Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
File:                     BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json)
Hash identifier:          Rv25mZJ+M5R9dS9ImqFsdjo5KUY8RMjepTH9gTN3sTE=
Subject key identifier:   BA:5E:01:91:3D:0D:07:15:39:5D:BA:6A:5C:F2:E7:14:01:8C:D5:BB
Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Certificate issuer:       /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Certificate serial:       5F17CEAF9F1593618FF70B33A2A05C689921CA4C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
Manifest number:          47
Signing time:             Sat 13 Jun 2026 04:59:01 +0000
Manifest this update:     Sat 13 Jun 2026 04:54:01 +0000
Manifest next update:     Sun 14 Jun 2026 07:23:01 +0000
Files and hashes:         1: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=)
                          2: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=)
                          3: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=)
                          4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=)
                          5: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: dZNPVMg9hQee6t86NUnKeNTPrLBgKkUG6rV3y9lMMDQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:17:ce:af:9f:15:93:61:8f:f7:0b:33:a2:a0:5c:68:99:21:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
        Validity
            Not Before: Jun 13 04:54:01 2026 GMT
            Not After : Jun 14 07:23:01 2026 GMT
        Subject: CN=BA5E01913D0D0715395DBA6A5CF2E714018CD5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:4e:d9:98:f1:b1:80:4a:c0:25:a1:cb:71:
                    18:82:fb:c1:03:eb:21:f2:89:5c:85:84:a2:93:a7:
                    e5:e8:94:46:a9:01:7b:8e:55:14:92:e3:2e:9b:0c:
                    8b:82:35:d1:5c:78:b7:1a:06:8c:27:48:58:88:77:
                    e2:21:c6:52:39:47:b7:c8:1f:98:f8:8e:d4:f0:03:
                    29:91:f8:17:90:9d:67:06:f7:7a:ca:7a:4d:3d:da:
                    dc:7f:e0:8e:27:28:41:4d:68:25:fc:c7:9e:f4:08:
                    df:a9:e6:21:21:22:dc:30:1b:cf:0e:2b:04:5b:35:
                    a8:b1:f5:37:30:c7:a5:d7:39:01:5b:55:ce:67:db:
                    30:c4:87:f5:39:b1:11:f0:2f:fa:30:a3:d4:a1:53:
                    9f:3b:1b:dd:0d:17:55:f3:da:b3:bc:3d:ff:9f:3e:
                    0c:6f:9e:fa:93:2e:35:da:e7:dc:21:f8:23:87:44:
                    17:70:e0:48:a2:58:58:70:57:78:02:c7:dd:bb:86:
                    38:f1:78:f7:31:ab:5d:49:5b:2c:ed:f0:60:4c:eb:
                    fb:27:ed:05:ba:81:6d:dd:8f:bc:ec:77:e7:05:6b:
                    03:28:f6:36:c3:03:1e:49:73:d2:04:83:ed:79:ea:
                    f2:0e:b1:73:76:f1:f4:aa:08:0f:03:c4:05:c7:a1:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:01:91:3D:0D:07:15:39:5D:BA:6A:5C:F2:E7:14:01:8C:D5:BB
            X509v3 Authority Key Identifier:
                keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:f5:0e:73:0d:7e:40:cf:2c:1d:52:7b:8b:c9:01:dc:7a:
         6c:3a:88:ca:61:1e:28:0d:7d:bb:93:24:51:38:28:4e:af:92:
         6d:c2:bc:85:ca:bf:d0:c5:f1:93:eb:89:6f:30:05:2d:87:9a:
         21:3d:b9:6e:da:82:37:9a:e0:5e:3f:8d:7c:30:4e:17:c3:f9:
         ea:be:6a:11:ac:27:13:e4:d2:1b:d4:a2:25:92:18:2f:75:61:
         c2:06:c5:8e:a5:e4:ca:aa:98:7f:fc:05:88:8e:c0:a1:4d:93:
         9a:63:e5:71:f0:50:c4:6c:98:45:0e:17:6e:05:cf:8b:40:71:
         d6:92:57:aa:ff:ed:94:74:b3:2a:f4:79:03:88:4b:b0:5c:ea:
         ef:00:52:b8:df:fa:07:66:f3:34:91:29:62:37:82:30:af:ea:
         5f:3b:ff:b9:52:63:e1:9e:88:f7:62:a4:f6:18:3f:ab:64:40:
         62:82:fe:6d:f8:3d:2e:7e:9f:b0:e2:57:70:8a:eb:8b:a5:1c:
         0b:92:10:a1:96:ea:e7:c2:3c:04:44:db:45:3c:a0:fb:48:f3:
         a3:86:77:b1:e6:46:b1:52:63:e2:94:79:01:ee:d2:cb:b5:1c:
         c3:09:dc:a5:45:42:3e:6b:ed:87:7d:9c:02:5b:6c:51:ca:15:
         2a:04:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:40 2026 by rpki-client