Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.mft
File:                     51E2FA8099B147333B089016307AB2E753D7A173.mft (raw, json)
Hash identifier:          5Hh7X25f96YUA7td4/RD3EybNHxoyad6ORKXYZUfgq0=
Subject key identifier:   7A:06:0D:60:4F:A2:2C:5F:4C:D0:30:26:24:2A:43:AE:13:6C:5B:E5
Authority key identifier: 51:E2:FA:80:99:B1:47:33:3B:08:90:16:30:7A:B2:E7:53:D7:A1:73
Certificate issuer:       /CN=51E2FA8099B147333B089016307AB2E753D7A173
Certificate serial:       1B5C495C8F56E7884B3E0F17339106B636D96192
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.mft
Manifest number:          BD
Signing time:             Mon 28 Sep 2026 18:02:56 +0000
Manifest this update:     Mon 28 Sep 2026 17:57:56 +0000
Manifest next update:     Tue 29 Sep 2026 19:52:56 +0000
Files and hashes:         1: 51E2FA8099B147333B089016307AB2E753D7A173.crl (hash: 4jp5DoEgRLY3oQ9OP7aw1GO0V85pFrSripWj5JOLy6U=)
                          2: 3130332e3232382e3231362e302f32322d3234203d3e20313331353837.roa (hash: sXBxbjakpXFkTZ1n6Fei2P2V/4rzqWLcVpthiMmBo0g=)
                          3: 323430303a643538303a3a2f33322d3438203d3e20313331353837.roa (hash: ULBk5RtRIix1K4e4/rbFVQmkeCcmsGzxUxaSX6qmFkc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.crl
                          rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:49:5c:8f:56:e7:88:4b:3e:0f:17:33:91:06:b6:36:d9:61:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E2FA8099B147333B089016307AB2E753D7A173
        Validity
            Not Before: Sep 28 17:57:56 2026 GMT
            Not After : Sep 29 19:52:56 2026 GMT
        Subject: CN=7A060D604FA22C5F4CD03026242A43AE136C5BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:5b:c3:c1:a2:af:05:09:d8:6d:4c:3f:06:
                    ff:72:a5:93:ab:ed:fd:e1:b0:2a:1d:dc:50:48:c4:
                    51:b4:4c:29:17:7c:14:0b:00:eb:7f:6b:3f:6e:51:
                    63:d3:8f:59:47:b1:9c:af:54:b3:52:78:f2:61:1c:
                    28:fc:d8:1e:a2:3c:64:26:90:7b:e9:02:69:e1:b4:
                    9a:da:42:4f:c9:ea:bc:5a:82:d1:04:7f:e2:7a:a9:
                    67:c7:d4:f3:8a:5f:28:34:97:71:8b:82:74:04:46:
                    40:8f:2f:13:f6:5f:eb:4e:8a:8a:a1:1e:6d:db:00:
                    7b:6e:ee:8b:54:c6:dd:ec:e0:a2:c7:89:35:4f:e6:
                    c9:33:35:b7:ff:14:05:67:2f:e6:85:03:79:6a:d6:
                    1c:32:9d:f0:84:42:cd:ba:dc:f8:c4:0b:8d:00:43:
                    b6:0d:0c:82:fe:51:58:e5:30:ee:49:4b:50:53:62:
                    85:88:83:9e:f4:7a:f0:c6:96:65:28:c0:dd:12:34:
                    9c:ca:fc:b1:68:42:60:33:55:8c:fd:d2:95:38:ca:
                    28:f1:d9:fe:4f:9c:19:01:cc:ed:e2:28:83:a8:1b:
                    5d:20:ad:ab:7e:a3:50:48:3b:0b:36:c6:fb:30:57:
                    a5:dd:fc:ae:0c:9f:1e:9f:0d:73:d3:39:54:79:5e:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:0D:60:4F:A2:2C:5F:4C:D0:30:26:24:2A:43:AE:13:6C:5B:E5
