Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
File:                     C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft (raw, json)
Hash identifier:          mUGkF9NW9IC9gQHUvzm8E5sJpPi1wUtuXb4YsVVXNwA=
Subject key identifier:   B4:0F:74:B8:5E:70:81:AB:DF:6B:69:1F:33:49:E1:05:07:2E:84:98
Authority key identifier: C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
Certificate issuer:       /CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Certificate serial:       0D32875AB0DD11B8B500FB2BEDF063A1DB1723BA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
Manifest number:          30
Signing time:             Fri 12 Jun 2026 17:02:22 +0000
Manifest this update:     Fri 12 Jun 2026 16:57:22 +0000
Manifest next update:     Sat 13 Jun 2026 20:14:22 +0000
Files and hashes:         1: 3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa (hash: bNbeesUI9NGScwyfWf3u19UFeOX2O9GH5Y/KbW8f6PQ=)
                          2: C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl (hash: QqMVPEQYfRc6dlLbhQnSeun9JlEgbXKMOd5Bj0FR0TA=)
                          3: 3130332e3232392e3133342e302f32342d3234203d3e20313331353838.roa (hash: bvBQkdkU1PbJqUeD3+FD4aQK8feEjVMVOpN1NeMxeW0=)
                          4: 323430303a653438303a3a2f33322d3438203d3e20313331353838.roa (hash: LyZCNP1sBcgV+faqZCRBGCYTfZzPSOWOa44ZubZUvBM=)
                          5: 3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa (hash: L+UhXooP+QDzxg/7f1iFae2tMtapq6u+1T0q0qdCkq8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl
                          rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:87:5a:b0:dd:11:b8:b5:00:fb:2b:ed:f0:63:a1:db:17:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
        Validity
            Not Before: Jun 12 16:57:22 2026 GMT
            Not After : Jun 13 20:14:22 2026 GMT
        Subject: CN=B40F74B85E7081ABDF6B691F3349E105072E8498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:27:4b:b1:b6:91:a7:8e:c6:f6:37:e9:35:
                    39:1f:20:47:d0:a9:f1:f4:7e:a9:f6:6f:69:1f:59:
                    67:96:2d:99:19:aa:2c:de:d8:e2:3a:20:03:96:e8:
                    ec:fc:0d:f9:4a:cb:d1:62:5c:fc:b9:ee:ed:61:47:
                    cf:bc:cd:f8:0e:c9:10:2a:97:59:d7:62:9b:8c:7b:
                    89:4e:17:ce:90:90:2c:33:21:c9:c3:c2:c3:f2:c2:
                    82:63:9f:41:6d:be:27:8a:e0:6c:81:1e:ec:65:13:
                    6f:86:09:fb:57:00:43:49:7d:54:11:9d:a0:16:b0:
                    df:e1:ce:2b:0d:3b:cd:da:a7:5d:10:e5:c9:11:ff:
                    43:a3:38:c4:ca:9e:fb:a6:a9:e6:04:8a:15:c1:99:
                    a1:88:f9:e5:e0:c1:2b:7b:b0:79:74:00:cf:61:ef:
                    ba:c6:7c:c9:32:c9:16:39:9c:6c:c0:f7:a2:24:eb:
                    03:84:13:d4:dc:39:a9:17:c9:0c:96:bd:0a:42:78:
                    9f:2a:3e:42:87:f4:4a:3e:10:13:ce:d0:07:96:84:
                    26:e4:ed:92:9a:fa:a7:b3:86:60:f6:4c:10:7c:1c:
                    c9:38:29:7d:db:85:9b:18:81:29:bb:0b:34:84:e0:
                    72:b0:0f:0b:8c:0e:57:f7:bf:18:6c:df:9e:7e:0d:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:74:B8:5E:70:81:AB:DF:6B:69:1F:33:49:E1:05:07:2E:84:98
            X509v3 Authority Key Identifier:
                keyid:C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:db:86:61:14:95:10:a4:9e:2a:d2:be:2f:c5:9a:d9:5f:
         2c:6c:f0:b3:4d:ea:e1:db:42:b2:3f:6e:24:41:b9:1d:94:f5:
         d1:fa:ed:b7:d2:f2:a2:c3:08:df:71:12:9a:58:77:31:a3:0e:
         4c:a7:84:db:d4:95:50:b3:34:5d:be:4b:be:b9:26:8f:17:52:
         42:da:5e:72:1c:c2:7c:d7:fb:0c:e1:60:d8:61:f4:1d:30:de:
         c4:d1:5b:1e:b2:24:7b:3b:0e:98:cb:a4:11:4b:6a:6b:31:21:
         21:5e:e2:68:49:47:7c:76:32:6e:27:ae:86:01:cb:35:20:08:
         a8:d4:2a:2a:fd:b3:d5:93:7b:43:cb:a0:13:09:88:16:a4:72:
         47:f0:ba:2a:9c:f7:b5:91:96:e5:30:f5:c1:a6:ce:7a:54:d4:
         70:2f:ac:86:27:7f:7f:91:73:c8:18:64:ff:61:c7:ab:02:e2:
         57:45:f6:79:bd:99:b7:06:d7:c9:25:e5:86:ca:8a:38:27:16:
         33:e9:84:ac:77:6a:b5:9f:f8:1d:20:57:24:0e:09:c6:33:19:
         89:01:8a:96:3a:8b:a6:76:c5:17:55:7f:c1:3c:e0:83:0b:54:
         05:f8:a9:17:57:a7:28:f3:95:94:b7:d5:36:00:85:68:0b:c2:
         78:d5:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:26 2026 by rpki-client