Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File:                     68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier:          HKnaPoYUme3TEnije5tk1aajHdLdz0vjH7CXDQLZUt8=
Subject key identifier:   17:92:71:9B:19:87:74:54:2C:2E:EA:1E:5F:47:88:93:EA:26:1A:60
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer:       /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial:       556E5D26444A8E58916D904873536D4A43DC3259
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 02:43:46 +0000
Manifest this update:     Sat 13 Jun 2026 02:38:46 +0000
Manifest next update:     Sun 14 Jun 2026 05:44:46 +0000
Files and hashes:         1: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
                          2: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: zZwoZCgB4vzdLm8HiWT81spC7zyZgRRHhHLfKXGaLkY=)
                          3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
                          4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
                          rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6e:5d:26:44:4a:8e:58:91:6d:90:48:73:53:6d:4a:43:dc:32:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
        Validity
            Not Before: Jun 13 02:38:46 2026 GMT
            Not After : Jun 14 05:44:46 2026 GMT
        Subject: CN=1792719B198774542C2EEA1E5F478893EA261A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:2e:64:c0:53:56:b6:98:76:f8:7f:40:6d:
                    4c:1a:60:d1:c1:0a:7d:ec:b1:2e:54:93:63:6e:43:
                    8d:dd:84:53:0a:43:21:ee:73:82:aa:eb:ee:55:f0:
                    12:6c:9f:ec:8a:40:97:7c:0c:32:57:5c:74:8d:0a:
                    3a:d8:98:67:d0:2d:e9:b5:c3:6b:4a:39:fb:e4:fd:
                    a5:9d:95:40:3f:fd:2f:6d:71:f9:d7:50:74:bb:c9:
                    1e:9d:2c:85:b0:a0:97:b6:ae:00:63:63:fc:0f:e2:
                    e4:2a:a4:3c:e9:ee:17:4d:f7:2b:98:20:c5:8a:cf:
                    dd:34:db:35:ba:46:b6:e6:54:d0:bd:dc:88:e4:37:
                    ec:22:e7:b1:ad:0d:b3:3e:cc:27:eb:93:a9:56:93:
                    5b:6a:e1:44:20:63:b1:8a:b3:fa:3e:08:d8:03:86:
                    2b:60:ac:ef:e3:e5:be:46:49:82:e8:da:05:4f:9c:
                    a0:c0:4c:67:4e:6c:84:72:10:4e:35:29:2b:29:5b:
                    0f:76:28:38:3f:0a:75:4e:e4:92:71:e7:f1:8d:50:
                    b1:0a:6d:fd:8c:d2:f1:99:83:7e:37:ea:0b:d0:2c:
                    20:92:7d:92:d7:f4:af:61:96:b1:4a:8f:3c:9d:dd:
                    16:f4:30:5b:c9:6d:1b:70:67:84:26:f2:e2:3a:61:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:71:9B:19:87:74:54:2C:2E:EA:1E:5F:47:88:93:EA:26:1A:60
            X509v3 Authority Key Identifier:
                keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:8b:f7:68:43:3e:08:1b:90:3c:69:aa:80:5a:af:02:a8:
         45:96:2b:98:bd:97:ba:1f:47:68:29:43:0a:e2:60:6e:2c:15:
         ea:47:8d:2f:f5:bb:13:5d:c6:4c:ac:b7:bf:34:c9:da:9e:85:
         24:59:84:69:92:b3:94:39:be:e5:19:24:1e:d4:6a:74:91:96:
         d7:9d:7c:df:13:62:68:e6:25:57:05:7c:d1:5b:58:a2:b6:16:
         65:99:c6:1e:ad:6d:1f:68:97:9f:5b:49:83:79:a3:5a:b3:0a:
         cb:51:ac:66:5b:bd:f6:21:d4:4e:d5:92:ec:2b:8b:02:a0:4f:
         5d:43:ce:bc:0b:41:79:5f:7e:e4:b9:09:01:28:ec:4a:f0:ec:
         da:b2:56:b0:7d:ee:7f:0e:e3:9c:43:ca:88:82:fd:a0:e8:bf:
         cb:a2:a1:e8:02:42:3a:d0:a1:89:e5:19:2e:fd:7f:df:34:ee:
         3f:b5:ca:6b:62:59:f2:7d:fc:34:f0:b3:b9:44:9c:10:1f:b2:
         34:3a:b6:6b:ef:3f:4e:03:e7:c0:d2:92:5d:69:3d:19:b2:e8:
         20:6a:27:18:6b:c1:86:b2:13:78:c9:33:70:ed:36:21:2a:e5:
         7b:94:1e:9c:15:a2:4f:45:7d:54:0d:2b:0e:99:81:d9:7f:de:
         55:8a:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:28 2026 by rpki-client