Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File:                     1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier:          1Q3pmtsdMPBK+GTPZLrUqlQI7Z03t6Fg1Kf+n4xzxzs=
Subject key identifier:   50:36:59:BC:B4:A0:61:AA:61:83:36:E6:2B:19:6C:FD:86:2F:EC:0D
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       2A1B66B7714E02001D57E4572E0B17D3492A1A09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number:          73
Signing time:             Tue 28 Jul 2026 10:13:07 +0000
Manifest this update:     Tue 28 Jul 2026 10:08:07 +0000
Manifest next update:     Wed 29 Jul 2026 11:18:07 +0000
Files and hashes:         1: 33362e35302e3234392e302f32342d3332203d3e2039393233.roa (hash: OwlqxYAj0myQK9ztjVLObp4esEpYmoKEhckHyO1Uc/4=)
                          2: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
                          3: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
                          4: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: oYYmyeHee/PYYdNtRiwfeWgHoAyLN/n2QVVdRjaqcbc=)
                          5: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
                          6: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
                          7: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
                          8: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
                          9: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
                          10: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
                          11: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1b:66:b7:71:4e:02:00:1d:57:e4:57:2e:0b:17:d3:49:2a:1a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: Jul 28 10:08:07 2026 GMT
            Not After : Jul 29 11:18:07 2026 GMT
        Subject: CN=503659BCB4A061AA618336E62B196CFD862FEC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:99:3a:2e:4f:58:25:5e:fe:f6:d2:02:63:
                    e1:a0:f1:a0:80:84:e2:5a:1c:a0:99:65:95:34:4e:
                    77:7a:4c:0b:20:db:b8:95:40:f5:25:1e:8b:06:17:
                    60:e4:01:ab:33:85:8d:5c:9e:a8:e3:48:35:75:98:
                    45:de:a8:18:e5:0b:8b:fb:80:8a:39:f2:44:e4:a4:
                    9c:a7:e8:8f:db:81:d9:e2:d9:b2:4e:7f:16:22:29:
                    7d:aa:ad:60:f9:cd:40:d5:1c:a5:df:f1:08:ef:9a:
                    df:dc:50:26:9c:8e:c5:4f:19:8f:e5:00:ac:67:1a:
                    b0:ff:b1:b7:59:a9:74:a2:7e:1d:38:c6:b8:f0:37:
                    48:cc:65:59:30:34:36:40:d5:08:ab:2c:a8:b8:44:
                    f5:57:99:69:87:ee:1c:c9:6d:ea:7e:95:3b:80:16:
                    8e:3a:01:91:99:f8:ac:cd:3e:ff:8f:b1:6b:e7:d9:
                    40:ba:27:9e:d9:7b:7f:fa:37:84:2f:0f:3d:dd:1e:
                    c8:91:14:1f:a8:35:30:95:85:88:b5:c4:5d:fb:c5:
                    e9:b0:9c:3b:87:24:a3:0d:6a:d0:f5:8f:97:5a:0f:
                    c3:ae:e8:fc:8c:72:14:a9:9b:28:c0:db:a8:93:62:
                    85:dd:7c:30:14:7f:72:8c:61:c9:89:05:ea:73:fc:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:59:BC:B4:A0:61:AA:61:83:36:E6:2B:19:6C:FD:86:2F:EC:0D
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:10:bf:4c:54:1f:77:53:93:ee:9d:1d:3c:3e:07:f8:5a:
         a6:87:c2:ed:6c:2e:f6:72:c9:59:c0:22:1f:b2:32:bc:c4:10:
         03:38:f7:4b:60:04:f5:eb:1b:a6:98:a2:a7:f1:b1:ff:c3:6c:
         ab:94:c6:3a:11:a7:ba:94:82:14:c9:f3:e0:44:10:bb:ea:9f:
         72:40:af:76:92:e8:04:3b:56:b7:8b:80:3f:01:b8:35:29:7e:
         bb:59:ac:64:74:1e:e6:3e:18:91:36:6f:05:63:b0:e0:1e:fb:
         77:99:1e:d8:f5:20:2c:2f:e2:f3:67:ff:55:08:93:79:db:fb:
         b6:69:7b:68:7e:50:e5:17:ba:76:fd:55:1d:e6:59:0f:e0:63:
         7a:92:7b:61:5f:7e:9a:ee:10:4b:d9:d7:2e:74:03:9f:54:74:
         47:11:4a:8e:72:5c:38:43:0f:4e:97:80:fb:a9:ee:84:29:1f:
         ac:9b:c5:4a:84:70:e1:d7:80:32:a7:5c:09:70:17:db:9f:eb:
         11:ca:30:9b:10:d6:ae:7c:0f:39:ce:4c:41:1a:ff:d4:8c:78:
         f6:20:dd:99:89:2b:ca:b0:3f:ab:0a:14:87:9d:03:f1:fb:6a:
         19:40:ed:1e:e7:9f:03:2a:ae:9f:ba:f6:5c:6a:24:11:ed:b2:
         f7:58:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:20 2026 by rpki-client