Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File:                     1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier:          g4WrrL6he0aShpfKUCBKG6WckpMwyk65NqTSo0ggunE=
Subject key identifier:   9B:72:BF:38:D7:BC:E0:6C:6D:4B:3C:C5:3C:B4:64:C2:64:0E:CE:01
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       0884ED7AFA6F9620CF48031DF71165AE2D6E5C81
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number:          35
Signing time:             Fri 12 Jun 2026 19:57:59 +0000
Manifest this update:     Fri 12 Jun 2026 19:52:59 +0000
Manifest next update:     Sat 13 Jun 2026 22:17:59 +0000
Files and hashes:         1: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
                          2: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
                          3: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
                          4: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
                          5: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
                          6: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
                          7: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: HFs4C8Px9P1UPsJV/8u3caBWxdAZGTo4SOoNJyvgFBY=)
                          8: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
                          9: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
                          10: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:84:ed:7a:fa:6f:96:20:cf:48:03:1d:f7:11:65:ae:2d:6e:5c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: Jun 12 19:52:59 2026 GMT
            Not After : Jun 13 22:17:59 2026 GMT
        Subject: CN=9B72BF38D7BCE06C6D4B3CC53CB464C2640ECE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:76:b9:6e:54:8e:ce:a5:a9:9c:95:6d:ae:
                    93:78:34:fc:37:5c:f7:4f:92:b2:e4:2a:32:b9:38:
                    8f:f5:c0:c3:b4:11:ff:10:5e:04:2e:1d:4d:d4:7c:
                    94:43:4d:98:92:22:1d:3b:09:13:d2:01:32:6c:e8:
                    37:19:11:b7:89:af:47:b1:d5:b2:b7:51:f1:91:18:
                    d3:9b:2f:00:06:80:71:0e:e1:79:6b:da:99:84:aa:
                    5b:45:0e:dc:7e:e2:26:d0:51:95:06:2d:0b:69:00:
                    63:18:14:8f:fc:f9:a9:32:06:a6:22:ca:fc:c2:16:
                    0d:f3:53:1f:e1:02:c2:81:b6:08:d1:10:61:b5:ec:
                    6f:f9:3b:4e:6e:29:aa:6a:41:bd:d9:27:34:2b:6d:
                    a1:ab:06:70:b7:f5:82:ed:58:3a:f9:ca:b9:e1:97:
                    60:e2:60:6e:15:2f:92:a1:1f:35:f9:94:76:bb:4d:
                    7e:05:21:c1:bb:26:4c:40:aa:b9:ec:4e:0a:d8:52:
                    67:f4:57:49:fe:e6:76:d9:66:cc:1d:41:bf:fe:94:
                    33:20:87:36:2a:2c:78:9e:40:71:0f:96:79:6c:be:
                    62:ec:7e:2d:56:ce:d9:50:91:93:76:ec:e9:50:05:
                    43:a1:cf:91:b1:4d:b5:4b:2f:6d:6e:83:3c:5b:bf:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:BF:38:D7:BC:E0:6C:6D:4B:3C:C5:3C:B4:64:C2:64:0E:CE:01
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:15:f0:79:c1:24:eb:8f:ad:5d:e0:a9:cb:ce:80:a8:97:37:
         92:d7:ea:b4:26:f8:41:be:a8:35:23:23:48:20:7e:e9:50:b5:
         a4:4a:ee:ba:47:c3:8a:fd:a4:45:9a:84:17:da:d0:c6:56:f0:
         88:aa:fe:8d:ad:0d:f8:aa:cb:b5:8b:8d:9c:91:51:ce:75:01:
         f5:96:ac:9d:fb:8e:23:8a:5e:90:44:7b:b8:e9:19:dc:c4:b4:
         ef:79:23:bc:31:7a:91:bd:05:0c:44:39:85:68:65:e7:b9:77:
         dd:91:e0:71:a9:08:80:ec:b7:2c:4f:08:66:75:b2:9d:0f:ff:
         ec:58:77:6b:6f:6d:39:10:88:cb:54:f0:08:67:bd:81:1e:2c:
         90:c7:d6:d0:4c:7c:2e:c1:9e:6c:e2:83:56:55:af:c4:91:20:
         74:49:7e:9b:96:88:30:7e:93:58:6a:77:aa:ce:a8:8e:49:ae:
         e7:1a:0b:99:1e:84:a3:30:10:e4:bc:ce:2b:5c:73:44:2c:d5:
         49:91:56:f8:54:87:e8:66:b9:2c:bf:3a:5a:1d:f6:9f:2c:21:
         e6:1b:7c:63:af:3a:f3:02:ba:0b:17:bd:33:1c:0d:2d:3f:22:
         a5:50:fe:02:69:f7:b6:1e:67:84:3c:2b:ca:f1:7c:da:73:73:
         98:86:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:53 2026 by rpki-client