Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
File:                     5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json)
Hash identifier:          cLITqCt0r65Wh95F+s0xb/4hD9ytqAO4P5FqAnqfH7g=
Subject key identifier:   90:10:D5:95:00:86:BE:04:8B:FF:54:B5:04:E2:EE:1F:24:25:EA:98
Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C
Certificate issuer:       /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
Certificate serial:       20D802607A18EDF3108E1BE1CC30A33DBC63B864
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 16:32:17 +0000
Manifest this update:     Fri 12 Jun 2026 16:27:17 +0000
Manifest next update:     Sat 13 Jun 2026 19:08:17 +0000
Files and hashes:         1: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: iZgMYzMa+qLQYAKbZCCCQjAp2m/WiiWWys8mhfs3xcM=)
                          2: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl
                          rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d8:02:60:7a:18:ed:f3:10:8e:1b:e1:cc:30:a3:3d:bc:63:b8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
        Validity
            Not Before: Jun 12 16:27:17 2026 GMT
            Not After : Jun 13 19:08:17 2026 GMT
        Subject: CN=9010D5950086BE048BFF54B504E2EE1F2425EA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:66:08:aa:3b:4c:2c:c8:06:0a:89:ff:91:
                    5a:38:20:1a:6e:1e:6a:c4:37:cf:30:65:f7:0a:ac:
                    68:cb:31:28:df:0d:73:bb:29:be:17:1d:e2:9e:33:
                    3a:81:1d:14:6a:98:99:d5:8e:b2:68:13:21:23:4c:
                    ef:93:e1:52:0c:1d:b7:d2:51:f8:76:ba:2e:1c:b9:
                    96:05:84:d0:63:21:1f:de:2a:4b:b4:d8:67:c4:7a:
                    26:4b:bc:2d:20:1f:94:f7:fb:ce:6d:ba:04:6d:8c:
                    fe:f3:ce:5c:13:fc:18:45:f7:af:fa:4d:0e:94:85:
                    ae:e4:b5:04:87:dc:eb:7b:38:61:3f:d8:0e:0b:76:
                    16:bb:6e:d0:08:a5:18:cc:cb:b7:fd:f1:ad:55:50:
                    17:40:c6:31:c3:15:7c:f5:00:32:35:b6:46:93:9d:
                    b6:13:6a:31:e3:50:59:5b:35:30:c8:09:5c:a1:38:
                    10:18:98:e8:34:34:70:95:4e:d9:82:b4:85:98:8c:
                    7e:d8:6c:3e:b7:ec:41:be:70:f6:32:b9:5a:59:31:
                    f7:7d:64:dd:1a:25:c2:9f:b5:2c:86:48:83:fd:6b:
                    b5:b5:2f:fc:82:16:15:74:56:39:47:a8:c6:28:fa:
                    46:a0:9a:16:78:04:42:f4:60:a7:b2:a3:b4:cc:98:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:D5:95:00:86:BE:04:8B:FF:54:B5:04:E2:EE:1F:24:25:EA:98
            X509v3 Authority Key Identifier:
                keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:f7:57:4c:41:21:1f:b9:67:07:5b:cd:6b:2d:56:32:99:
         85:57:49:b7:e2:7a:11:70:01:f6:39:c8:a8:8d:ea:ac:96:14:
         94:6e:3c:ed:98:73:e2:3d:14:79:be:3a:f8:0b:1b:b7:e0:0e:
         10:46:45:76:00:b4:d8:29:bb:0a:1b:71:b1:a0:55:0e:e3:4b:
         a2:17:00:81:e2:5e:6c:f0:e8:2e:57:dc:b8:59:de:77:da:60:
         6e:05:a0:99:2c:87:0a:89:05:75:a0:25:9e:54:5b:bc:ae:b3:
         ff:69:8f:40:1a:37:af:32:89:ef:bf:dc:99:99:d0:f3:e1:c9:
         5f:e6:9e:5a:6b:a8:ae:3f:dd:33:57:17:1f:47:bd:c2:d5:50:
         2c:dc:70:48:42:2c:9a:7c:8a:da:a0:80:81:3a:2b:77:10:0d:
         8b:a1:b9:27:aa:4a:f7:39:e9:5f:11:6d:05:b7:84:24:0b:de:
         6b:3f:f8:a6:ae:a0:a8:59:44:ec:a7:7e:8a:d3:59:36:a4:08:
         d2:aa:3b:14:20:53:c2:41:ed:64:31:24:c2:ae:0e:23:db:24:
         ad:36:83:85:7b:c3:3a:3d:f2:84:a2:fa:69:9e:11:a9:4f:b6:
         d6:46:f5:eb:ee:64:8c:a8:2c:3a:ac:c9:f6:b4:34:98:c3:44:
         bb:2f:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:10 2026 by rpki-client