Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
File:                     4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json)
Hash identifier:          mCIV0Ct9CdJyGWFt1/I2yMsfPB7rjJ8T5o7n1uOjmsk=
Subject key identifier:   38:DF:66:CF:21:EC:80:50:E4:B1:43:AE:68:0E:07:0E:45:03:4F:9E
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Certificate issuer:       /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial:       6A27A852B96F85820173E928DB9CE4D9F85A454F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
Manifest number:          35
Signing time:             Wed 17 Jun 2026 06:01:55 +0000
Manifest this update:     Wed 17 Jun 2026 05:56:55 +0000
Manifest next update:     Thu 18 Jun 2026 08:44:55 +0000
Files and hashes:         1: 3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa (hash: uAa17/lhm+61c0Btt+bZUFg6KW73rR0lwUGaXhSBPU8=)
                          2: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=)
                          3: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: kTOD/rIDncYc4K3o8ELrl87qLotpR9UNROVR9+fnnAE=)
                          4: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=)
                          5: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
                          rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:27:a8:52:b9:6f:85:82:01:73:e9:28:db:9c:e4:d9:f8:5a:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
        Validity
            Not Before: Jun 17 05:56:55 2026 GMT
            Not After : Jun 18 08:44:55 2026 GMT
        Subject: CN=38DF66CF21EC8050E4B143AE680E070E45034F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:f0:90:e7:f5:cf:a3:5c:73:33:3e:bb:c8:
                    7f:20:70:0c:26:f6:0b:d4:4f:13:fc:61:5a:2a:e4:
                    4b:b6:de:1d:da:e7:35:5c:e3:c3:e4:a6:21:11:0d:
                    2c:54:c7:fc:78:73:7a:ca:f8:e2:a8:1a:65:99:03:
                    a8:e0:4e:9d:54:55:55:23:e8:67:8c:da:fa:02:75:
                    a7:eb:7b:1d:cb:3a:50:3f:a6:a2:cf:89:d6:d6:06:
                    8f:53:3b:ec:4f:f4:95:33:71:95:37:6c:7e:da:42:
                    49:18:eb:08:35:35:87:5a:83:53:eb:1f:12:40:3b:
                    c5:68:0f:1b:b2:40:14:c8:12:ce:3d:74:de:a8:4d:
                    a6:f6:fc:20:f9:e1:6b:6f:d4:bb:15:bf:77:8a:21:
                    d4:f7:5d:4f:5e:fb:92:86:84:bc:95:69:d2:10:b3:
                    c7:fc:12:cf:3c:8d:87:11:16:a8:41:42:85:a9:3b:
                    d0:d9:a4:a4:36:ed:21:2e:26:26:c3:1c:ec:e4:e5:
                    ca:06:2e:3c:3b:11:4f:70:d5:d1:19:2f:93:83:cb:
                    71:ac:40:fe:9a:f6:90:de:c5:98:b8:02:45:0a:7f:
                    e5:67:4d:9c:39:15:6c:a1:3e:09:b3:7a:9d:75:b6:
                    dc:97:e9:32:f4:f8:3f:4d:da:c8:c9:af:56:81:7a:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:66:CF:21:EC:80:50:E4:B1:43:AE:68:0E:07:0E:45:03:4F:9E
            X509v3 Authority Key Identifier:
                keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:75:e8:d4:9b:6a:cd:a4:fe:c2:b7:5b:c7:c2:32:64:d5:35:
         c1:8d:7d:41:f3:9d:8a:ad:c1:5f:ce:5f:bf:39:b0:4d:be:6f:
         e5:33:10:4c:16:02:14:19:eb:fd:c0:6b:99:21:e2:ae:fa:d5:
         4e:83:f0:04:82:3b:5a:3d:01:08:b9:bd:fb:94:5b:ba:21:52:
         b4:6e:5e:ac:9d:aa:11:63:ec:d9:82:9d:68:45:57:cb:4e:5a:
         8e:c5:65:2d:77:66:d0:50:b1:90:a6:ff:c1:65:4f:91:5e:06:
         60:0d:8f:66:ae:9b:d2:0f:5d:53:83:94:ea:53:65:16:76:ef:
         ba:c6:d5:12:f9:ec:b6:9d:af:45:d4:7e:3b:de:a1:3e:ab:35:
         95:bb:bb:81:40:33:e0:fe:8a:f5:9e:75:e8:51:ce:32:12:60:
         d4:52:45:b0:77:b8:ee:0f:65:82:65:0b:14:60:c8:87:e7:33:
         4a:99:d6:aa:47:b7:6c:d7:bc:4b:e4:ab:90:d8:5a:1c:8e:73:
         56:b7:a3:11:d7:32:c6:12:ec:13:4d:fd:25:1f:73:0d:ee:87:
         1b:f7:97:dc:e0:c1:57:2e:1d:d4:79:70:4b:a6:94:e0:d2:32:
         ec:be:fe:98:75:08:89:3a:5d:2e:6f:ce:b4:11:92:aa:2b:c1:
         e3:d9:d7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:00 2026 by rpki-client