Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File:                     4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier:          xR3CGl8kTlbstT4lgM5pOl6a+7Ey2Nb22vUCehR76ZE=
Subject key identifier:   40:FA:AD:BE:23:B8:E9:67:7C:4C:6D:E1:82:DF:51:71:59:EA:A8:88
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer:       /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial:       6A7D6A50D85D462283BF85CBCCA1E69C433A43F0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number:          32
Signing time:             Wed 17 Jun 2026 04:21:45 +0000
Manifest this update:     Wed 17 Jun 2026 04:16:45 +0000
Manifest next update:     Thu 18 Jun 2026 05:58:45 +0000
Files and hashes:         1: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: qO8xmX+IyCOpiCT0ieXdWz75cUc/G4I+WIrgnq3zLy8=)
                          2: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
                          rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7d:6a:50:d8:5d:46:22:83:bf:85:cb:cc:a1:e6:9c:43:3a:43:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
        Validity
            Not Before: Jun 17 04:16:45 2026 GMT
            Not After : Jun 18 05:58:45 2026 GMT
        Subject: CN=40FAADBE23B8E9677C4C6DE182DF517159EAA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:02:b4:78:09:4d:32:4d:25:0e:cd:bc:98:
                    c4:5c:11:5e:ec:f2:ea:93:7e:66:63:e0:b5:c7:a5:
                    73:73:2b:45:51:db:7c:7d:43:d5:57:f7:f9:f8:ea:
                    f0:5e:e5:37:8c:03:7e:f5:47:62:9b:68:e9:75:d2:
                    b5:79:1d:95:19:5d:86:29:51:b5:9e:d5:2f:e9:fc:
                    5a:21:70:e8:58:a6:af:ce:c8:ee:ac:76:28:4d:19:
                    19:7b:ec:5f:88:35:1e:a6:b7:89:5d:6f:bf:6d:bb:
                    74:3b:8e:c1:da:19:7a:26:66:a2:26:3a:ec:25:c3:
                    6c:82:9d:68:76:91:66:8a:c7:99:89:fe:86:8c:30:
                    48:87:f7:8c:fd:1c:5b:14:61:4b:1c:43:fd:6d:c7:
                    56:63:9f:7a:6b:e6:0e:5a:75:2e:8c:0b:38:1d:da:
                    bb:c1:03:4d:62:8b:dc:e3:9f:d6:9e:11:fc:70:8c:
                    4d:43:c7:39:c7:11:86:40:b1:76:5e:0b:79:6c:90:
                    ac:c7:a9:00:7a:ac:b4:c9:6c:b2:eb:a2:6c:91:16:
                    04:80:5f:7e:58:01:2c:64:0d:fb:35:3d:3b:09:4f:
                    1f:5f:c6:26:47:16:84:14:bc:f2:d8:c8:35:21:75:
                    87:76:b7:54:bb:e5:2c:ba:5a:8d:99:d1:61:e3:f4:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:AD:BE:23:B8:E9:67:7C:4C:6D:E1:82:DF:51:71:59:EA:A8:88
            X509v3 Authority Key Identifier:
                keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:60:2f:0f:95:ec:f1:65:07:1f:0b:24:6f:87:b8:75:c8:
         2f:a7:37:43:b0:bf:89:1d:88:25:ea:a0:1e:61:56:27:84:a2:
         d9:8d:d8:35:d3:b6:91:16:52:02:95:94:d3:bc:90:4c:a2:79:
         dc:1f:6b:ba:9a:2f:97:4f:6c:b0:ce:c9:b5:21:05:6e:46:b8:
         c9:e1:3c:3e:56:3f:b3:9d:1d:25:89:2a:24:f0:55:e2:9f:b9:
         cd:e7:fb:98:ee:30:a8:b2:9d:4d:c7:88:62:8a:56:d3:94:6a:
         45:58:a5:7c:c9:2b:e5:55:53:a7:fd:b7:db:0d:e4:f6:d3:9e:
         1f:b4:af:b2:ef:3e:91:28:db:da:27:e4:b1:a2:02:01:d5:7e:
         e4:7c:12:be:cd:e2:9d:d2:95:ff:1f:d4:70:7f:ae:a0:ca:65:
         58:0e:ba:13:6b:33:bc:e3:cc:fc:65:5f:ca:7d:65:aa:f0:8c:
         db:cc:d8:b2:ba:8e:52:e2:83:64:da:cd:c1:38:8c:5b:0a:be:
         22:d9:2c:f5:04:be:e8:97:46:00:eb:ba:07:a8:8d:88:62:5b:
         a0:cc:07:9d:45:bd:40:2b:46:24:76:8a:d9:a2:b1:66:ae:a0:
         a9:76:d9:ef:e9:b8:3e:ac:d3:15:be:7f:72:f7:33:3c:d1:db:
         d7:aa:2d:ac
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUan1qUNhdRiKDv4XLzKHmnEM6Q/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0U0NDU5NkRGQjRBOTNGNDAwQTdCNTcxMjZCMzFE
NUVDNENEQTAeFw0yNjA2MTcwNDE2NDVaFw0yNjA2MTgwNTU4NDVaMDMxMTAvBgNV
BAMTKDQwRkFBREJFMjNCOEU5Njc3QzRDNkRFMTgyREY1MTcxNTlFQUE4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjAK0eAlNMk0lDs28mMRcEV7s
8uqTfmZj4LXHpXNzK0VR23x9Q9VX9/n46vBe5TeMA371R2KbaOl10rV5HZUZXYYp
UbWe1S/p/FohcOhYpq/OyO6sdihNGRl77F+INR6mt4ldb79tu3Q7jsHaGXomZqIm
Ouwlw2yCnWh2kWaKx5mJ/oaMMEiH94z9HFsUYUscQ/1tx1Zjn3pr5g5adS6MCzgd
2rvBA01ii9zjn9aeEfxwjE1DxznHEYZAsXZeC3lskKzHqQB6rLTJbLLromyRFgSA
X35YASxkDfs1PTsJTx9fxiZHFoQUvPLYyDUhdYd2t1S75Sy6Wo2Z0WHj9GFTAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUQPqtviO46Wd8TG3hgt9RcVnqqIgwHwYDVR0j
BBgwFoAURwPkRZbftKk/QAp7VxJrMdXsTNowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1RDRkUv
MC80NzAzRTQ0NTk2REZCNEE5M0Y0MDBBN0I1NzEyNkIzMUQ1RUM0Q0RBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzQ3MDNFNDQ1OTZERkI0QTkzRjQwMEE3QjU3MTI2
QjMxRDVFQzRDREEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LVENGRS8wLzQ3MDNFNDQ1OTZERkI0
QTkzRjQwMEE3QjU3MTI2QjMxRDVFQzRDREEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp0WAvD5Xs8WUH
Hwskb4e4dcgvpzdDsL+JHYgl6qAeYVYnhKLZjdg107aRFlIClZTTvJBMonncH2u6
mi+XT2ywzsm1IQVuRrjJ4Tw+Vj+znR0liSok8FXin7nN5/uY7jCosp1Nx4hiilbT
lGpFWKV8ySvlVVOn/bfbDeT2054ftK+y7z6RKNvaJ+SxogIB1X7kfBK+zeKd0pX/
H9Rwf66gymVYDroTazO848z8ZV/KfWWq8IzbzNiyuo5S4oNk2s3BOIxbCr4i2Sz1
BL7ol0YA67oHqI2IYlugzAedRb1AK0YkdorZorFmrqCpdtnv6bg+rNMVvn9y9zM8
0dvXqi2s
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:26 2026 by rpki-client