Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File:                     809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier:          TRqIrKcIG6iTz3L0YlHC1w20RYAZW7qoIWujC0uRQis=
Subject key identifier:   9A:DB:9E:DA:53:E0:56:5D:70:2E:72:87:E4:2B:97:8F:FD:BA:6A:7B
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer:       /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial:       5AF5130D7E7F74CA2503504757C833879DD99570
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 20:30:24 +0000
Manifest this update:     Sat 13 Jun 2026 20:25:24 +0000
Manifest next update:     Sun 14 Jun 2026 23:04:24 +0000
Files and hashes:         1: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: QMP3ZfrjUt/Nw9grK8B1cj3JMYeROQQ9lRd4o+xyCsY=)
                          2: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
                          3: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f5:13:0d:7e:7f:74:ca:25:03:50:47:57:c8:33:87:9d:d9:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
        Validity
            Not Before: Jun 13 20:25:24 2026 GMT
            Not After : Jun 14 23:04:24 2026 GMT
        Subject: CN=9ADB9EDA53E0565D702E7287E42B978FFDBA6A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:ef:9f:0a:56:6f:a3:d8:26:4c:08:6e:ec:
                    df:58:ca:19:f1:ee:80:76:54:dd:b8:8a:30:0a:14:
                    b1:18:67:7e:05:9e:03:f4:de:cf:b7:1d:4d:47:73:
                    84:65:e8:83:ea:33:69:b3:bc:69:0d:c6:eb:eb:0b:
                    71:88:1f:71:bc:b3:a1:4b:a4:2a:d5:2a:ce:c0:a0:
                    9d:44:f9:8b:d1:84:70:66:5d:c4:05:63:70:12:00:
                    cf:cc:2c:eb:3f:f1:f2:61:71:cd:7c:e6:9d:8d:bc:
                    98:38:3e:37:4a:24:c1:f9:77:16:ad:9d:a6:1b:af:
                    a4:c8:78:f5:99:c9:11:ca:ab:3f:bc:90:f6:31:43:
                    ba:ea:43:87:f9:30:d7:7d:c2:df:64:d6:ad:e5:65:
                    c6:58:6c:a3:27:30:3f:86:87:33:b2:1b:b7:de:fb:
                    14:60:85:78:cf:bd:4b:18:38:49:f0:c4:a4:7f:05:
                    2a:5c:85:2b:88:dc:59:32:a1:4f:8e:5e:c4:2b:d7:
                    95:b2:77:1e:e2:14:e6:c2:72:84:2e:63:64:a4:55:
                    48:53:ec:de:51:2c:27:56:3e:ad:29:c5:84:a3:5f:
                    23:64:39:55:1d:62:e2:71:7a:64:d2:d4:35:bb:bf:
                    1e:87:12:2e:6d:26:21:bd:0d:0a:97:87:39:9f:7e:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DB:9E:DA:53:E0:56:5D:70:2E:72:87:E4:2B:97:8F:FD:BA:6A:7B
            X509v3 Authority Key Identifier:
                keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:0c:5e:e4:90:fd:68:27:87:44:51:9e:22:89:bf:af:a4:
         70:39:58:e6:97:f2:d6:d1:b4:b7:c7:b3:fb:b7:02:a2:2b:ac:
         26:91:7f:8d:d5:bf:92:38:df:a8:a9:9a:f7:2a:bc:39:37:0a:
         37:3f:f4:6b:a0:9b:c2:49:b9:7c:8e:00:5e:b7:43:2d:56:ac:
         dc:5e:24:50:a0:8b:08:26:11:53:80:ae:e8:c4:11:c8:f4:6e:
         5b:86:17:f7:be:7c:e7:5b:fe:16:b1:89:79:b7:da:96:1f:a6:
         32:f6:73:32:d3:8e:57:bf:e7:ca:2e:40:71:42:45:02:57:ae:
         6e:09:51:8d:51:e8:b3:d2:12:8f:57:36:e3:c6:e9:c5:1e:c8:
         11:02:2a:ea:8a:9c:51:15:a0:3c:d4:46:12:ce:6b:b2:35:a8:
         57:09:a2:38:04:8f:c6:31:86:5a:c8:86:01:4a:f5:ae:3a:af:
         32:0e:41:4b:78:ff:36:e4:7b:3c:d4:1d:4d:49:ed:66:ca:f6:
         58:c1:51:fb:f7:e5:1b:df:b4:50:13:19:4f:0b:ec:12:18:90:
         44:c5:11:db:6d:7f:b7:69:fc:4f:b9:c2:1a:42:96:e5:ec:c7:
         57:c1:eb:c1:f6:6b:e0:d4:9f:53:5c:b1:1d:68:96:2f:97:f3:
         d1:f7:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:35 2026 by rpki-client