Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
File:                     2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json)
Hash identifier:          uHAjSaEJ53f76buSkPl7hGJw2MV/YWz2I/nyvtruANU=
Subject key identifier:   5D:39:FF:84:FC:EE:24:03:E0:7E:FE:EF:CB:64:EA:EA:1D:E0:E8:FC
Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43
Certificate issuer:       /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
Certificate serial:       1586D6EA3B8F083DE07E6B88D7699896920E0C9D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 22:40:03 +0000
Manifest this update:     Tue 28 Jul 2026 22:35:03 +0000
Manifest next update:     Thu 30 Jul 2026 00:15:03 +0000
Files and hashes:         1: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=)
                          2: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: JkVr9cLHjhLlAAEb1DmK7bAkDsS+NyXJOWsd/A053ZA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl
                          rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:86:d6:ea:3b:8f:08:3d:e0:7e:6b:88:d7:69:98:96:92:0e:0c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
        Validity
            Not Before: Jul 28 22:35:03 2026 GMT
            Not After : Jul 30 00:15:03 2026 GMT
        Subject: CN=5D39FF84FCEE2403E07EFEEFCB64EAEA1DE0E8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:f0:50:d0:d4:88:3b:3d:38:13:d7:a0:4f:
                    b9:36:e2:d4:f1:5c:64:24:5f:b9:3a:a8:ab:a2:c6:
                    3b:88:d6:5a:3e:58:35:77:a0:c4:ad:c7:ea:aa:1e:
                    01:d1:ca:33:4a:eb:43:f2:db:c1:22:36:58:32:48:
                    05:f2:76:d8:dc:1a:3d:fa:40:07:6f:64:75:99:4a:
                    da:7e:16:8e:29:02:38:c6:f7:b8:e7:d7:e2:0f:3b:
                    64:50:59:22:e0:70:e3:45:20:01:8d:84:68:8d:49:
                    c0:71:e5:80:59:b6:01:1b:ab:be:e2:6e:34:73:03:
                    35:d7:06:ad:62:42:62:49:99:a9:7f:93:0d:fb:66:
                    90:71:33:f5:08:ec:6a:1a:8d:1f:6d:25:bc:ce:a0:
                    d5:3b:04:48:29:f2:9d:5c:9f:1d:c3:3c:0c:97:87:
                    a2:d7:b4:e6:43:48:d4:c6:e0:60:8f:f4:fc:f3:69:
                    00:11:d6:cd:ed:a5:52:e4:54:d8:da:f2:3b:29:69:
                    bd:e0:a4:e3:7a:e0:61:35:9c:fb:a7:58:26:74:92:
                    cb:8e:ef:de:44:4f:14:df:b7:1b:88:dc:41:bb:62:
                    1c:4e:dd:dd:04:60:44:a0:aa:b2:f7:16:c8:db:bb:
                    ac:20:43:0e:6e:14:ff:e5:63:4c:12:c0:b2:6b:fa:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:FF:84:FC:EE:24:03:E0:7E:FE:EF:CB:64:EA:EA:1D:E0:E8:FC
            X509v3 Authority Key Identifier:
                keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:9c:5b:be:ad:a5:9b:ff:d8:b5:19:0e:43:76:bd:5a:31:
         ee:d7:b3:9f:bf:4f:6a:01:40:18:61:89:a2:67:67:21:2c:8c:
         87:39:06:e4:47:4a:c6:0f:bd:ea:0e:44:89:47:5d:a8:6d:72:
         b4:5e:48:c2:bd:b6:cf:ef:37:d1:79:cd:04:78:82:26:80:66:
         b5:76:97:fe:b4:e5:0e:ea:53:38:f3:c6:6c:e0:e2:cf:00:80:
         70:92:05:30:ce:0d:5c:d8:3c:cc:7a:3d:89:62:6c:09:4e:b6:
         52:2f:91:e2:b9:34:0e:91:3c:c3:75:ef:c2:d4:69:c0:aa:de:
         22:48:3a:09:9a:ea:40:c0:a3:d4:80:c6:e5:0a:32:79:18:46:
         93:3a:7c:ee:8d:87:9d:d7:28:4c:ba:76:f3:d7:dc:39:4e:2d:
         37:a4:c3:53:33:c5:49:39:a8:06:bd:50:3e:7b:b0:d2:10:d4:
         b5:d4:36:7a:6a:eb:42:28:d5:bb:bc:91:ac:55:7e:4d:de:4b:
         64:3b:f3:52:f2:49:b4:fe:5e:f9:5e:ff:d2:a2:c1:61:ec:ac:
         e4:f3:5d:5e:c2:0b:ac:41:38:e1:2d:43:f3:54:0b:08:3e:8b:
         2c:06:f4:02:47:e2:9e:ca:e4:25:a3:94:c7:e0:c5:06:8b:26:
         a5:25:b6:29
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUFYbW6juPCD3gfmuI12mYlpIODJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz
Qzg5MzI0MzAeFw0yNjA3MjgyMjM1MDNaFw0yNjA3MzAwMDE1MDNaMDMxMTAvBgNV
BAMTKDVEMzlGRjg0RkNFRTI0MDNFMDdFRkVFRkNCNjRFQUVBMURFMEU4RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0fBQ0NSIOz04E9egT7k24tTx
XGQkX7k6qKuixjuI1lo+WDV3oMStx+qqHgHRyjNK60Py28EiNlgySAXydtjcGj36
QAdvZHWZStp+Fo4pAjjG97jn1+IPO2RQWSLgcONFIAGNhGiNScBx5YBZtgEbq77i
bjRzAzXXBq1iQmJJmal/kw37ZpBxM/UI7GoajR9tJbzOoNU7BEgp8p1cnx3DPAyX
h6LXtOZDSNTG4GCP9PzzaQAR1s3tpVLkVNja8jspab3gpON64GE1nPunWCZ0ksuO
795ETxTftxuI3EG7YhxO3d0EYESgqrL3Fsjbu6wgQw5uFP/lY0wSwLJr+sqfAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUXTn/hPzuJAPgfv7vy2Tq6h3g6PwwHwYDVR0j
BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w
LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC
MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG
MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9CcW76tpZv/2LUZ
DkN2vVox7tezn79PagFAGGGJomdnISyMhzkG5EdKxg+96g5EiUddqG1ytF5Iwr22
z+830XnNBHiCJoBmtXaX/rTlDupTOPPGbODizwCAcJIFMM4NXNg8zHo9iWJsCU62
Ui+R4rk0DpE8w3XvwtRpwKreIkg6CZrqQMCj1IDG5QoyeRhGkzp87o2HndcoTLp2
89fcOU4tN6TDUzPFSTmoBr1QPnuw0hDUtdQ2emrrQijVu7yRrFV+Td5LZDvzUvJJ
tP5e+V7/0qLBYeys5PNdXsILrEE44S1D81QLCD6LLAb0AkfinsrkJaOUx+DFBosm
pSW2KQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:45 2026 by rpki-client