Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
File:                     B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json)
Hash identifier:          QFrevJKb9ReCKtAPh962N1bz3hJYn9l0CyhBoWcrvfc=
Subject key identifier:   0A:34:B8:E1:04:35:92:02:E1:FB:08:02:E3:E3:EE:5A:B6:C8:17:51
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Certificate issuer:       /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial:       7B8F86C6DEDB9834948AB8380ECE90F8889335CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
Manifest number:          37
Signing time:             Tue 16 Jun 2026 14:04:54 +0000
Manifest this update:     Tue 16 Jun 2026 13:59:54 +0000
Manifest next update:     Wed 17 Jun 2026 16:05:54 +0000
Files and hashes:         1: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=)
                          2: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=)
                          3: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: OwcuCch8Xa8v88PjTbJiC5dTEWqE6AZPUwglO4WFGH4=)
                          4: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=)
                          5: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8f:86:c6:de:db:98:34:94:8a:b8:38:0e:ce:90:f8:88:93:35:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
        Validity
            Not Before: Jun 16 13:59:54 2026 GMT
            Not After : Jun 17 16:05:54 2026 GMT
        Subject: CN=0A34B8E104359202E1FB0802E3E3EE5AB6C81751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0f:0d:91:78:25:e7:39:19:9b:78:12:b6:af:
                    37:a2:e2:88:f3:d8:66:b8:1f:18:f1:bd:d0:58:21:
                    3a:09:5e:e0:ac:ac:79:b6:ac:c1:ed:e5:0a:fd:2d:
                    c1:ff:9f:84:5c:08:33:7d:e6:1d:04:f4:d2:7a:f5:
                    7e:26:79:67:9d:56:a4:fb:50:d0:13:e6:f1:35:6e:
                    0f:f3:9a:98:12:fa:0f:88:a8:12:ef:0c:7e:06:8e:
                    fb:20:90:d6:ea:02:be:18:35:ad:a1:35:f2:38:9d:
                    ea:cc:b3:8d:b2:25:24:e5:d2:af:a3:76:ea:56:ef:
                    ca:21:42:a2:0f:22:d5:b0:c7:a4:9b:2b:24:c5:6f:
                    04:33:3f:42:0d:d7:d0:09:9c:1a:7c:83:60:67:55:
                    5c:03:cd:c2:13:3d:84:40:f9:7a:48:27:cf:0e:70:
                    4a:8c:1f:e1:12:8f:c5:30:10:37:ba:6e:46:75:e2:
                    87:28:4d:2c:17:f4:ff:78:41:49:8f:76:c5:1e:63:
                    d7:8a:f6:08:46:7a:2a:7d:e7:dd:d5:ef:cf:f7:7c:
                    b9:4e:47:0e:ed:fd:88:00:63:c9:cf:96:f8:e4:51:
                    ec:a8:3b:41:c3:e6:ee:e7:79:47:04:c8:c9:78:25:
                    46:fe:ac:8e:7a:bb:fa:3f:db:52:07:24:e4:8e:f9:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:B8:E1:04:35:92:02:E1:FB:08:02:E3:E3:EE:5A:B6:C8:17:51
            X509v3 Authority Key Identifier:
                keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:a2:8a:fb:85:20:42:90:89:2c:2a:7d:4b:cc:e8:1b:4d:
         53:59:e9:46:81:35:11:f2:a9:64:56:aa:95:fe:a3:b0:21:32:
         18:01:71:35:f5:2e:57:d7:0c:01:cd:60:09:b4:e1:21:0a:38:
         fb:96:b1:cf:42:f5:95:cf:dd:7d:10:bd:22:18:2f:a9:a0:4d:
         68:35:3f:4d:9f:ed:ef:45:c2:8c:82:6f:dc:1b:91:21:82:53:
         39:c1:5d:54:3d:60:48:8a:77:09:17:27:4d:41:c3:1e:97:62:
         e4:ee:e9:cf:8b:bb:89:71:52:3b:37:59:24:43:e5:38:67:89:
         85:3e:bb:96:8e:81:06:47:c4:02:4a:8f:02:10:ae:2a:33:a7:
         13:6b:1a:7c:51:fa:f4:d6:08:ca:81:35:73:21:39:43:0e:19:
         42:6a:63:76:3a:52:f7:aa:85:1e:d4:aa:5d:74:41:56:b8:8c:
         0e:c9:f7:be:27:31:04:95:f3:7d:38:ab:7a:bf:5c:84:00:6d:
         83:f3:c3:fd:b1:58:7c:71:f6:3c:a5:bc:69:e5:57:65:91:d5:
         2d:85:13:5e:4d:b0:b8:ec:d6:66:d8:07:59:b9:2f:72:1e:ab:
         5a:db:3d:b7:d6:0e:b4:f5:48:9e:38:14:90:a2:22:a2:b6:68:
         d2:07:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:16:49 2026 by rpki-client