Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
File:                     5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft (raw, json)
Hash identifier:          clOGw489ZwA4iDNgfaGzbyi6MxGLHgdDkwaHq28OLEg=
Subject key identifier:   BD:17:34:35:52:AB:B4:70:C0:D6:2F:24:00:A1:56:55:9D:F9:A5:A7
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       0FA976956526E0B6D3879A46B7156AC3BEAEBC44
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
Manifest number:          72
Signing time:             Tue 28 Jul 2026 23:40:14 +0000
Manifest this update:     Tue 28 Jul 2026 23:35:13 +0000
Manifest next update:     Thu 30 Jul 2026 02:24:13 +0000
Files and hashes:         1: 3130332e3133302e34342e302f32322d3234203d3e203138303436.roa (hash: PuLpSdQZHzCEFGC7TmIZ9IbqnyJX6A4hr8rSx+omfPM=)
                          2: 5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl (hash: JVvipT9CJuP84d/FwzaDzwBX/RPIKbBT6efVvMNniNc=)
                          3: 3130332e3133302e33362e302f32322d3234203d3e203138303436.roa (hash: EtFLge6U9GGwCaGF7GaIH4AGugeGlPuKD4XYVJqT0dA=)
                          4: 3130332e3133302e34302e302f32322d3234203d3e203138303436.roa (hash: UwalaM/yumP8VAzCH2kwI0YrOybKzt0D6yFVVeph3mc=)
                          5: 36312e35382e34382e302f32302d3234203d3e2034373830.roa (hash: PYv/nS8+yuI4Ayp1EGb1dsCdX5gLwaj2cdvLRAJdezk=)
                          6: 36312e35382e31362e302f32302d3234203d3e2034373830.roa (hash: ulLAO9jVmjVPeBWWCp8ASiEFf0HUdA7ADUlfbZ0y+H8=)
                          7: 3130332e3133302e32302e302f32322d3234203d3e203138303436.roa (hash: fLV1xsYNOJbdFp05Q7bjpEBZ/bWgjA4jSH8639TK4es=)
                          8: 36312e35372e3230382e302f32302d3234203d3e2034373830.roa (hash: 0vW2aeNMFlQCCdUqFw+kop6U+fnVyKA1KhUN54tofaU=)
                          9: 3138302e39322e302e302f32302d3234203d3e2039393234.roa (hash: AtNEQnjXFTrYqDX0PCujhnRaUyyWStIdkrvnlxKt7qs=)
                          10: 3130332e3133302e33322e302f32322d3234203d3e203138303436.roa (hash: fhEv062rGvRd2vywAS0IkZHiQ2iexOiI1jiVYDqh+Wk=)
                          11: 36312e36302e3234302e302f32302d3234203d3e2039393234.roa (hash: 7e6R//oqPKk3BcfQGoQ6C/oKPq6Dnu9fBoQljHau0BE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a9:76:95:65:26:e0:b6:d3:87:9a:46:b7:15:6a:c3:be:ae:bc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: Jul 28 23:35:13 2026 GMT
            Not After : Jul 30 02:24:13 2026 GMT
        Subject: CN=BD17343552ABB470C0D62F2400A156559DF9A5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:10:0b:9d:ee:7d:17:92:ff:ed:f8:8b:cc:
                    5a:f6:6e:9b:ff:2c:5f:8a:96:b2:03:cc:7d:4a:2d:
                    79:4f:7f:2d:8b:20:cd:74:bf:5a:77:75:65:19:af:
                    17:1e:bf:29:b9:9d:05:c7:67:8f:e5:49:44:05:48:
                    98:c4:6c:f2:b4:ab:52:e6:05:c5:41:60:20:70:08:
                    c8:1a:13:a1:05:d4:94:05:67:ef:62:17:99:a8:ef:
                    7d:72:98:36:fe:56:9d:11:8a:a7:05:13:c5:2a:2c:
                    bb:bd:bb:4a:88:6c:eb:f0:83:c0:33:19:0d:2d:34:
                    6c:77:5b:f1:8f:7d:4a:f2:a4:74:18:2f:fd:be:de:
                    c1:38:fc:91:b7:b2:44:8e:c3:c3:1c:a6:65:a7:c6:
                    53:08:10:2e:7e:6a:1b:ff:86:c5:6f:ab:f2:06:a5:
                    9a:5e:63:ff:82:cb:06:a0:38:66:1a:20:c6:9c:87:
                    bf:09:7a:5f:81:e6:24:91:64:5d:4a:f3:ef:66:24:
                    c8:69:5f:b8:94:b5:89:30:de:8d:f0:a7:7d:cf:f0:
                    c8:ee:22:bd:91:c6:75:6a:8f:34:05:78:ad:4c:82:
                    54:47:bf:27:78:a6:27:dd:a1:0d:8f:6f:d1:0f:0b:
                    2c:72:b7:2c:d5:7f:f9:89:54:e2:96:42:47:b1:d8:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:34:35:52:AB:B4:70:C0:D6:2F:24:00:A1:56:55:9D:F9:A5:A7
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6c:4f:26:bd:f1:47:eb:f2:b2:6e:a5:74:b3:22:59:c0:6a:
         7e:66:e3:c2:d9:30:d5:ee:f7:c0:b1:1b:2d:a9:50:f6:70:06:
         66:47:bd:a8:c8:fb:34:b6:9d:ba:fa:54:3e:77:8a:a7:18:f9:
         8f:74:4b:d8:e3:2d:6a:6a:a1:ac:1d:74:59:6f:45:da:c2:92:
         75:76:26:e2:4e:68:44:d8:ad:13:db:0d:87:33:c3:b4:b0:07:
         e2:cf:e2:4c:63:09:13:cc:b3:69:aa:f3:a9:24:36:17:18:2f:
         18:b9:5c:18:42:d7:ad:ae:cd:bf:e5:61:3d:9a:d4:10:c4:f4:
         42:eb:88:86:a7:6a:8b:14:e8:95:61:e1:a2:bc:6f:c1:20:23:
         80:86:ff:7e:bf:0d:b3:38:9d:29:d3:46:9d:17:8f:5c:3d:9e:
         9f:54:ce:4a:d3:4e:89:d1:82:d7:55:e8:43:70:26:18:fb:dc:
         d0:14:fb:e6:1a:16:7e:a9:80:ae:69:74:95:25:84:5a:d9:f0:
         71:29:17:90:19:91:6e:f3:4f:62:43:7e:d3:3b:c7:3a:22:c6:
         f7:82:77:f5:ff:c2:86:e1:ff:92:cd:7c:48:1d:5d:6f:01:9b:
         bc:05:2e:e9:ab:cb:4f:cf:44:2f:81:09:01:86:1d:d4:d6:11:
         ff:f1:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:05 2026 by rpki-client