Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
File:                     54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft (raw, json)
Hash identifier:          Ue/BkuxpJ085qZx72BLDK68zoBdJ9AsKNM04x0udwWQ=
Subject key identifier:   D9:3F:1D:46:04:BE:8B:6D:14:E9:37:3E:A9:C7:C2:1F:CA:D3:A6:CE
Authority key identifier: 54:97:04:74:B1:0E:AA:E3:7D:7C:73:CD:EA:1E:4C:E4:AF:05:D2:D9
Certificate issuer:       /CN=54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9
Certificate serial:       5F40B2098F97BC4315A6333E7A17373AC7D0612A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 08:38:00 +0000
Manifest this update:     Tue 28 Jul 2026 08:33:00 +0000
Manifest next update:     Wed 29 Jul 2026 09:48:00 +0000
Files and hashes:         1: 54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl (hash: dGPlkBn7HuS9JgEvqt3AuvO2FTMGyFIsXb/Je3jCFoo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl
                          rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:b2:09:8f:97:bc:43:15:a6:33:3e:7a:17:37:3a:c7:d0:61:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9
        Validity
            Not Before: Jul 28 08:33:00 2026 GMT
            Not After : Jul 29 09:48:00 2026 GMT
        Subject: CN=D93F1D4604BE8B6D14E9373EA9C7C21FCAD3A6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:9b:91:0c:4f:64:12:67:25:cc:9f:11:e0:
                    04:02:8f:ce:49:90:7a:a7:7c:c9:d1:9b:14:8b:0f:
                    c8:cd:7a:27:bf:2f:41:38:1d:50:a4:cb:cd:be:43:
                    2d:de:f0:de:d9:c1:6a:c9:94:f3:c6:8c:fa:6d:ec:
                    3f:d1:d6:d1:35:16:00:cd:96:37:c0:5c:c0:f2:25:
                    cd:7e:4b:98:6f:10:60:7b:19:13:41:13:fb:10:11:
                    14:b6:ff:af:97:07:90:c7:b6:bd:44:e2:9b:45:ad:
                    7f:fd:f0:ae:66:f5:1a:f0:ca:38:f9:6f:1a:d3:20:
                    06:d3:a5:f1:ad:63:bc:9f:d5:44:c9:94:33:09:64:
                    60:95:46:c4:57:1b:52:be:fc:97:77:d1:da:c2:b4:
                    a5:4d:46:a7:f7:bb:38:28:0e:3d:d0:a0:95:f0:95:
                    0d:53:86:be:78:6f:ba:f3:0d:69:2d:88:af:32:4c:
                    5d:84:7f:f3:2f:0b:26:16:56:1d:e0:5e:e4:30:25:
                    cb:4a:50:dd:97:32:81:cb:a0:66:de:26:7a:90:bd:
                    aa:ca:41:e2:e1:7b:f4:10:cd:96:77:26:76:3d:8f:
                    65:b0:8c:9b:62:c8:c8:78:ae:75:4c:9c:78:1e:44:
                    77:ea:b7:04:48:95:72:eb:1d:8f:7c:f4:64:8a:5a:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3F:1D:46:04:BE:8B:6D:14:E9:37:3E:A9:C7:C2:1F:CA:D3:A6:CE
            X509v3 Authority Key Identifier:
