Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File:                     E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier:          Bu5HM3MnV8UNoNzvl9DLmaA8x0GKDTpd68XCcoAdkHk=
Subject key identifier:   1A:9C:45:E0:12:06:D5:AC:D1:78:32:5B:CB:68:13:7A:8A:EC:C7:AA
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       4701A82849F986FD7FBB35FEE7EE964B6F192C37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 00:42:04 +0000
Manifest this update:     Tue 28 Jul 2026 00:37:04 +0000
Manifest next update:     Wed 29 Jul 2026 04:22:04 +0000
Files and hashes:         1: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
                          2: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: un5CbwvXZbVVQBmpBpErsXwrCaLbJG9LI0Cr0O7cZmM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 04:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:a8:28:49:f9:86:fd:7f:bb:35:fe:e7:ee:96:4b:6f:19:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: Jul 28 00:37:04 2026 GMT
            Not After : Jul 29 04:22:04 2026 GMT
        Subject: CN=1A9C45E01206D5ACD178325BCB68137A8AECC7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:36:0c:5c:fc:8b:e8:3e:9d:f5:28:8c:53:
                    a6:66:69:58:e9:45:7f:76:d8:0b:95:36:95:cb:15:
                    56:a9:88:6f:9b:9c:1c:8e:bd:4d:7f:2c:51:c6:37:
                    e0:ca:7f:fb:08:f4:38:3d:97:b2:bb:ae:68:7e:12:
                    a5:26:8c:d0:44:35:34:6a:9b:c2:2c:b2:37:79:c1:
                    58:2e:27:14:81:d2:50:49:5d:d1:e7:93:7f:68:11:
                    ba:bc:96:61:41:0f:ca:58:9b:14:f9:42:63:f3:40:
                    62:f8:8e:ec:f4:7f:a9:2d:e2:e2:cc:73:6b:61:59:
                    e4:2d:d2:32:6e:a3:4a:69:26:82:0d:57:fb:57:19:
                    f4:5d:6f:b6:e7:c7:90:a7:ad:56:39:6c:d9:46:47:
                    6a:b9:67:de:1f:bb:60:33:93:82:02:20:2a:33:8d:
                    75:67:82:a2:07:55:34:42:57:c5:38:58:cf:d0:62:
                    b7:9c:b6:07:dd:a9:6f:b6:ec:1c:50:5d:41:d8:9d:
                    10:05:19:e9:49:79:16:98:e7:91:02:46:fe:98:f6:
                    e0:49:01:c0:f7:f0:a2:da:8b:e4:1f:2c:f1:10:94:
                    90:ab:a8:01:81:50:bf:1e:6b:bf:b5:a4:7e:63:9f:
                    57:51:32:30:35:5c:0d:b9:78:b7:7c:ce:be:7d:c8:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9C:45:E0:12:06:D5:AC:D1:78:32:5B:CB:68:13:7A:8A:EC:C7:AA
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:04:bb:1b:95:30:0c:57:29:4a:67:40:4b:d1:b1:57:66:0e:
         9c:d8:4f:7a:95:12:c0:d4:eb:71:d8:e0:76:ea:93:e6:ef:8a:
         f1:1f:c8:ca:1e:18:8c:79:52:ad:59:ea:05:83:86:71:7b:40:
         50:76:2f:85:b0:2c:4c:8c:95:3b:c2:63:f8:88:f5:db:95:fd:
         11:7d:4b:c7:42:0b:56:b5:6e:a9:a5:08:1f:68:1b:1f:7c:36:
         43:6e:be:d0:41:5b:79:68:c1:b6:9b:5b:28:b4:b1:c5:5f:c6:
         88:a7:35:bd:32:7b:c2:e0:f7:88:db:09:76:97:81:d4:69:a4:
         a2:a3:c8:e9:1a:c6:bf:44:fc:1c:0d:e1:3d:ae:e8:86:2e:82:
         f9:9e:77:4a:ee:53:1e:56:c0:e3:68:ce:44:e5:40:1e:df:93:
         e3:e2:91:a2:67:9e:b6:28:e9:f6:b0:71:2b:92:a0:9e:2c:94:
         f9:00:20:15:d0:ca:69:c8:85:9d:89:60:d3:92:ce:1c:f2:4d:
         8d:72:44:88:f2:70:2e:9b:7b:1a:a5:75:45:f2:a8:56:f8:ea:
         19:e9:23:09:41:db:11:39:f4:0a:98:03:e3:0f:1b:b1:fe:62:
         3b:47:5f:cb:fe:0e:73:be:b5:df:33:ef:bc:41:7b:d1:9b:6a:
         9b:fb:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:55 2026 by rpki-client