Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
File:                     5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json)
Hash identifier:          YQnVTOHvkkJGLs9CHnX88BAND+jWsu4z4lLuSFC4qqw=
Subject key identifier:   0B:5D:DC:EF:B7:05:FA:7D:88:17:9D:0C:48:F0:25:54:09:B8:2B:53
Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C
Certificate issuer:       /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
Certificate serial:       66600F4F88C3758AAD901106DC1F77746331AC5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 06:07:39 +0000
Manifest this update:     Tue 28 Jul 2026 06:02:39 +0000
Manifest next update:     Wed 29 Jul 2026 06:44:39 +0000
Files and hashes:         1: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=)
                          2: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: eKubYfqdrDHZDVL4G1Ig7wcaE/oV3sCLRTFn0QfDbxg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl
                          rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 06:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:0f:4f:88:c3:75:8a:ad:90:11:06:dc:1f:77:74:63:31:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
        Validity
            Not Before: Jul 28 06:02:39 2026 GMT
            Not After : Jul 29 06:44:39 2026 GMT
        Subject: CN=0B5DDCEFB705FA7D88179D0C48F0255409B82B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:74:2c:5d:0b:07:56:03:5c:7c:84:b5:be:
                    05:bf:2a:09:dc:ef:46:5f:f6:ed:61:8c:af:7c:9b:
                    1d:7a:d2:69:ff:98:a5:8a:1c:d3:d4:0d:52:7d:3b:
                    80:b3:a6:02:d4:97:5c:1f:31:6a:7e:c8:c9:b5:e9:
                    33:57:82:b3:c3:1f:3a:7b:07:71:0e:98:e6:49:c0:
                    6d:e6:f7:16:f4:fe:ab:3e:12:97:eb:9d:91:ea:2a:
                    02:87:f3:fe:e7:6e:31:4d:a0:e2:9d:11:68:c5:e6:
                    85:68:dc:b9:82:be:72:83:dc:16:fe:79:49:11:97:
                    f3:d1:20:11:44:93:aa:e9:52:5e:53:ef:55:d7:ce:
                    a7:8d:43:07:7b:d6:a3:23:2e:4a:d5:74:34:f9:a4:
                    09:6f:22:ab:86:ab:b5:1c:29:63:db:49:44:07:24:
                    c0:52:d2:20:e3:55:0d:b2:2c:33:9a:f2:5e:a6:a5:
                    a0:cb:6e:0a:2d:b6:bb:ff:0a:56:8f:62:9d:5f:e1:
                    a9:0f:f8:05:11:53:1b:ae:dc:00:4b:17:07:c6:f6:
                    25:41:b7:86:81:45:02:fa:a5:da:f1:8e:2a:26:ae:
                    bf:77:16:bc:16:ee:f2:7d:95:cd:b2:d5:34:dc:38:
                    78:2e:cc:e9:77:6b:b1:a2:9e:d2:39:d1:ff:95:8f:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5D:DC:EF:B7:05:FA:7D:88:17:9D:0C:48:F0:25:54:09:B8:2B:53
            X509v3 Authority Key Identifier:
                keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:84:c4:2f:b5:6b:eb:ca:39:46:9e:42:53:4d:c7:60:0a:6f:
         eb:cf:5e:2e:1a:e2:93:ba:65:4d:36:46:17:b4:df:93:dd:56:
         ac:9d:9a:3f:bd:42:a3:f2:0e:c1:c3:0a:31:93:b3:f4:66:25:
         b1:db:9d:02:19:52:ae:d2:e1:06:9e:2e:f1:be:bf:24:5c:3d:
         0e:b1:48:a4:01:40:af:fc:d1:f9:d9:5a:4f:12:b3:64:6b:81:
         35:a6:12:8f:39:53:18:1d:b2:56:6a:b9:4d:7c:32:4e:bf:74:
         02:18:b6:66:18:5f:9b:9d:cd:bb:45:68:0f:bb:b5:06:eb:fc:
         87:ca:95:46:60:ea:22:72:b6:b7:66:c6:8a:d9:02:f4:1f:36:
         16:dc:44:b5:f9:98:da:35:1d:4e:a8:0b:a4:0b:aa:9b:ad:5e:
         ae:22:50:fb:dc:7c:55:c1:aa:b4:9a:14:98:f4:b5:df:7e:ae:
         82:5e:be:98:1f:87:0c:27:c7:84:4a:63:ca:bf:f2:2e:21:03:
         32:d2:e2:93:8b:e3:89:88:b7:16:99:a7:a0:9d:03:e6:c1:f5:
         d5:1a:4a:3b:5a:a3:b0:87:be:cb:5f:1e:85:c8:2d:fb:ca:18:
         07:80:87:e7:c0:90:71:3f:76:01:f5:ba:4b:99:07:bc:21:0f:
         70:1f:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:03 2026 by rpki-client