Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
File:                     881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft (raw, json)
Hash identifier:          hkdAeL7gjv1ZpScRRuAE5f6adNOf9/DKyMBqzS8Ma6o=
Subject key identifier:   23:3F:84:2F:7A:FE:E1:2D:D8:6C:67:0C:B0:AF:6A:01:07:0A:17:36
Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
Certificate issuer:       /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Certificate serial:       18927761A85FA80778F34E7ED07D1295F7055C01
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 09:13:04 +0000
Manifest this update:     Tue 28 Jul 2026 09:08:04 +0000
Manifest next update:     Wed 29 Jul 2026 12:57:04 +0000
Files and hashes:         1: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (hash: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=)
                          2: 323430333a383634303a3a2f33322d3634203d3e20333936393832.roa (hash: Jm1SzTARAHpPF8XgcCqrOsbDyqd1bedbKKWEeTdyjNA=)
                          3: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl (hash: zMZV7XEpKz5DTvGzMYhYk7QcekRMvx+2WoOtYIwkx2U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
                          rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:92:77:61:a8:5f:a8:07:78:f3:4e:7e:d0:7d:12:95:f7:05:5c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
        Validity
            Not Before: Jul 28 09:08:04 2026 GMT
            Not After : Jul 29 12:57:04 2026 GMT
        Subject: CN=233F842F7AFEE12DD86C670CB0AF6A01070A1736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:83:dd:5d:1a:5e:e1:05:eb:40:c5:ee:52:
                    2f:cb:d5:ad:70:0e:e6:4c:8d:dc:08:48:08:39:89:
                    bf:7a:e7:cc:7e:e4:be:c5:bb:ec:b2:e2:2d:14:15:
                    fe:4a:7b:78:55:44:58:a6:9c:04:c7:92:8d:05:ce:
                    da:23:13:ca:4f:04:cd:12:eb:a6:47:10:51:c3:8c:
                    45:9b:3a:4f:d2:72:70:28:ab:37:60:bb:4c:66:18:
                    eb:50:11:db:2d:4d:0a:43:9f:91:96:ac:6c:82:64:
                    1c:37:ef:36:ab:f7:bb:24:cb:a9:b0:5a:02:7e:0e:
                    58:cc:71:a8:48:79:aa:dd:8b:4c:fb:a5:08:54:0b:
                    e9:3b:31:94:5f:36:c1:98:29:d0:94:13:fe:67:c0:
                    11:42:d2:97:89:58:30:32:c7:00:e6:eb:33:21:44:
                    3d:34:18:1a:80:d2:17:8e:52:c1:37:6f:39:84:54:
                    0e:90:61:20:a6:9e:23:88:33:73:0b:43:11:cb:1c:
                    71:96:76:ec:44:f8:1a:1a:12:fe:a6:68:0b:43:94:
                    c8:4d:3c:85:61:9d:c0:ee:7d:a8:7a:c1:39:ae:bb:
                    15:31:88:e5:72:8e:b8:44:59:df:41:35:27:e4:0f:
                    3a:5f:1f:88:d0:7d:e8:34:13:13:12:59:92:3a:d6:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:84:2F:7A:FE:E1:2D:D8:6C:67:0C:B0:AF:6A:01:07:0A:17:36
            X509v3 Authority Key Identifier:
                keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:72:1d:84:a6:a4:9c:77:24:96:71:77:0a:d0:a4:0a:e6:
         90:c7:69:df:2f:85:a5:1c:a5:ec:50:a2:51:22:1a:b9:b5:9c:
         98:12:d2:c6:ff:05:41:ea:0d:d3:aa:52:31:58:e3:fc:1c:b3:
         bf:86:7b:f1:de:29:64:d5:80:e2:b8:bd:81:ea:f9:4a:af:d8:
         ec:1c:f5:ed:2d:8f:96:c6:f1:f7:76:89:d5:a6:a4:a6:c0:c7:
         5d:76:a6:73:d3:11:f1:80:b2:3b:f8:fe:11:d3:af:f1:f5:47:
         97:94:b0:49:db:99:3f:44:b2:20:29:8b:86:1c:f4:33:18:b2:
         45:db:f0:dd:d6:c5:0c:40:49:15:28:b1:73:f0:aa:ed:e7:1d:
         39:24:51:16:d1:09:c2:0e:f7:cb:39:e8:a6:8d:49:94:05:86:
         5d:58:2a:6d:83:cc:42:ac:b5:48:69:88:38:95:3d:ff:51:7f:
         f3:ba:97:7f:05:69:0f:1f:c0:26:20:b0:53:f1:ca:d5:fd:71:
         54:32:3c:dd:9c:18:8a:4e:8b:ca:a3:5f:b5:c8:a0:8d:1a:e9:
         f5:e6:54:b6:d2:d5:1c:9e:d8:18:8d:f7:90:10:62:de:71:27:
         a8:d1:92:09:78:f5:27:1f:cd:80:43:49:be:d8:ce:77:a5:86:
         60:c0:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:38 2026 by rpki-client