Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
File:                     B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft (raw, json)
Hash identifier:          YZ2goFppyqcB39I53GbxflmC8yOKzd9YpgPgqUUHxgY=
Subject key identifier:   B8:58:06:D8:EA:9D:61:83:0C:AB:18:2A:7B:93:D7:9F:25:E7:52:7A
Authority key identifier: B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
Certificate issuer:       /CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Certificate serial:       2C0015CE86E2D61B610F2517C1C16E072BEFAAEA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 18:24:41 +0000
Manifest this update:     Tue 28 Jul 2026 18:19:41 +0000
Manifest next update:     Wed 29 Jul 2026 18:32:41 +0000
Files and hashes:         1: B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl (hash: 7I9Yj89rlC9uSIiRvQgpD711zXLtCjw1sn89x1ygDFI=)
                          2: 3130332e3132362e3138302e302f32322d3234203d3e203138303436.roa (hash: a8xqBAe2caapH+ozlzEc+y43Zwh4KNtvwAmfNpRDkMo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl
                          rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:00:15:ce:86:e2:d6:1b:61:0f:25:17:c1:c1:6e:07:2b:ef:aa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
        Validity
            Not Before: Jul 28 18:19:41 2026 GMT
            Not After : Jul 29 18:32:41 2026 GMT
        Subject: CN=B85806D8EA9D61830CAB182A7B93D79F25E7527A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:2a:a4:bf:26:10:72:0e:62:7f:53:3d:00:
                    6a:fc:b4:a9:e3:14:74:2c:ef:42:f1:c9:ac:d6:a1:
                    47:44:d0:53:78:70:6d:66:25:97:0a:af:ea:06:2a:
                    c2:4b:39:f3:54:07:7e:cb:8e:eb:d4:99:dc:d0:6d:
                    30:fd:36:f9:7d:b1:01:d5:91:03:ea:df:8d:33:32:
                    da:14:13:c7:0a:06:7e:ca:97:88:f9:9c:08:c9:32:
                    94:8d:51:af:dc:38:0b:ef:91:b3:21:df:14:2c:27:
                    65:fa:01:d0:e2:46:43:e3:12:c7:58:44:de:80:40:
                    67:8f:6c:2c:57:91:93:38:5c:d2:0d:58:3a:1d:87:
                    d6:03:cc:ee:fa:0a:69:5b:70:78:bf:39:af:1a:95:
                    06:ac:c1:0b:64:a9:56:ee:31:4f:19:24:ad:e9:e9:
                    9d:cc:20:32:09:ea:56:40:7c:6b:0d:33:e6:29:cd:
                    ee:30:7f:93:40:6e:f5:10:b0:e0:5c:d0:e4:e4:f4:
                    06:a7:8e:00:55:72:a8:5a:e0:7d:c5:19:84:52:da:
                    b7:57:68:d5:bf:38:f4:06:3e:2b:1e:59:66:34:fe:
                    51:38:9d:9b:54:51:24:f2:9c:9a:dd:ea:51:93:d0:
                    7c:a4:22:82:b3:d4:80:7f:d4:3e:6d:36:e5:2b:1a:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:06:D8:EA:9D:61:83:0C:AB:18:2A:7B:93:D7:9F:25:E7:52:7A
            X509v3 Authority Key Identifier:
                keyid:B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:e7:13:83:ae:3c:21:7c:ed:f5:cc:3a:19:55:1e:0b:6a:
         98:2c:5b:5d:2c:67:ca:ed:76:bf:d5:bd:37:2b:87:c8:58:c1:
         70:52:ce:d7:8f:d5:da:36:aa:94:12:3e:87:14:1e:46:ea:65:
         4f:03:8b:72:52:92:7b:e3:46:05:5b:ca:3d:fa:e9:41:8b:ed:
         8f:7d:c8:7a:19:c6:92:4d:b8:61:20:cc:23:5a:a7:6d:6e:e5:
         7a:86:c3:2f:1f:09:f2:b3:e1:e1:9a:e7:0a:d3:10:a3:0c:0a:
         b6:50:d8:13:f2:3b:61:13:db:45:91:8a:12:c3:df:87:cd:62:
         d1:6b:b1:bb:d5:dd:d9:4d:26:b8:74:21:43:31:f3:a6:a5:09:
         26:5e:a3:d1:83:42:a9:57:48:89:23:8a:4a:16:f3:13:5f:83:
         9d:6e:8f:48:56:52:ea:66:ab:9c:ec:d8:90:44:2e:06:ff:9e:
         77:6d:22:6e:e2:a4:ae:88:45:7f:d6:a7:60:b4:72:6e:0d:b7:
         90:60:45:d6:61:6c:40:b8:30:4c:c7:6e:fc:d4:fe:ee:17:5d:
         88:30:a6:7d:85:78:4d:e4:45:e0:9b:47:ff:99:02:c7:69:71:
         80:dc:0c:d3:8d:0e:94:c3:04:0b:77:e2:1c:be:e1:9a:03:43:
         c0:a9:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:18 2026 by rpki-client