Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
File:                     59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json)
Hash identifier:          qRNI4L7zmlpXbeAaVD22dEnVIek+tsFzHrt9ZsjgEfU=
Subject key identifier:   CD:79:DD:5A:55:E4:77:5A:DA:3A:D6:A9:64:26:E5:FA:F6:CB:B8:60
Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
Certificate issuer:       /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Certificate serial:       2BDA29B912C80C41031BC85B2965DDD72AE3E1CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 07:39:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:34:22 +0000
Manifest next update:     Sun 14 Jun 2026 11:12:22 +0000
Files and hashes:         1: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: lMYKp7WIQpxsL1mufBp0sKor3pCeqck1mex4TJ3W/Rs=)
                          2: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
                          rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:da:29:b9:12:c8:0c:41:03:1b:c8:5b:29:65:dd:d7:2a:e3:e1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
        Validity
            Not Before: Jun 13 07:34:22 2026 GMT
            Not After : Jun 14 11:12:22 2026 GMT
        Subject: CN=CD79DD5A55E4775ADA3AD6A96426E5FAF6CBB860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:80:b4:db:c1:04:f3:d8:12:aa:9e:d1:36:
                    a8:7d:28:fe:0f:46:db:95:e9:da:12:ba:2e:95:75:
                    72:38:75:3e:ab:0a:e0:97:39:46:42:62:c3:81:8a:
                    95:89:50:6f:8c:6b:25:28:ba:89:00:5b:c0:1d:d3:
                    74:69:fa:1b:e9:59:d6:2c:02:d1:5e:67:2c:ab:48:
                    69:23:be:7f:76:47:2e:15:d3:a2:63:1c:16:4c:e6:
                    f0:66:fc:79:c3:06:00:9b:2b:df:56:bf:2a:d9:73:
                    a4:de:c7:50:3f:2e:49:e9:a6:a7:a2:01:33:78:77:
                    37:1d:69:d5:07:3d:48:b9:a7:59:34:16:58:2f:5a:
                    b4:cd:92:9e:fa:21:80:6e:f7:6a:52:56:56:7c:9a:
                    0b:97:b8:70:05:ec:cc:48:77:81:10:53:9a:be:d9:
                    ad:e5:3f:b1:25:4f:77:e6:0b:c5:c9:30:90:2a:72:
                    fa:5d:8f:ed:5a:f8:8c:36:57:bd:80:fd:e7:00:ac:
                    60:4e:da:2a:80:0e:18:66:cc:fe:54:03:97:e2:67:
                    e5:72:09:94:01:f7:72:ae:44:71:a8:43:33:5d:24:
                    d0:c0:68:ee:a0:37:06:20:4a:25:ba:03:ce:4b:3a:
                    2c:45:83:95:19:0f:ac:fc:39:c3:20:1f:47:d1:37:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:DD:5A:55:E4:77:5A:DA:3A:D6:A9:64:26:E5:FA:F6:CB:B8:60
            X509v3 Authority Key Identifier:
                keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:70:d0:1f:e3:24:5f:9e:fd:a3:3d:87:37:0a:fe:3a:e2:
         0f:d1:14:6d:4f:a1:78:bc:dc:3b:d2:aa:f2:f9:76:2f:46:bf:
         a4:60:3e:fd:dc:de:2c:a5:a6:eb:db:4b:a8:ca:2a:dc:ff:6d:
         09:9e:ee:5d:f0:53:88:23:2a:4c:49:68:c6:28:c3:6a:81:28:
         25:aa:06:59:ae:3d:e3:b9:ae:1a:7d:9b:ff:bd:07:70:f0:d4:
         e6:8f:39:d8:31:2a:af:bc:2d:4e:0c:dc:cb:23:40:44:85:0c:
         8b:25:ee:7b:2b:3b:c5:fe:db:6f:a9:30:42:05:5d:73:97:01:
         de:cb:c4:f3:47:75:19:3d:6b:26:96:b1:bb:a1:72:9b:a6:0e:
         06:98:c0:ae:4d:0a:07:8a:8d:c6:ec:79:e7:90:74:05:8d:a1:
         4a:08:5c:2d:84:45:eb:57:e4:49:95:ce:d6:89:d6:77:2c:2d:
         70:cc:42:b4:17:8d:65:8e:40:30:46:22:3e:6c:61:88:e2:09:
         ce:f9:a5:93:0a:40:8e:46:e6:e0:6d:81:10:d9:d7:6f:2d:de:
         c9:3a:56:f6:c2:5f:0c:a8:38:84:32:e0:f4:4f:17:87:78:9d:
         ea:a6:6b:60:fc:31:a1:8f:f9:f0:6b:82:77:18:82:bf:c7:e7:
         75:1c:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:57 2026 by rpki-client