                keyid:54:97:04:74:B1:0E:AA:E3:7D:7C:73:CD:EA:1E:4C:E4:AF:05:D2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:eb:a6:c4:2d:91:79:c7:df:c0:cd:53:0b:d1:ca:c5:b0:d9:
         76:71:45:db:a3:63:80:5c:7c:36:4e:04:26:41:7b:52:cc:fa:
         ea:73:95:10:51:a2:03:08:43:c7:82:b0:9b:7e:14:b2:48:be:
         4f:f8:dd:7d:ab:a2:44:2e:a8:55:4d:91:5e:c4:07:60:03:5c:
         6d:4e:31:03:9b:02:8b:88:43:78:73:a3:c7:40:13:f5:9e:fd:
         86:6b:5f:db:9c:fa:b5:50:51:a4:21:53:cd:62:d4:25:ab:81:
         aa:30:ed:d3:5f:4e:6e:99:7c:2f:8f:51:fc:90:82:b9:3d:3d:
         eb:df:77:e4:a6:dd:c3:20:d7:be:c2:e0:7e:44:80:67:68:1f:
         3e:71:02:b7:d9:73:19:f6:f0:73:6c:c1:35:b9:6c:74:c6:2a:
         14:55:39:18:94:64:c7:23:7e:e0:96:82:88:ec:19:13:ae:75:
         12:d7:ad:37:d6:ed:e6:43:1f:48:e1:f9:7b:a3:8d:f0:17:c7:
         36:b4:0a:fa:32:27:09:cb:d7:5d:e6:5f:fe:40:59:78:45:2d:
         f9:8b:da:03:22:ae:eb:27:51:54:c6:8e:27:f0:f3:aa:85:10:
         51:a4:61:39:cf:00:c4:27:da:9d:66:a2:2d:01:db:be:63:2c:
         fa:3e:70:8d
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUX0CyCY+XvEMVpjM+ehc3OsfQYSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ5NzA0NzRCMTBFQUFFMzdEN0M3M0NERUExRTRDRTRB
RjA1RDJEOTAeFw0yNjA3MjgwODMzMDBaFw0yNjA3MjkwOTQ4MDBaMDMxMTAvBgNV
BAMTKEQ5M0YxRDQ2MDRCRThCNkQxNEU5MzczRUE5QzdDMjFGQ0FEM0E2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQJuRDE9kEmclzJ8R4AQCj85J
kHqnfMnRmxSLD8jNeie/L0E4HVCky82+Qy3e8N7ZwWrJlPPGjPpt7D/R1tE1FgDN
ljfAXMDyJc1+S5hvEGB7GRNBE/sQERS2/6+XB5DHtr1E4ptFrX/98K5m9Rrwyjj5
bxrTIAbTpfGtY7yf1UTJlDMJZGCVRsRXG1K+/Jd30drCtKVNRqf3uzgoDj3QoJXw
lQ1Thr54b7rzDWktiK8yTF2Ef/MvCyYWVh3gXuQwJctKUN2XMoHLoGbeJnqQvarK
QeLhe/QQzZZ3JnY9j2WwjJtiyMh4rnVMnHgeRHfqtwRIlXLrHY989GSKWt9FAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU2T8dRgS+i20U6Tc+qcfCH8rTps4wHwYDVR0j
BBgwFoAUVJcEdLEOquN9fHPN6h5M5K8F0tkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5FVC8w
LzU0OTcwNDc0QjEwRUFBRTM3RDdDNzNDREVBMUU0Q0U0QUYwNUQyRDkuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvNTQ5NzA0NzRCMTBFQUFFMzdEN0M3M0NERUExRTRD
RTRBRjA1RDJEOS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VORVQvMC81NDk3MDQ3NEIxMEVBQUUz
N0Q3QzczQ0RFQTFFNENFNEFGMDVEMkQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOumxC2RecffwM1T
C9HKxbDZdnFF26NjgFx8Nk4EJkF7Usz66nOVEFGiAwhDx4Kwm34Uski+T/jdfaui
RC6oVU2RXsQHYANcbU4xA5sCi4hDeHOjx0AT9Z79hmtf25z6tVBRpCFTzWLUJauB
qjDt019Obpl8L49R/JCCuT0969935KbdwyDXvsLgfkSAZ2gfPnECt9lzGfbwc2zB
NblsdMYqFFU5GJRkxyN+4JaCiOwZE651EtetN9bt5kMfSOH5e6ON8BfHNrQK+jIn
CcvXXeZf/kBZeEUt+YvaAyKu6ydRVMaOJ/DzqoUQUaRhOc8AxCfanWaiLQHbvmMs
+j5wjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:08 2026 by rpki-client