Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          XnvU1QrASf/JPJVizDDmOcFCdpcwyTgw85ilO5jRUrc=
Subject key identifier:   7F:48:27:ED:64:E5:88:CC:CF:BA:A9:0E:12:81:29:53:DA:5E:04:5B
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       4719FABC20EE3EA802F8A37FC0ECE5A2786CF940
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          39
Signing time:             Fri 12 Jun 2026 15:01:59 +0000
Manifest this update:     Fri 12 Jun 2026 14:56:59 +0000
Manifest next update:     Sat 13 Jun 2026 17:22:59 +0000
Files and hashes:         1: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          2: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=)
                          3: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          4: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=)
                          5: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          6: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          7: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          8: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          9: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: SE9bMx9X0ZHBiHU3Bh067OiqaMoVzjUpYWvLtBiJTlo=)
                          10: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          11: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 17:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:fa:bc:20:ee:3e:a8:02:f8:a3:7f:c0:ec:e5:a2:78:6c:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Jun 12 14:56:59 2026 GMT
            Not After : Jun 13 17:22:59 2026 GMT
        Subject: CN=7F4827ED64E588CCCFBAA90E12812953DA5E045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:2c:97:44:9b:dd:fa:aa:21:0a:90:3c:a7:
                    37:13:dd:1c:c0:d4:60:6a:39:0e:92:af:d6:90:de:
                    1b:2d:2c:6c:08:bd:ca:81:2c:7f:78:b7:b2:9b:a1:
                    7c:f9:bc:6b:95:82:21:05:d5:5c:c4:51:eb:02:05:
                    b3:3e:ca:6e:8a:e0:96:f8:99:b5:d4:11:b6:b0:84:
                    a8:39:4f:9f:5d:86:22:95:f4:d5:50:1b:da:21:a6:
                    46:af:bd:de:82:33:7a:89:78:81:b3:da:2a:fd:57:
                    70:c7:95:82:cd:e3:0b:41:a9:02:93:50:aa:c8:3d:
                    37:6f:59:d8:a8:64:dd:a9:ac:33:5c:80:2f:49:57:
                    52:f7:28:d4:46:3b:9c:08:93:a9:df:a9:2f:c9:a1:
                    53:a5:99:3d:36:b0:42:b8:e0:12:51:3d:e5:db:38:
                    b3:86:72:78:dc:30:a4:ee:59:22:43:d5:a7:a4:68:
                    11:ff:92:9e:19:c6:8c:20:e3:7f:e4:81:1b:cb:18:
                    27:27:17:d1:30:f4:f7:17:42:2e:15:dd:51:05:a8:
                    a8:52:df:6a:19:20:31:5a:95:f6:2b:c8:d8:48:b5:
                    7c:30:ca:fb:fb:05:fc:4f:fb:9b:be:b7:3e:ab:f7:
                    b3:63:5d:d2:29:ce:d7:13:c7:9b:ab:0f:2c:c3:6c:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:27:ED:64:E5:88:CC:CF:BA:A9:0E:12:81:29:53:DA:5E:04:5B
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:cd:9e:3e:81:23:7d:8f:61:f9:2a:45:07:0b:0c:23:41:
         c2:b1:27:d9:50:32:0b:a8:03:6b:77:c5:91:8e:b0:30:f1:49:
         58:3a:e2:d6:ff:d0:a4:c5:59:8c:ac:64:2e:3e:4f:00:cd:83:
         87:3b:93:e1:e8:1b:33:9e:49:15:e4:8b:13:de:81:26:07:b1:
         6d:be:e5:d6:37:bf:6f:dc:c6:10:1b:f6:e9:24:5a:18:f0:3f:
         9c:20:e8:0e:b0:75:52:96:f2:0a:d4:d2:81:4f:e0:eb:02:03:
         72:13:02:36:85:ca:8a:a2:53:c7:91:39:20:bf:f1:72:f0:53:
         8d:92:2a:9b:1f:52:06:30:50:60:45:55:f2:0a:53:83:d1:df:
         57:a2:fa:0e:b7:6a:9e:4a:6f:14:2d:4f:9e:dd:8e:d0:49:77:
         a2:d8:3c:fb:6f:c7:35:fd:10:3c:7f:60:a2:45:89:1a:ca:b9:
         d7:15:19:7d:9f:c1:ac:af:b6:44:fd:2e:04:37:c9:78:f8:27:
         ce:1d:41:7c:cb:29:36:2e:94:2e:0b:58:0d:61:9f:d4:83:76:
         c3:20:86:5e:65:8f:70:bc:8d:19:21:15:83:f7:a7:d3:e3:6c:
         d3:23:35:35:51:15:57:d5:23:69:37:ef:73:3d:4b:29:f2:cb:
         88:bc:4c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:17 2026 by rpki-client