Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
File:                     E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft (raw, json)
Hash identifier:          IYQCBRoVov3zMKY5s+897GyglKaF6qM8CCsB66ihFw0=
Subject key identifier:   68:81:B8:C2:1C:AB:AD:6A:E3:6E:4D:D4:9A:17:4E:61:60:D4:42:A7
Authority key identifier: E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20
Certificate issuer:       /CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
Certificate serial:       7895136C86C15C4C39AE90AB29C3FDCE7B93B7C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
Manifest number:          FD
Signing time:             Sat 14 Nov 2026 21:52:09 +0000
Manifest this update:     Sat 14 Nov 2026 21:47:09 +0000
Manifest next update:     Mon 16 Nov 2026 00:05:09 +0000
Files and hashes:         1: E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl (hash: dlnyJIJMjExLHSV+I4D0W8Vgu5rFf0Z1F/56xoHuitE=)
                          2: 3130332e3131372e3133342e302f32332d3234203d3e2037343833.roa (hash: v0WNTHaZK/tXZUZtc9xvgMZJh8Heyjw7a2SSkraB7p8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl
                          rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 00:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:95:13:6c:86:c1:5c:4c:39:ae:90:ab:29:c3:fd:ce:7b:93:b7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B5A3615C62BA0DA89B6CA2A62E20CD80008620
        Validity
            Not Before: Nov 14 21:47:09 2026 GMT
            Not After : Nov 16 00:05:09 2026 GMT
        Subject: CN=6881B8C21CABAD6AE36E4DD49A174E6160D442A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:d5:24:98:a5:6e:18:b9:f5:b2:49:05:fc:
                    30:3c:48:6f:b9:6b:ba:8c:d9:f5:dd:61:56:24:e4:
                    78:96:69:23:f6:bd:b7:ad:8f:1a:f6:cc:2b:24:a6:
                    ac:21:d8:ae:5e:84:2b:e4:2e:cb:89:2a:71:75:94:
                    1b:60:9f:20:50:23:87:f8:97:4c:a0:ba:73:cd:b4:
                    11:eb:37:cc:2f:74:9e:4a:cd:bc:3b:bb:c7:99:3a:
                    d9:25:e5:73:9e:82:21:90:a7:72:32:29:72:5e:6e:
                    e4:e6:3e:05:e1:d2:48:fc:57:dc:8e:96:46:e1:29:
                    67:8e:7a:26:15:4d:b9:27:83:a3:e2:0d:fb:89:e8:
                    6b:5e:22:77:c7:a4:66:3b:52:f8:dc:06:8a:9e:c1:
                    69:69:23:83:dc:51:88:57:69:21:7d:3f:3b:1f:3b:
                    9e:ab:fb:2a:69:64:15:ce:f6:f8:70:0e:16:cf:53:
                    04:32:e5:a3:f9:90:2a:fc:99:c9:5e:2a:80:24:ab:
                    5d:9d:22:60:c3:07:4a:68:17:07:dc:5f:17:cf:e7:
                    e6:e4:65:24:94:94:9c:2c:5e:d2:23:78:95:c9:f0:
                    2c:f1:f3:34:54:b4:5e:80:4f:8a:a4:6b:3d:3b:7e:
                    11:8c:99:9d:af:cc:39:11:9d:26:8d:58:38:54:81:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:B8:C2:1C:AB:AD:6A:E3:6E:4D:D4:9A:17:4E:61:60:D4:42:A7
            X509v3 Authority Key Identifier:
                keyid:E7:B5:A3:61:5C:62:BA:0D:A8:9B:6C:A2:A6:2E:20:CD:80:00:86:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIL/0/E7B5A3615C62BA0DA89B6CA2A62E20CD80008620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:67:51:46:6f:d5:24:70:af:87:2b:5d:2e:72:e6:92:34:
         32:ca:85:f6:d7:3f:d9:b5:41:94:2f:00:ba:bb:dd:ed:86:26:
         38:43:c1:9c:a3:83:25:84:ea:1f:96:b2:00:81:78:17:e0:3f:
         54:ac:0e:7d:9e:95:e8:12:ec:21:a4:90:53:1f:4c:5f:f7:88:
         2d:66:75:a5:a6:8b:2c:16:3e:93:65:05:75:e3:3f:db:b9:c8:
         15:5a:2a:6c:aa:c6:bc:45:3e:ab:74:52:57:2d:b9:51:ef:2d:
         86:3b:f8:ad:03:00:f7:08:13:fa:f8:ba:42:db:46:4b:90:ee:
         fd:be:41:6b:7b:cb:9a:bd:ef:7e:ee:dc:3b:46:48:cf:cc:c4:
         01:5f:18:51:f0:ce:89:de:a1:bd:bb:dd:be:84:7c:a7:7a:74:
         8f:b0:00:49:0d:af:72:e3:cb:06:5b:d6:2b:16:16:81:bc:5e:
         3f:ef:32:d8:23:dd:47:3a:60:a3:63:53:d6:45:96:46:9f:af:
         3a:dc:f7:62:53:31:9c:96:2a:15:e0:cc:7a:55:6d:ff:08:67:
         96:36:07:19:c4:79:a7:38:36:5f:dd:4d:1c:53:f8:f1:07:2b:
         2e:aa:07:9f:15:f5:a8:dc:ac:63:14:e1:0f:4d:79:61:1a:5e:
         93:e9:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:28:50 2026 by rpki-client