            X509v3 Authority Key Identifier:
                keyid:51:E2:FA:80:99:B1:47:33:3B:08:90:16:30:7A:B2:E7:53:D7:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:96:58:f7:0d:4b:a6:1c:ee:e7:6a:5d:83:3f:38:bd:c8:3d:
         11:b0:39:d7:86:84:0f:6a:b5:3b:1d:3f:6f:29:80:25:12:cb:
         e2:d0:87:98:c3:7e:43:e1:88:4f:cf:56:f5:c9:64:b5:ef:65:
         a5:16:8e:50:6e:30:fc:b2:4c:90:18:35:27:b2:2b:9e:12:46:
         d3:f0:25:60:de:50:a2:85:02:d0:cb:32:7d:4c:47:33:eb:b9:
         d2:3b:b2:86:90:42:fa:3a:a5:64:dc:48:03:33:80:a8:8e:79:
         9b:e7:0a:40:65:a6:29:5d:70:28:54:86:36:56:41:73:bf:1e:
         19:78:0f:bc:f9:8f:73:60:cb:12:b8:bf:ec:e9:47:8e:f5:68:
         ba:41:09:33:7a:d8:23:4f:d8:bc:24:6a:61:52:66:e0:32:51:
         e5:c3:06:cf:32:33:be:05:80:8f:d4:02:a5:73:d7:8f:0d:d0:
         f4:a9:38:06:3f:94:83:af:70:d0:9b:33:18:7d:05:6b:81:a5:
         0b:d6:1a:1c:52:02:96:4f:5f:5d:99:4b:8c:09:f1:37:50:db:
         7d:4f:1d:b7:c1:b6:b3:61:0a:90:15:60:89:8f:3f:3f:ee:da:
         24:65:46:0b:29:c6:f8:3b:01:5c:a5:92:71:bf:8d:b4:c3:af:
         c4:53:45:e6
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUG1xJXI9W54hLPg8XM5EGtjbZYZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFFMkZBODA5OUIxNDczMzNCMDg5MDE2MzA3QUIyRTc1
M0Q3QTE3MzAeFw0yNjA5MjgxNzU3NTZaFw0yNjA5MjkxOTUyNTZaMDMxMTAvBgNV
BAMTKDdBMDYwRDYwNEZBMjJDNUY0Q0QwMzAyNjI0MkE0M0FFMTM2QzVCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN2FvDwaKvBQnYbUw/Bv9ypZOr
7f3hsCod3FBIxFG0TCkXfBQLAOt/az9uUWPTj1lHsZyvVLNSePJhHCj82B6iPGQm
kHvpAmnhtJraQk/J6rxagtEEf+J6qWfH1POKXyg0l3GLgnQERkCPLxP2X+tOioqh
Hm3bAHtu7otUxt3s4KLHiTVP5skzNbf/FAVnL+aFA3lq1hwynfCEQs263PjEC40A
Q7YNDIL+UVjlMO5JS1BTYoWIg570evDGlmUowN0SNJzK/LFoQmAzVYz90pU4yijx
2f5PnBkBzO3iKIOoG10grat+o1BIOws2xvswV6Xd/K4Mnx6fDXPTOVR5XimtAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUegYNYE+iLF9M0DAmJCpDrhNsW+UwHwYDVR0j
BBgwFoAUUeL6gJmxRzM7CJAWMHqy51PXoXMwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVHQUlD
QkMvMC81MUUyRkE4MDk5QjE0NzMzM0IwODkwMTYzMDdBQjJFNzUzRDdBMTczLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzUxRTJGQTgwOTlCMTQ3MzMzQjA4OTAxNjMw
N0FCMkU3NTNEN0ExNzMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRUdBSUNCQy8wLzUxRTJGQTgw
OTlCMTQ3MzMzQjA4OTAxNjMwN0FCMkU3NTNEN0ExNzMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYllj3
DUumHO7nal2DPzi9yD0RsDnXhoQParU7HT9vKYAlEsvi0IeYw35D4YhPz1b1yWS1
72WlFo5QbjD8skyQGDUnsiueEkbT8CVg3lCihQLQyzJ9TEcz67nSO7KGkEL6OqVk
3EgDM4Cojnmb5wpAZaYpXXAoVIY2VkFzvx4ZeA+8+Y9zYMsSuL/s6UeO9Wi6QQkz
etgjT9i8JGphUmbgMlHlwwbPMjO+BYCP1AKlc9ePDdD0qTgGP5SDr3DQmzMYfQVr
gaUL1hocUgKWT19dmUuMCfE3UNt9Tx23wbazYQqQFWCJjz8/7tokZUYLKcb4OwFc
pZJxv420w6/EU0Xm
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:24 2026 by rpki-client