Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
File:                     D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json)
Hash identifier:          YTQkZ/nha6l1AikKIk1xMw4TzbHt7VF6qL+iTXQoH2Q=
Subject key identifier:   ED:25:1D:A5:B1:A8:03:58:A6:9A:45:ED:F4:D4:76:8C:01:F0:13:40
Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
Certificate issuer:       /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Certificate serial:       7741CD8CB4491DB5FC84CF37E97598406146D947
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 08:07:58 +0000
Manifest this update:     Tue 28 Jul 2026 08:02:58 +0000
Manifest next update:     Wed 29 Jul 2026 10:44:58 +0000
Files and hashes:         1: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=)
                          2: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: 8ChYqAes2pWw+m5gMnCxEF54uNm1cF+s6fPrJ9poRcY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
                          rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:41:cd:8c:b4:49:1d:b5:fc:84:cf:37:e9:75:98:40:61:46:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
        Validity
            Not Before: Jul 28 08:02:58 2026 GMT
            Not After : Jul 29 10:44:58 2026 GMT
        Subject: CN=ED251DA5B1A80358A69A45EDF4D4768C01F01340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:e4:d9:83:de:92:a5:76:b1:5a:08:13:9b:
                    06:61:d4:15:37:a5:a1:5d:ea:24:6c:85:31:1a:0b:
                    e5:4d:88:2e:48:57:00:06:c9:5e:e2:83:48:fc:a5:
                    c2:ae:a3:e2:2e:07:a0:b1:5b:dd:03:40:4a:02:53:
                    de:29:de:31:af:62:53:21:f6:b9:5e:9f:f0:23:6f:
                    99:41:5f:55:36:64:45:c6:3c:dc:8c:17:94:01:a3:
                    39:3b:67:7a:f6:98:1d:3d:7e:cb:6f:2d:b4:7d:56:
                    33:73:12:ed:95:32:ef:3d:55:c0:8e:d5:45:ab:47:
                    a0:fc:51:c7:4d:16:3d:a2:95:85:6c:9d:a0:33:4d:
                    09:a4:e2:47:26:f2:a4:fd:21:4d:e2:16:b6:3a:5f:
                    33:62:fa:fd:e3:2f:94:1c:e4:82:d1:cc:93:1c:af:
                    86:3e:0b:6a:2c:3c:74:b0:a1:9a:f2:53:9e:dc:05:
                    8e:1b:5e:8b:4d:48:ed:a3:f3:13:33:77:f5:3b:4c:
                    8d:ed:9a:2e:10:bf:9c:c7:a4:28:96:03:aa:01:9c:
                    a7:27:63:9d:61:53:56:45:60:9a:45:4e:40:ab:95:
                    cb:ce:c0:de:76:17:06:3c:1a:0a:d8:8a:b2:56:4c:
                    44:f3:92:92:a1:ae:14:da:7f:41:95:c2:9f:e3:ab:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:25:1D:A5:B1:A8:03:58:A6:9A:45:ED:F4:D4:76:8C:01:F0:13:40
            X509v3 Authority Key Identifier:
                keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:88:ce:59:d7:78:2b:50:63:32:1b:55:c3:9e:dd:4a:c8:0f:
         59:69:8a:c1:e9:e8:7a:eb:b2:34:4e:0d:a8:86:38:ee:84:f0:
         d8:b4:e9:93:f6:a1:06:8e:05:ea:72:97:7d:b2:71:80:cf:32:
         93:45:f1:e8:62:11:f3:56:de:b8:71:4e:ae:7d:63:f2:03:8e:
         82:00:8d:c4:e6:14:12:29:00:a1:38:eb:3d:14:0b:a1:e7:42:
         0a:ef:be:74:9b:04:b3:eb:87:bb:96:31:ed:38:fd:2b:7e:e5:
         ef:76:d2:86:45:a9:d3:75:13:34:fa:ae:c7:2e:2d:a8:dc:f9:
         9d:96:6e:21:2b:c4:59:6c:d3:88:fb:de:c8:d5:39:29:13:a4:
         49:67:9c:dd:a1:8a:f8:36:18:66:18:7f:b0:a8:1d:d1:f6:34:
         ee:e5:44:17:cc:a9:25:47:c8:1a:0e:23:59:85:34:8d:56:60:
         cc:c6:93:61:bc:82:b1:5c:6e:1a:43:68:bc:51:4c:1c:59:30:
         8f:d4:bb:8a:bc:a6:af:3e:32:da:dc:69:ba:a8:e3:d0:fd:06:
         73:d5:e7:8c:e9:57:60:86:60:cf:81:eb:7a:3e:b4:c5:13:18:
         2d:c6:f1:27:26:95:a4:96:eb:f7:bb:9e:89:63:7e:76:87:3f:
         8d:6f:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:31 2026 by rpki-client