Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
File:                     DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json)
Hash identifier:          CMjwLPIIwsnaDCgfaJzdWLuFHVeeDzoAq0/eDpRaHko=
Subject key identifier:   18:A6:FB:E4:DB:1E:96:08:E6:50:70:AF:55:9D:BC:8F:8D:03:09:A3
Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
Certificate issuer:       /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Certificate serial:       0FFEC694374231DDDF5345339F855E2F9F77D613
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
Manifest number:          3B
Signing time:             Sat 13 Jun 2026 13:20:08 +0000
Manifest this update:     Sat 13 Jun 2026 13:15:08 +0000
Manifest next update:     Sun 14 Jun 2026 16:17:08 +0000
Files and hashes:         1: 3134342e37392e3233362e302f32332d3234203d3e203138303430.roa (hash: mOpy66eNRndunzE6G06U+/veEB8DXbUp/i9Rna0dvIY=)
                          2: 3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa (hash: aqUYGYZZ4SIzEA/BLO0DH4FickVrqbLzNS8KzmVfkyA=)
                          3: 3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa (hash: y2jSoNJLs5+nwOx7mIkDPFacP932HoFtwivGyzUzSlg=)
                          4: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: tmIMf4bqrZjcnn9pON8V5hHOyWoV3XHWLEuT44hgvVo=)
                          5: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:c6:94:37:42:31:dd:df:53:45:33:9f:85:5e:2f:9f:77:d6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
        Validity
            Not Before: Jun 13 13:15:08 2026 GMT
            Not After : Jun 14 16:17:08 2026 GMT
        Subject: CN=18A6FBE4DB1E9608E65070AF559DBC8F8D0309A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:e2:8c:6e:c8:95:26:f3:2d:fe:ba:1c:d2:
                    f7:ba:97:7c:fa:a4:a6:89:4c:03:9f:b5:ea:92:00:
                    80:da:9a:6c:27:38:91:a6:c3:33:08:92:21:0a:20:
                    4f:d1:79:c5:9b:76:65:f7:b1:7c:06:fa:be:98:87:
                    ca:83:0f:50:06:bd:3e:8d:69:2e:f7:32:df:85:84:
                    72:b4:ad:9f:b3:da:cb:a5:01:d1:80:d2:a6:f6:35:
                    f5:25:f9:5c:65:09:6f:58:f9:b9:60:e0:14:c8:04:
                    77:e2:23:de:17:fd:d6:8c:95:d3:c9:3e:d6:fe:7c:
                    63:fd:c5:f9:9a:f0:73:5b:ef:4e:6f:57:89:0e:23:
                    75:67:3d:16:01:6d:f8:d4:76:f2:fc:5f:a0:6d:65:
                    c7:03:12:15:d6:e7:23:57:a1:1a:26:ec:82:35:50:
                    f9:23:70:57:d3:6d:f0:a7:77:e9:4f:c4:df:f1:cf:
                    c1:ab:56:98:4a:a2:8b:e5:8b:98:fd:30:2a:07:47:
                    8d:2b:d3:f9:07:0e:29:bf:e7:66:ad:26:76:43:f6:
                    45:ef:1c:8a:f9:1d:51:98:9c:48:75:9c:0b:c4:a6:
                    68:aa:78:01:39:21:6a:49:9e:39:0a:3b:66:46:b5:
                    15:b3:7f:f9:fc:17:d9:b0:ab:21:d2:15:de:d2:54:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:FB:E4:DB:1E:96:08:E6:50:70:AF:55:9D:BC:8F:8D:03:09:A3
            X509v3 Authority Key Identifier:
                keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:d5:d0:6b:96:db:f9:79:37:19:55:4d:c6:d3:6c:7b:16:
         a6:3a:de:42:51:8c:b6:d9:ca:ef:5b:9e:22:dc:ce:bc:08:a9:
         f5:f0:db:f7:a9:f4:ad:17:8b:c1:4e:cd:a3:78:44:da:d2:3c:
         48:48:74:b7:03:39:09:05:25:1a:63:b8:50:3b:d4:da:48:bb:
         f5:d0:ae:83:dc:87:c7:59:91:b5:01:ad:12:92:0c:f5:94:6e:
         21:85:71:2d:9c:a5:80:c5:5b:8d:ae:6e:53:73:17:b6:2a:15:
         d3:cd:4d:a5:ee:fe:70:37:55:16:26:46:f1:8f:8d:c3:d2:e8:
         7c:f3:a4:16:36:14:77:b6:91:ea:3b:cd:7b:d5:05:39:1e:a9:
         af:df:cd:12:f4:bf:1d:e8:1c:f5:86:18:ff:3a:c9:73:1d:96:
         b1:ed:79:c9:72:98:d0:ce:22:6d:74:1c:df:8d:a3:1f:c1:70:
         88:e0:b6:86:9c:f9:9a:5a:bd:29:b5:6c:cc:65:60:ed:c1:df:
         48:7f:ba:83:41:4a:22:6c:60:4d:3b:6f:ba:9c:46:c9:d8:6b:
         ae:d6:b0:a0:66:92:fd:5c:04:d8:8f:49:18:04:84:8c:b4:61:
         f6:5b:45:b7:10:03:96:65:14:77:0d:d8:dc:2c:06:58:ea:59:
         c4:8a:1a:e4
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUD/7GlDdCMd3fU0Uzn4VeL5931hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC
NkRFMjM0QzAeFw0yNjA2MTMxMzE1MDhaFw0yNjA2MTQxNjE3MDhaMDMxMTAvBgNV
BAMTKDE4QTZGQkU0REIxRTk2MDhFNjUwNzBBRjU1OURCQzhGOEQwMzA5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPOKMbsiVJvMt/roc0ve6l3z6
pKaJTAOfteqSAIDammwnOJGmwzMIkiEKIE/RecWbdmX3sXwG+r6Yh8qDD1AGvT6N
aS73Mt+FhHK0rZ+z2sulAdGA0qb2NfUl+VxlCW9Y+blg4BTIBHfiI94X/daMldPJ
Ptb+fGP9xfma8HNb705vV4kOI3VnPRYBbfjUdvL8X6BtZccDEhXW5yNXoRom7II1
UPkjcFfTbfCnd+lPxN/xz8GrVphKoovli5j9MCoHR40r0/kHDim/52atJnZD9kXv
HIr5HVGYnEh1nAvEpmiqeAE5IWpJnjkKO2ZGtRWzf/n8F9mwqyHSFd7SVPohAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUGKb75NselgjmUHCvVZ28j40DCaMwHwYDVR0j
BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO
RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw
QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG
QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6KtXQ
a5bb+Xk3GVVNxtNsexamOt5CUYy22crvW54i3M68CKn18Nv3qfStF4vBTs2jeETa
0jxISHS3AzkJBSUaY7hQO9TaSLv10K6D3IfHWZG1Aa0Skgz1lG4hhXEtnKWAxVuN
rm5Tcxe2KhXTzU2l7v5wN1UWJkbxj43D0uh886QWNhR3tpHqO8171QU5Hqmv380S
9L8d6Bz1hhj/OslzHZax7XnJcpjQziJtdBzfjaMfwXCI4LaGnPmaWr0ptWzMZWDt
wd9If7qDQUoibGBNO2+6nEbJ2Guu1rCgZpL9XATYj0kYBISMtGH2W0W3EAOWZRR3
DdjcLAZY6lnEihrk
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:50 2026 by rpki-client