Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
File:                     E5067314CFC65098386A97E8110F787E073CA51E.mft (raw, json)
Hash identifier:          D4Q0R442a6XMMpyAcaYoF/jwe5kcVBKAOp6j+YvznDE=
Subject key identifier:   03:B2:52:C2:75:D2:94:46:3C:C6:A1:5C:26:95:74:F9:CD:68:4E:DB
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       092E18E2126D47E10AB4185B1B2FFEEE58B9C070
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
Manifest number:          BA
Signing time:             Tue 22 Sep 2026 05:13:47 +0000
Manifest this update:     Tue 22 Sep 2026 05:08:47 +0000
Manifest next update:     Wed 23 Sep 2026 06:32:47 +0000
Files and hashes:         1: 3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa (hash: gzX0arRtCBcka2v1mOO4ayrFbmUFgs9F0NtG28kYri0=)
                          2: 3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa (hash: uSpjdhqYU2AVviwfm2aaPmn4kfZ1rmuQUL2shYvXM4Q=)
                          3: E5067314CFC65098386A97E8110F787E073CA51E.crl (hash: olqXdGurc1SfYS89JZZLq0fgWWS3OikVpQv61hP9h5Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 06:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2e:18:e2:12:6d:47:e1:0a:b4:18:5b:1b:2f:fe:ee:58:b9:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Sep 22 05:08:47 2026 GMT
            Not After : Sep 23 06:32:47 2026 GMT
        Subject: CN=03B252C275D294463CC6A15C269574F9CD684EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:31:01:fb:3a:01:e1:2b:d6:48:d4:b4:8f:
                    65:f1:a6:01:bb:8f:83:6d:9c:d8:3a:e0:21:ac:d2:
                    f8:9c:a5:d2:32:33:47:01:c8:14:af:de:7c:b7:2a:
                    4b:d1:16:ff:0e:d2:e0:2f:3a:31:83:63:f8:85:49:
                    2f:ff:1b:09:7f:67:22:3f:84:4d:d5:8d:93:cf:24:
                    59:ce:d1:ae:26:e0:b7:9d:5b:9d:17:f1:53:94:52:
                    ed:b9:33:8e:64:f4:c7:ba:05:db:5e:72:d8:b4:10:
                    42:0b:64:3e:17:78:a2:f3:d6:75:3b:fd:42:c5:1a:
                    ec:2d:f8:50:83:c2:b7:1d:c7:94:37:08:d1:92:ca:
                    a5:f8:22:5d:8c:c7:64:a1:22:79:60:39:2f:07:73:
                    02:25:d6:fa:64:b5:01:1a:b9:76:52:00:b3:3b:ba:
                    3a:cd:a5:16:f0:b9:77:d9:b0:98:7e:56:67:52:16:
                    2c:68:d6:81:55:f4:07:32:6d:5b:59:a7:cf:9a:76:
                    4d:3a:99:56:70:c2:a6:a9:2b:95:e5:77:0e:1e:16:
                    48:ff:bf:ce:5a:02:12:73:d1:bd:6c:35:73:ed:cd:
                    db:43:1e:e3:4d:12:62:88:7c:73:8e:24:37:7a:9e:
                    fc:2d:42:4a:f0:20:c5:91:09:23:8f:b6:63:9a:9c:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:52:C2:75:D2:94:46:3C:C6:A1:5C:26:95:74:F9:CD:68:4E:DB
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:26:f4:48:f0:be:58:25:3a:ec:10:13:65:0e:2e:f6:71:
         0f:d3:8d:93:80:fa:8c:4a:a0:c4:21:b3:6b:e3:68:23:3e:a2:
         04:a7:8f:6c:03:6e:b2:02:98:40:17:2e:aa:3f:12:d1:6c:1a:
         2f:74:ee:ec:21:a8:df:ce:7a:5d:5c:82:5c:22:ff:90:43:18:
         9d:e6:eb:34:c8:4f:3d:7d:f0:dd:5e:91:24:aa:06:01:b1:a7:
         d8:45:3f:ac:4a:e9:61:a3:d3:51:0b:17:8d:41:9e:74:a3:86:
         0d:5f:c4:a9:26:94:44:d9:59:47:d3:81:d3:26:ef:a2:ca:0c:
         67:a8:84:95:76:31:d6:d3:f2:de:90:81:bb:4d:51:06:bd:55:
         a4:14:15:15:45:00:85:3a:a3:52:78:62:6e:d4:3f:1f:13:be:
         b1:77:c6:e7:ed:54:58:8a:9e:b1:4e:e8:a6:fd:e0:32:bf:20:
         6d:85:5e:e7:2d:e9:a2:9d:57:5d:29:b1:1a:7a:2c:b3:7d:4d:
         06:d9:ee:79:ac:e1:67:5d:b3:1a:01:49:2e:24:e4:5c:2b:e7:
         e3:22:0e:d0:1f:8c:de:2f:47:59:7b:02:3b:29:c7:96:c5:54:
         20:88:51:70:6f:fb:c4:fd:3b:9d:8b:29:d7:86:e2:bf:05:5f:
         fb:c0:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:45 2026 by rpki-client