Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
File:                     4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json)
Hash identifier:          UyRiiBSuYsJIuq4qvDet7zuLth0nNOrRkcXHpMKFBSs=
Subject key identifier:   D0:F0:11:73:0D:BA:C6:A8:66:D7:46:D8:41:3D:8D:41:C6:68:1B:39
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Certificate issuer:       /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial:       56E21725AE77EED4C169BCFB878C66E3CE8B92BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 16:44:26 +0000
Manifest this update:     Tue 28 Jul 2026 16:39:26 +0000
Manifest next update:     Wed 29 Jul 2026 19:47:26 +0000
Files and hashes:         1: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: kdrioy5VbSGCRUJaTW0upw3caDaGIzesjYUm4Wo6QVQ=)
                          2: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=)
                          3: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
                          rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:17:25:ae:77:ee:d4:c1:69:bc:fb:87:8c:66:e3:ce:8b:92:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
        Validity
            Not Before: Jul 28 16:39:26 2026 GMT
            Not After : Jul 29 19:47:26 2026 GMT
        Subject: CN=D0F011730DBAC6A866D746D8413D8D41C6681B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:9c:21:1e:67:d3:32:2d:bd:07:a6:87:6c:
                    9f:56:d6:4d:fb:59:8c:d1:b4:e8:9f:e5:7f:cc:9c:
                    ad:64:26:a1:08:8c:be:ec:ec:5d:39:9b:14:02:6a:
                    37:05:58:b0:dc:c6:8e:e0:fe:d0:e8:ed:4f:27:e0:
                    ab:12:22:63:5b:57:37:9f:3c:81:7f:04:c2:b0:8d:
                    0d:51:16:c2:0b:6c:7b:30:15:83:e6:b1:0c:66:dc:
                    44:27:8f:72:37:31:6e:8e:99:fe:f3:3e:a6:ef:0b:
                    32:06:55:a2:08:b1:6a:47:fb:ab:16:01:d0:83:c6:
                    cb:6b:73:66:3a:f1:31:ea:c6:30:3b:99:1b:55:a2:
                    16:86:f8:33:f3:6d:bf:5d:46:1e:b0:75:ce:43:c9:
                    50:3c:f7:9f:e8:42:bc:6f:3d:bc:3c:b4:03:46:d4:
                    86:8b:ff:55:83:6d:c6:91:9c:a8:3a:00:15:ed:20:
                    90:e8:3d:51:57:ea:8f:6b:80:14:38:72:84:4d:7b:
                    ab:8e:11:fb:1c:ef:6f:95:2c:b4:26:c7:e4:df:0e:
                    e6:05:85:60:b7:0b:67:8b:6b:e7:8f:39:36:14:58:
                    ed:ff:6c:dc:ac:98:f8:1a:17:fb:e5:35:45:e8:03:
                    fe:c6:79:5e:98:a2:06:46:69:80:79:d6:6d:bb:fd:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F0:11:73:0D:BA:C6:A8:66:D7:46:D8:41:3D:8D:41:C6:68:1B:39
            X509v3 Authority Key Identifier:
                keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:65:ee:28:c4:4c:81:fa:21:0e:bb:5d:7a:fa:e0:1e:86:ec:
         49:c7:7a:b1:58:fa:7d:1a:f3:32:f4:26:ee:b9:c6:84:d8:4c:
         c7:50:da:76:7e:03:a1:a6:87:3c:02:6a:ee:e3:1b:92:97:7f:
         6e:7d:96:73:04:b4:8b:30:2a:ee:c6:8b:e2:a4:5e:5e:95:b2:
         0f:72:85:a1:5a:7d:e0:29:7f:5f:40:a1:34:94:2e:d6:ab:99:
         a7:e4:32:49:58:f7:46:a6:db:81:70:68:b4:d7:17:42:e3:dc:
         c8:09:a0:e0:b7:7d:9b:9d:a2:8a:de:a9:46:4a:03:95:53:09:
         4c:fc:94:99:15:28:f5:38:1e:27:c3:42:a7:eb:cf:1c:26:e1:
         ec:98:dd:93:a9:58:d0:fb:4d:6b:8f:89:6f:f3:26:2e:e3:f5:
         b0:fd:53:38:80:7e:a1:14:99:eb:d0:89:3b:d8:b1:c7:07:88:
         6e:b4:4a:8b:20:1d:17:16:20:e2:19:07:88:7c:2f:c8:ce:67:
         57:31:57:3f:d7:ea:78:ff:4b:28:c3:40:0e:31:1c:a0:4d:12:
         25:cb:12:d7:2a:c8:0f:83:5a:0a:fa:b9:ee:80:68:e5:f0:1d:
         b2:c9:1d:69:47:16:7b:ea:cb:7f:fe:93:3a:46:a3:a1:d3:e0:
         51:ea:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:47:05 2026 by rpki-client