Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
File:                     56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json)
Hash identifier:          NdC+0ba4+VYZXuwfluFIGO1+0vzT//5LLvl0y/xehtE=
Subject key identifier:   1C:8F:42:30:19:6A:51:4B:82:31:D0:BE:D4:50:C2:9B:E6:C7:5F:23
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Certificate issuer:       /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial:       27DABBB0DA771900F5FDE64144AB465ED9A3F536
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
Manifest number:          33
Signing time:             Fri 12 Jun 2026 18:37:49 +0000
Manifest this update:     Fri 12 Jun 2026 18:32:49 +0000
Manifest next update:     Sat 13 Jun 2026 22:08:49 +0000
Files and hashes:         1: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=)
                          2: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=)
                          3: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=)
                          4: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=)
                          5: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: ZTD2xCT6m0UoMJvH5IyJKwuGRBhxHIGCUyp/b7N++YQ=)
                          6: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=)
                          7: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=)
                          8: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
                          rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:da:bb:b0:da:77:19:00:f5:fd:e6:41:44:ab:46:5e:d9:a3:f5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
        Validity
            Not Before: Jun 12 18:32:49 2026 GMT
            Not After : Jun 13 22:08:49 2026 GMT
        Subject: CN=1C8F4230196A514B8231D0BED450C29BE6C75F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:c1:7f:fe:86:09:61:6d:c4:57:5a:a1:2a:
                    a8:e9:cb:3f:d4:99:10:12:fc:9d:ba:fd:67:ef:de:
                    30:55:df:18:79:2b:a7:14:b6:8a:49:85:af:05:f0:
                    f7:cf:2f:78:bc:e9:0f:6b:60:a7:b9:a1:8b:8e:98:
                    da:0f:df:fa:aa:db:37:60:95:1c:34:c1:98:28:9f:
                    42:b3:64:9b:6b:06:eb:8a:8f:24:c2:c3:df:9f:bd:
                    85:22:f2:1d:d0:17:47:49:55:ac:83:99:d4:b0:d4:
                    63:6a:3b:70:f5:43:36:8b:19:2b:36:40:9e:90:15:
                    82:1a:25:f3:df:76:41:87:9a:28:6b:60:3f:45:d2:
                    7f:07:8c:bf:a0:f4:96:e1:ab:d3:b5:5f:07:53:d0:
                    14:62:20:b3:53:30:6e:5b:b8:c2:a4:a1:b8:cd:28:
                    f3:5e:0d:34:db:f6:d2:07:61:dd:6e:bb:9d:5e:de:
                    9d:f0:df:31:e1:6e:96:73:27:29:d3:96:32:dc:b5:
                    e6:d7:1e:fb:06:75:bf:c6:ba:73:e4:4f:63:34:5d:
                    f0:65:08:6a:28:26:82:45:5b:6f:5b:13:7a:13:f2:
                    1a:ac:6d:22:f8:91:9b:f6:85:f0:e2:7d:8d:a2:46:
                    2e:18:5f:c7:7e:fd:2b:aa:e7:f1:20:bd:e1:c1:18:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:42:30:19:6A:51:4B:82:31:D0:BE:D4:50:C2:9B:E6:C7:5F:23
            X509v3 Authority Key Identifier:
                keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:e9:cd:ef:e0:61:43:c7:f8:93:e8:b2:28:20:3b:bb:5a:
         e0:d2:bd:d9:22:ee:03:87:40:e5:ba:7c:2d:c0:40:90:25:9c:
         d3:12:cd:75:0b:9b:13:57:86:c2:75:ea:57:71:8a:14:04:58:
         99:a1:38:b7:e7:8e:a9:2a:e5:f0:21:e8:ab:16:ee:92:c4:ce:
         0c:56:7b:ee:f5:ff:1e:97:96:44:37:10:c8:77:8f:4b:1d:ee:
         0e:49:4f:6b:06:0f:b4:2e:e1:6e:c7:c7:c1:85:8c:70:ce:44:
         f4:82:38:34:5c:8e:75:ad:99:31:11:e2:2f:9e:63:7a:3e:1c:
         54:b8:b9:18:9e:f5:e6:b6:b5:64:7a:ec:af:f3:40:76:2e:5b:
         de:48:1d:17:de:12:05:04:d8:5c:ed:1d:71:b2:20:9e:82:ab:
         5d:df:28:5b:55:f6:be:e3:a7:05:ff:ae:2c:54:0d:fb:05:f0:
         1c:5f:64:93:d9:4b:d0:c5:d6:94:7c:cd:b0:1a:0b:a1:12:94:
         ea:1f:eb:f5:75:ce:72:8d:a1:ef:01:c9:38:22:4f:1e:d0:e3:
         16:a0:a1:45:f2:e3:0c:5c:0e:c1:80:28:ac:a5:72:e0:40:cd:
         62:44:5e:b9:34:99:9e:4d:d5:fb:35:2e:7a:e9:43:7b:b4:63:
         02:03:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:49 2026 by rpki-client