Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File:                     D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier:          RXtYy2aBTyVfa8UbfQpPdOjrx5DHT5l4Z87phhs3gEk=
Subject key identifier:   0A:28:9E:2A:C1:9E:9C:48:D1:62:E6:F0:6E:2E:28:D1:41:2A:68:F8
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer:       /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial:       596C28B6A4F73A40967848BD017169C305144D36
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 17:24:32 +0000
Manifest this update:     Tue 28 Jul 2026 17:19:32 +0000
Manifest next update:     Wed 29 Jul 2026 20:57:32 +0000
Files and hashes:         1: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
                          2: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: WQDn66bIbZUdnxyEwWjY2au98F1DmeNTseqN4/CpMvY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
                          rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:28:b6:a4:f7:3a:40:96:78:48:bd:01:71:69:c3:05:14:4d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
        Validity
            Not Before: Jul 28 17:19:32 2026 GMT
            Not After : Jul 29 20:57:32 2026 GMT
        Subject: CN=0A289E2AC19E9C48D162E6F06E2E28D1412A68F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:fe:d0:59:a7:33:af:7f:f1:3f:8c:41:b7:
                    69:15:e9:68:9a:b1:00:56:02:c0:ff:dc:09:a8:0a:
                    b8:1f:b0:b6:23:0a:3d:09:56:7a:31:2b:bb:cc:86:
                    37:de:b6:8b:2c:18:25:62:18:44:88:ab:62:d8:08:
                    f8:77:71:f6:41:80:08:ed:23:19:0e:5d:4a:e6:af:
                    50:93:77:a0:d0:e3:a9:e4:46:e7:16:a9:aa:a5:af:
                    60:ce:26:a5:1d:47:94:33:c2:47:7e:46:72:e0:90:
                    46:b9:06:80:b6:eb:48:8a:35:7e:a5:50:f2:44:ce:
                    0c:5d:e8:50:c3:45:2a:db:1b:ab:c2:49:65:7a:fa:
                    bb:b7:ad:0b:1f:0d:85:90:95:37:ea:07:10:ee:1c:
                    a9:35:0c:91:10:04:57:41:8c:b0:e9:03:5f:ca:a3:
                    d2:d7:e8:bb:94:9a:a4:b9:2f:a8:ad:e6:fc:7f:e7:
                    93:61:e8:c7:f0:28:7d:61:3c:df:e8:cd:0c:b3:53:
                    05:98:18:f3:c5:62:13:0e:fe:eb:c4:45:80:01:c7:
                    81:56:08:9a:ef:41:cc:90:59:17:cf:97:60:99:8e:
                    38:b1:97:68:5c:b5:9f:06:e0:a4:c6:25:c7:a9:5f:
                    fd:d0:3a:a3:34:2f:1b:13:94:56:c7:be:0e:c2:f0:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:9E:2A:C1:9E:9C:48:D1:62:E6:F0:6E:2E:28:D1:41:2A:68:F8
            X509v3 Authority Key Identifier:
                keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:16:dc:dc:7d:0e:a5:ae:aa:c6:23:73:65:f0:3a:43:81:b7:
         21:e1:a5:2d:fe:fb:d0:ce:29:72:dd:ef:7b:6f:fb:5c:e0:6f:
         85:f3:a4:11:9c:88:bc:f9:d1:c7:15:d4:fb:f8:64:90:02:54:
         fd:bf:bc:5f:2b:72:c3:94:b8:bd:ec:3f:52:27:6e:c5:40:a8:
         16:5b:a4:de:19:96:5e:4b:5b:ec:a6:cd:1b:f9:f2:22:9b:2b:
         a9:b1:88:3b:16:72:08:6f:aa:21:38:42:96:0f:65:7c:b2:48:
         8a:8a:05:64:7c:22:14:39:e8:ad:e8:c8:c4:f1:ea:99:34:57:
         6a:8e:12:0a:5c:b5:ad:2d:8d:26:99:ef:ef:d6:14:7a:e5:6b:
         a2:2f:3f:67:e0:cc:cd:f0:fd:9c:db:3a:30:5c:4b:0a:e2:48:
         fd:05:89:b1:b6:ba:3a:44:d9:2c:d8:94:b0:34:e8:79:01:9b:
         63:f7:55:b4:ed:b0:58:cc:3d:22:1e:4a:7b:bb:03:09:2f:59:
         99:58:2f:8f:e9:58:66:6a:bc:5e:7f:41:1f:72:ff:fb:47:46:
         fd:e8:3d:e7:08:99:cb:6c:8f:72:1b:24:e1:f6:12:86:9e:f0:
         65:60:60:86:e6:bb:56:6c:42:29:92:98:71:44:6f:0e:57:f8:
         24:57:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:10 2026 by rpki-client