Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
File:                     59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json)
Hash identifier:          jUlyyWeCuD0AntAXna0t+5gQucwRC61KJ3o5lCFjUf4=
Subject key identifier:   39:06:0F:95:B5:3D:EE:71:0A:23:79:0D:43:43:EB:3C:68:01:FF:CA
Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
Certificate issuer:       /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Certificate serial:       5F3D7A3C4BD96A4193DAC746CFB6A10A1BA0C884
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 11:58:26 +0000
Manifest this update:     Tue 28 Jul 2026 11:53:26 +0000
Manifest next update:     Wed 29 Jul 2026 14:04:26 +0000
Files and hashes:         1: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: 2bNg7JbXvqfi19f6IskPcGXB+M2ECPL/QHLlsmdmGek=)
                          2: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
                          rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3d:7a:3c:4b:d9:6a:41:93:da:c7:46:cf:b6:a1:0a:1b:a0:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
        Validity
            Not Before: Jul 28 11:53:26 2026 GMT
            Not After : Jul 29 14:04:26 2026 GMT
        Subject: CN=39060F95B53DEE710A23790D4343EB3C6801FFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:12:cc:27:c2:e7:20:55:aa:cc:86:e0:3c:
                    ee:27:29:d7:21:76:51:dd:65:3b:ca:3a:d6:3d:b4:
                    9d:6c:74:23:32:79:e1:d9:c5:11:1b:0b:85:ba:0f:
                    9e:10:99:49:fe:66:79:b5:24:b9:a2:43:0f:53:94:
                    a5:b2:de:b3:b2:8e:65:7c:46:db:8b:e4:e2:8b:bf:
                    67:6c:9b:8f:59:2b:f5:40:99:a4:8a:98:51:e8:86:
                    f6:50:bc:d5:b7:ae:0f:36:ab:4f:d7:a8:5b:0d:26:
                    49:15:e0:5e:ec:fa:a6:a6:cc:b9:ac:43:78:89:a0:
                    d0:ee:5a:e2:ee:84:29:eb:f6:3d:6e:68:91:30:3c:
                    2c:58:d2:15:5c:d1:45:04:2b:11:e0:7a:ab:14:bd:
                    5d:21:07:fb:09:13:6e:86:0f:dd:2f:0e:38:53:8d:
                    40:5c:11:37:71:27:17:33:bc:f3:56:48:08:0e:be:
                    37:47:b1:a2:8d:72:28:76:d4:59:01:b0:4d:f9:32:
                    e0:66:29:22:b5:13:27:53:19:b8:69:be:99:fc:d4:
                    65:65:94:3f:5a:95:41:34:a3:a6:3a:44:68:3e:fe:
                    54:8b:4d:0e:71:e5:06:e3:e7:08:36:f1:a0:0d:27:
                    b2:e5:b5:b0:57:f3:c9:ad:50:a2:cc:79:5b:4f:27:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:0F:95:B5:3D:EE:71:0A:23:79:0D:43:43:EB:3C:68:01:FF:CA
            X509v3 Authority Key Identifier:
                keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:f9:e9:7b:42:a8:c9:be:f6:6d:35:9d:ed:08:8d:a3:11:
         36:a6:10:99:5a:72:88:04:d2:ce:f2:e7:90:9b:ab:24:85:ed:
         96:77:79:dd:30:31:b7:94:be:80:4f:03:35:0d:df:25:de:9d:
         7d:db:1a:b3:a4:fd:df:3d:1f:f7:97:c2:f8:b0:9b:b3:cf:3c:
         0b:62:71:ee:c0:5a:bb:29:9f:07:73:10:76:81:2f:d2:db:66:
         18:9a:dd:bd:80:5e:7d:b0:99:5c:6c:4b:27:36:e7:85:2e:91:
         c0:4f:71:f5:d0:73:e6:64:9e:7a:6f:09:cf:46:f5:a4:50:4c:
         d2:ca:53:23:f5:8f:15:c6:e0:62:e8:3d:fc:de:69:70:15:42:
         20:99:2b:95:68:6b:51:cb:56:b7:e7:cf:2c:5d:98:81:34:47:
         ec:62:e3:21:53:c9:72:87:2e:ab:40:1c:b5:80:b8:6c:c3:c1:
         d0:06:74:01:6f:16:df:6e:57:a5:dd:2e:1d:36:8c:f2:bd:2d:
         8a:78:1b:46:87:c9:cb:a2:3e:92:a6:ee:b3:b5:bc:d3:fd:dd:
         8b:84:e6:c5:e8:54:90:de:cf:7d:e6:13:ca:d0:2c:85:62:2d:
         04:fc:ab:d0:41:d4:6f:72:2d:bc:dc:e9:70:8a:64:65:7f:0c:
         d7:f1:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:30 2026 by rpki-client