Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          5Mbi52zKjzQ86PGcaLvjBE+X67ova2YBbHhS20Vh8CI=
Subject key identifier:   8D:9A:9B:F6:E0:00:28:F6:1A:18:AC:3C:8D:75:BE:62:4F:DE:EC:3A
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       4766899144C7A45EC05015D85EC2223062DE3778
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          7B
Signing time:             Tue 28 Jul 2026 03:42:24 +0000
Manifest this update:     Tue 28 Jul 2026 03:37:24 +0000
Manifest next update:     Wed 29 Jul 2026 07:32:24 +0000
Files and hashes:         1: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          2: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          3: 323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa (hash: G5ZHFEs/k5egpnslebEEFOvxulbKp3nlVsyJc87M8lQ=)
                          4: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: tR6wcmT0jJWCZ32P6MCsb3im/BrdSryM/qbDhQICZeo=)
                          5: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=)
                          6: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          7: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          8: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          9: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=)
                          10: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          11: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          12: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:89:91:44:c7:a4:5e:c0:50:15:d8:5e:c2:22:30:62:de:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Jul 28 03:37:24 2026 GMT
            Not After : Jul 29 07:32:24 2026 GMT
        Subject: CN=8D9A9BF6E00028F61A18AC3C8D75BE624FDEEC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:bb:d9:7c:f6:7e:15:1f:61:6a:7a:f3:38:
                    d6:b0:80:87:4d:86:0a:88:ae:ba:f9:c5:8f:4b:f7:
                    c7:da:0d:0a:a6:de:56:b4:1a:2d:aa:e2:06:1a:42:
                    ff:1b:b9:75:11:64:ba:05:19:25:1e:3a:ba:e0:19:
                    d6:06:59:fe:02:e3:a8:79:84:81:1c:d4:76:8a:c6:
                    45:79:e8:e8:2b:ca:ad:6c:e7:70:37:b9:74:27:66:
                    c4:ed:a4:7c:6f:b4:c9:b8:b8:13:38:d4:2b:60:99:
                    e7:f1:bb:46:78:1d:77:77:e7:14:24:79:b4:98:ef:
                    81:ae:66:99:04:db:1a:f0:05:4c:41:b0:ee:af:0e:
                    08:7c:a5:da:b3:19:3f:27:e4:74:60:4d:85:64:8c:
                    e5:b2:50:c6:a1:84:d7:fa:01:42:7c:7f:c8:fa:ce:
                    61:17:9f:9e:17:38:00:f2:e9:a9:c7:39:96:5c:71:
                    4d:31:0d:77:c0:b4:c1:c8:ac:3e:13:bb:e1:c2:d4:
                    02:ab:63:02:11:f1:9b:e9:e5:9a:24:13:b8:3a:e7:
                    e3:2e:9e:e8:8c:91:7c:ad:d5:2b:d4:99:f3:89:72:
                    16:51:f9:bb:12:56:6a:62:b6:e6:93:4d:67:36:8b:
                    5e:36:a7:f9:df:31:00:f5:ae:87:94:3b:66:cd:21:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:9B:F6:E0:00:28:F6:1A:18:AC:3C:8D:75:BE:62:4F:DE:EC:3A
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:65:f1:73:f7:90:6e:85:6d:f1:ea:a9:f6:8a:35:69:db:
         93:d4:1e:66:50:bf:7f:fe:9f:02:f1:e0:8e:f3:75:23:88:53:
         ba:60:01:dd:1e:2b:e3:77:6a:65:f0:f9:6b:38:ce:d3:99:89:
         ac:1e:fd:89:50:df:48:b2:4e:2d:62:0d:bd:ea:86:ce:43:61:
         f0:71:85:bc:79:f3:20:b6:75:b0:9c:48:87:52:90:3c:34:61:
         b3:f5:2b:5f:c1:9b:15:3a:ed:7c:bd:0b:0d:04:cc:07:26:13:
         59:25:16:e7:96:03:1c:51:12:9c:6b:71:e4:8f:78:cf:f0:22:
         7d:1e:6b:af:17:97:91:9e:89:62:30:1c:ae:65:5e:e6:83:bd:
         31:32:55:b2:04:c3:e5:22:6f:e0:4b:93:2b:7e:0d:d2:87:5b:
         4f:d4:7c:71:c4:f1:23:a6:6b:4a:b2:26:cd:5d:15:4f:b9:e6:
         77:22:7e:05:42:19:ce:2a:6d:5f:11:19:27:5c:8c:ea:7d:c6:
         75:56:e1:2a:ab:56:2b:98:2c:bc:e9:7b:0e:61:2c:5f:dd:52:
         89:b2:08:ad:29:05:0f:5e:0b:f3:d1:d8:14:df:fc:d5:fb:6a:
         9a:ab:46:ea:8f:19:20:b4:c9:06:fa:36:fb:87:53:9e:6a:b8:
         20:56:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:24 2026 by rpki-client