Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          C0Y9yzhIzE7j0rfRN/8AZ6Vb+14iJ9GSWA11RdDkJaU=
Subject key identifier:   8C:0E:ED:54:5A:89:BB:C5:5D:DE:5C:AA:EB:E3:4D:22:B8:0F:53:BF
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       54FE07B55402035F04A732ED91759C2CA2799E8B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 10:58:14 +0000
Manifest this update:     Tue 28 Jul 2026 10:53:14 +0000
Manifest next update:     Wed 29 Jul 2026 13:05:14 +0000
Files and hashes:         1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
                          2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: aps3MeJgllVJPHI+nPg9N+P98BtPXKCyu+2+CvDI7C0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:07:b5:54:02:03:5f:04:a7:32:ed:91:75:9c:2c:a2:79:9e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: Jul 28 10:53:14 2026 GMT
            Not After : Jul 29 13:05:14 2026 GMT
        Subject: CN=8C0EED545A89BBC55DDE5CAAEBE34D22B80F53BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:a6:25:d9:45:c6:ba:fc:e9:f1:bc:5a:3a:
                    57:1f:d0:94:ce:9f:7f:b8:95:1e:17:78:17:57:92:
                    bd:58:ae:e9:38:d6:de:fa:2e:e2:40:d7:2b:28:98:
                    5c:d5:85:00:ad:d7:bf:e9:ff:2f:9a:c8:8d:61:7f:
                    77:1d:71:2d:69:e1:83:e9:f1:bd:a1:cd:9e:ec:bb:
                    9a:f3:6e:ed:83:71:ce:dc:2d:6d:b9:6e:56:c0:3a:
                    a3:81:93:ad:62:5c:12:df:73:59:d0:ae:61:d8:8c:
                    58:0e:cb:ab:a5:a8:78:df:da:2b:35:15:09:ad:f5:
                    5e:5b:79:bf:b4:ee:26:68:92:18:6d:55:12:62:37:
                    7e:2a:f5:bb:3c:5c:c3:e5:bd:6d:e3:ed:3a:fa:18:
                    43:1c:2a:fe:f0:66:6b:d9:a7:b0:8f:49:27:75:19:
                    93:8c:b7:81:a0:29:85:9e:85:b8:73:da:84:c1:41:
                    a5:9a:32:eb:8b:33:7f:19:55:c0:bb:7e:c4:35:0e:
                    ec:fc:5a:45:4c:85:06:cf:f1:96:cb:51:7e:d9:f5:
                    7b:17:1c:75:d4:ad:a6:e8:cb:14:cf:01:73:ed:22:
                    6b:09:86:d8:b9:31:2d:8a:d1:4e:99:e1:1f:13:57:
                    00:b6:5c:2a:e6:52:d4:d3:2b:e9:ca:06:18:cb:1d:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0E:ED:54:5A:89:BB:C5:5D:DE:5C:AA:EB:E3:4D:22:B8:0F:53:BF
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:68:1e:be:4f:14:95:ac:76:be:88:b2:86:75:bb:aa:c3:1e:
         02:a3:bd:55:0f:10:3a:6c:d6:14:f6:1f:26:ee:0a:f3:e1:4b:
         58:5d:f8:08:41:62:79:ef:ce:ac:43:40:e7:c4:36:1a:68:6a:
         cc:2e:ac:e5:07:7e:8b:4d:96:87:19:4e:a5:f5:b4:3a:f1:d8:
         e4:29:d6:ff:78:72:c2:3b:6d:98:c7:ac:d1:f8:85:6c:52:51:
         4e:9f:c8:7d:78:6e:d3:16:67:9c:1e:c1:86:30:c6:6a:1a:4e:
         12:bd:a5:88:61:65:b4:56:86:fd:ad:cf:c0:ee:a0:d8:a9:36:
         ce:c5:fb:1b:28:f7:f4:fc:05:d5:fb:e5:55:be:32:43:40:a8:
         9a:37:97:7d:db:66:37:78:f6:43:74:1c:04:11:b4:46:31:73:
         c1:e2:91:1c:93:13:29:53:a8:9e:5b:36:40:66:e2:15:5c:ba:
         ef:bd:94:22:81:36:ca:89:72:47:d4:b7:0c:72:bc:e2:33:b5:
         9a:a5:3d:2d:1d:5f:df:04:2e:aa:c4:80:fb:8e:f1:12:2b:36:
         6b:2b:b1:f6:3f:95:61:d6:7d:9d:7c:a2:77:4f:59:6b:43:ff:
         0b:29:6f:be:ec:a7:87:db:d0:eb:81:0e:5c:42:03:6f:63:76:
         81:76:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:26 2026 by rpki-client