Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
File:                     0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft (raw, json)
Hash identifier:          6ewZi+aJOJujy7LrmAn4SZF1eimuSeVFC3e/H8J9G6w=
Subject key identifier:   BA:5C:89:D1:05:18:89:9A:2A:4D:9E:D9:DA:FC:77:C5:78:7E:50:40
Authority key identifier: 0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0
Certificate issuer:       /CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
Certificate serial:       532E0429A13C9EDCD6D22C3B295307B0180A9429
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
Manifest number:          6C
Signing time:             Tue 28 Jul 2026 09:18:04 +0000
Manifest this update:     Tue 28 Jul 2026 09:13:04 +0000
Manifest next update:     Wed 29 Jul 2026 10:16:04 +0000
Files and hashes:         1: 323430313a383161303a3a2f33322d3438203d3e203633393036.roa (hash: Ju4DqHvSFIioLMuTjNEvnpdvtmCTfOVdOTTLP/H3etk=)
                          2: 323430313a383161303a3a2f33322d3438203d3e20313530373731.roa (hash: UYauj6esIPONycclDfRTMnJdkzoUqQLqRW/YAz5ewVM=)
                          3: 0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl (hash: RkwqY7fVJprEPiPUaukvJW+eopNK4ln+Dx7lXTdoJQI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl
                          rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2e:04:29:a1:3c:9e:dc:d6:d2:2c:3b:29:53:07:b0:18:0a:94:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
        Validity
            Not Before: Jul 28 09:13:04 2026 GMT
            Not After : Jul 29 10:16:04 2026 GMT
        Subject: CN=BA5C89D10518899A2A4D9ED9DAFC77C5787E5040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:9b:04:a4:e6:75:0d:65:d3:1b:01:b1:88:
                    e3:d4:4c:c1:09:35:ce:6c:a2:4b:5b:c6:70:9f:4d:
                    fa:c9:08:90:3a:a4:c1:71:1d:e1:97:88:7c:f5:8c:
                    52:9a:76:72:c5:ab:b3:12:3d:89:ee:fc:e9:e0:b8:
                    b6:e5:0c:b3:10:38:48:fb:3c:c6:36:f9:bc:60:1e:
                    e7:ad:10:4d:2e:78:43:76:89:fe:05:1f:7c:a2:47:
                    5f:0a:d4:b4:a1:38:bb:61:52:86:6b:13:45:9a:11:
                    24:a4:73:21:74:c7:a5:40:02:86:15:17:aa:fe:d8:
                    94:e3:c1:5a:36:b7:e5:9b:c5:49:e9:42:81:53:03:
                    e8:78:b2:f4:ad:e7:3d:18:d8:bf:9f:4e:1e:08:34:
                    d4:8f:d8:00:7c:1f:1b:23:51:91:da:ad:43:ea:fd:
                    50:cb:84:82:7c:ff:0c:ae:17:b1:1a:1d:0e:bd:c6:
                    10:e7:b3:3c:b5:a8:49:4b:9e:64:93:70:35:62:9a:
                    3a:32:d4:33:68:0b:7d:7e:2f:a0:da:0a:8f:f9:ed:
                    ec:fb:69:35:84:f3:88:b3:1c:cd:f5:f3:65:d7:2d:
                    8e:d5:72:4f:6a:2b:00:f1:f0:8d:cf:ec:10:3c:b4:
                    0e:91:f7:2a:9d:86:48:b0:db:ba:8a:5c:20:ea:22:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:89:D1:05:18:89:9A:2A:4D:9E:D9:DA:FC:77:C5:78:7E:50:40
            X509v3 Authority Key Identifier:
                keyid:0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:a4:fd:eb:52:22:e1:3a:01:51:89:3e:52:31:23:fc:d5:
         cd:31:ac:4a:b8:ce:b2:4a:b7:27:ec:a4:e8:b4:a1:69:2c:db:
         7d:43:b3:61:5c:a3:2f:29:26:8f:86:35:60:a3:d7:69:eb:40:
         d2:2f:c0:95:61:1c:5f:93:26:cd:2c:c0:95:23:f3:d9:1e:e5:
         2c:49:d2:a8:f4:5d:e6:bb:f5:3b:52:88:0f:3c:6b:42:8b:62:
         e4:d2:ab:bd:9b:89:2e:2a:e6:c6:42:92:b5:bb:05:55:17:da:
         ad:61:37:64:db:31:bd:eb:4f:69:4b:be:72:00:53:05:c7:5f:
         fd:0d:a4:99:45:9a:5a:6c:3d:fb:da:13:66:b7:10:1d:81:d4:
         c6:21:22:46:95:0c:b2:10:55:b9:e8:db:c1:95:ed:61:e3:3b:
         07:dc:cb:03:e1:fd:6c:33:6e:84:58:20:fd:70:6b:8d:dd:af:
         d3:08:e3:7b:c3:30:3f:68:18:d6:b2:a6:81:22:8a:d9:73:e8:
         eb:8f:e1:82:57:5e:8c:4c:04:df:79:fe:22:44:15:64:bf:f4:
         10:22:b3:bd:ba:e9:e8:44:31:12:4c:21:7b:a9:03:00:0c:9c:
         7a:e9:d9:98:fe:96:8b:27:70:ff:da:5b:38:08:e4:1d:f6:71:
         fb:c8:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:00 2026 by rpki-client