:90:eb:51:4a:c7:06:
                    bf:b7:78:ff:c9:b1:29:33:a5:9a:e1:ec:60:09:08:
                    70:e6:a1:8c:d4:a7:ca:cb:ed:e2:33:9d:31:db:9b:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:1F:41:60:49:B3:57:79:B3:C1:13:4E:FD:AB:81:23:E1:44:94
            X509v3 Authority Key Identifier:
                keyid:0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:73:4f:eb:6e:21:87:48:6f:59:5b:fc:c7:5c:76:e4:13:17:
         c9:c0:f6:c2:42:ce:4b:9e:88:68:62:38:ba:99:46:f4:74:9f:
         d3:47:d0:3f:10:0a:d1:46:70:18:3e:bd:41:22:92:dc:fb:8b:
         9e:62:c2:04:24:2f:a5:95:66:59:f2:3c:99:2e:78:24:59:e6:
         0f:a7:85:a6:34:fb:94:19:bd:ee:22:30:76:c7:0a:84:23:e9:
         94:61:66:db:3c:23:e3:bc:0c:fb:12:f7:5e:b9:32:09:f7:cc:
         51:94:c9:84:f2:bf:c9:d6:70:f8:25:c4:a8:78:ec:12:b1:43:
         5b:0e:ec:34:4b:5c:4c:a8:f4:f8:2f:6e:9b:e5:09:8a:e7:48:
         2b:a2:e5:f2:74:ca:03:ea:5c:ed:23:bc:3d:fa:d7:27:82:db:
         aa:74:2f:a1:5d:f5:15:b4:7c:59:c5:d4:e5:e9:46:88:64:b7:
         9b:b0:69:2e:7c:37:6e:ef:68:a7:4e:7f:d2:94:79:1e:95:b4:
         16:e1:76:66:26:9c:17:1f:8b:fc:50:a1:28:f9:c8:7d:0a:fa:
         53:4a:01:23:18:44:06:58:0c:2b:6e:41:44:d5:b6:7c:08:3e:
         7d:4e:7b:06:f5:fd:fb:5c:c6:27:ae:08:d5:f3:9a:da:84:bf:
         68:7f:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:28 2026 by rpki-client