Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File:                     E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier:          0xNnJnPNi7CnWznIC/rfl/4e9haqw1H5GssCl8pwdCo=
Subject key identifier:   ED:85:76:D3:C7:63:C5:53:55:3F:E4:EC:45:CC:61:B8:AC:3C:B3:12
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       0CEF8487C6C2BA846E0735EEAC7A163B4B3B7741
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 21:48:11 +0000
Manifest this update:     Fri 12 Jun 2026 21:43:11 +0000
Manifest next update:     Sun 14 Jun 2026 01:07:11 +0000
Files and hashes:         1: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
                          2: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: +Z8lOe1rkNdLo7RCcrzWf0BDVkHyfHaNZ8HlIzaF340=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:84:87:c6:c2:ba:84:6e:07:35:ee:ac:7a:16:3b:4b:3b:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: Jun 12 21:43:11 2026 GMT
            Not After : Jun 14 01:07:11 2026 GMT
        Subject: CN=ED8576D3C763C553553FE4EC45CC61B8AC3CB312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:50:55:ca:5b:f7:f2:cf:04:89:77:31:1d:
                    a9:39:0d:83:a7:c7:a7:02:73:de:91:04:e4:67:da:
                    97:f1:bd:08:64:11:8d:5e:17:e4:ed:c9:7b:c7:83:
                    76:7d:7b:d7:d6:57:97:3b:f3:74:74:56:bc:33:54:
                    1a:5a:24:a0:09:30:66:e6:f6:16:f2:dc:53:10:aa:
                    e2:46:21:d9:43:9b:8e:cf:34:0a:1b:ba:63:94:33:
                    05:9c:da:da:b2:fa:be:88:e6:ff:6d:1e:7d:06:60:
                    9d:48:a3:9f:52:0a:d0:12:3b:c1:7b:56:60:3e:19:
                    96:d1:aa:4e:32:0a:b8:10:a6:a2:8e:fc:49:49:26:
                    b6:9c:03:27:d0:90:54:22:28:01:a2:22:3f:29:70:
                    60:78:40:42:7c:32:f8:e3:0e:57:38:5c:10:4d:e8:
                    12:55:5b:ab:ca:d7:5e:fb:91:88:74:e2:bf:63:03:
                    de:ec:d6:a7:35:23:4c:72:44:66:f2:27:d7:59:4c:
                    13:27:f0:bf:92:6c:17:ba:33:5c:56:6d:fc:5d:62:
                    20:91:d6:9d:9a:da:a8:5d:ae:39:5f:d0:f6:d5:b0:
                    fc:00:22:a5:e6:f7:01:ce:0d:36:83:a0:7c:55:9c:
                    e8:8c:0e:30:98:ab:d3:68:8e:4d:8a:f7:57:c4:fb:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:76:D3:C7:63:C5:53:55:3F:E4:EC:45:CC:61:B8:AC:3C:B3:12
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:00:13:31:f9:48:01:e3:2a:6f:c3:71:37:60:05:43:e1:8d:
         3c:8b:b1:0a:0c:db:8c:ee:6f:0c:40:e7:fd:5e:ef:39:b5:6e:
         91:8d:7f:9f:98:45:ad:a0:44:b4:8c:79:cd:fc:ed:ab:1c:39:
         d1:37:84:c2:38:50:9c:3d:88:06:38:bf:1f:ed:74:30:2d:df:
         09:63:00:61:50:5c:ca:9f:f3:bf:e0:de:7b:6b:6f:f1:b6:13:
         11:d3:25:56:8f:e0:96:7b:21:8b:65:f8:0e:38:e7:c9:83:57:
         12:cf:7d:55:58:c7:e1:7d:03:21:9d:2f:57:6f:84:96:0f:e6:
         a7:03:67:08:36:24:e4:4d:91:2c:9d:dc:fc:df:15:c5:8b:3c:
         cb:02:7e:12:f5:16:e1:ad:46:8d:e2:4b:1d:09:ef:a1:46:19:
         67:d0:11:67:7e:b6:65:74:35:3b:08:66:66:f2:43:d3:52:21:
         db:e7:e0:b0:a1:69:bc:7c:bf:14:34:3c:40:4a:97:10:e8:80:
         cc:e1:8e:64:95:12:09:3b:90:b5:c6:4a:be:c2:50:6b:d3:e9:
         af:b5:23:b3:c9:ba:36:75:b8:5d:d7:30:f5:0b:af:24:7b:4f:
         b2:e4:47:09:5e:e3:b1:35:c4:81:42:66:4c:f8:d7:ea:41:c2:
         45:93:f6:c6
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUDO+Eh8bCuoRuBzXurHoWO0s7d0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlENzMyQjQ2Mzc3NTU0N0MxN0UyNjY5ODBFRDIzQ0Ix
RjQ4QUU0ODAeFw0yNjA2MTIyMTQzMTFaFw0yNjA2MTQwMTA3MTFaMDMxMTAvBgNV
BAMTKEVEODU3NkQzQzc2M0M1NTM1NTNGRTRFQzQ1Q0M2MUI4QUMzQ0IzMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT71BVylv38s8EiXcxHak5DYOn
x6cCc96RBORn2pfxvQhkEY1eF+TtyXvHg3Z9e9fWV5c783R0VrwzVBpaJKAJMGbm
9hby3FMQquJGIdlDm47PNAobumOUMwWc2tqy+r6I5v9tHn0GYJ1Io59SCtASO8F7
VmA+GZbRqk4yCrgQpqKO/ElJJracAyfQkFQiKAGiIj8pcGB4QEJ8MvjjDlc4XBBN
6BJVW6vK1177kYh04r9jA97s1qc1I0xyRGbyJ9dZTBMn8L+SbBe6M1xWbfxdYiCR
1p2a2qhdrjlf0PbVsPwAIqXm9wHODTaDoHxVnOiMDjCYq9Nojk2K91fE+8FbAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU7YV208djxVNVP+TsRcxhuKw8sxIwHwYDVR0j
BBgwFoAU6dcytGN3VUfBfiZpgO0jyx9IrkgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQUNFUkVE
Qy8wL0U5RDczMkI0NjM3NzU1NDdDMTdFMjY2OTgwRUQyM0NCMUY0OEFFNDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRTlENzMyQjQ2Mzc3NTU0N0MxN0UyNjY5ODBF
RDIzQ0IxRjQ4QUU0OC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FDRVJFREMvMC9FOUQ3MzJCNDYz
Nzc1NTQ3QzE3RTI2Njk4MEVEMjNDQjFGNDhBRTQ4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwATMflI
AeMqb8NxN2AFQ+GNPIuxCgzbjO5vDEDn/V7vObVukY1/n5hFraBEtIx5zfztqxw5
0TeEwjhQnD2IBji/H+10MC3fCWMAYVBcyp/zv+Dee2tv8bYTEdMlVo/glnshi2X4
DjjnyYNXEs99VVjH4X0DIZ0vV2+Elg/mpwNnCDYk5E2RLJ3c/N8VxYs8ywJ+EvUW
4a1GjeJLHQnvoUYZZ9ARZ362ZXQ1OwhmZvJD01Ih2+fgsKFpvHy/FDQ8QEqXEOiA
zOGOZJUSCTuQtcZKvsJQa9Ppr7Ujs8m6NnW4Xdcw9QuvJHtPsuRHCV7jsTXEgUJm
TPjX6kHCRZP2xg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:48 2026 by rpki-client