Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
File:                     0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft (raw, json)
Hash identifier:          YRSpL+UXCf23w5E/MKipIAgsDX0WnrBeRtzjdIN1TTc=
Subject key identifier:   90:9D:BD:4E:2C:AF:4C:39:00:0C:F4:2C:8B:30:18:51:7F:12:20:2F
Authority key identifier: 0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
Certificate issuer:       /CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Certificate serial:       6346F41A6B7AC7CF06B089774BB0268A4E047646
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
Manifest number:          2F
Signing time:             Fri 12 Jun 2026 16:12:15 +0000
Manifest this update:     Fri 12 Jun 2026 16:07:15 +0000
Manifest next update:     Sat 13 Jun 2026 16:53:15 +0000
Files and hashes:         1: 3130332e3136312e37392e302f32342d3234203d3e20313331323733.roa (hash: YAFpG1/bPoaxYEeGXLp+QJ9xPDcGgfmJ/UlyMfUItNA=)
                          2: 0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl (hash: zpL+6Asi0OI8GId4uKgORvtUBwDyM25YQmPsiqByl+A=)
                          3: 3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa (hash: C7eNmWkgWq7ZRC4sPl4B5Q7nePEgx3UhGfhX2eQZEcc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl
                          rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 16:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:46:f4:1a:6b:7a:c7:cf:06:b0:89:77:4b:b0:26:8a:4e:04:76:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
        Validity
            Not Before: Jun 12 16:07:15 2026 GMT
            Not After : Jun 13 16:53:15 2026 GMT
        Subject: CN=909DBD4E2CAF4C39000CF42C8B3018517F12202F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:fc:6f:d7:a6:e1:e7:e4:b7:95:39:6d:43:
                    75:15:fd:43:06:28:6a:02:6e:36:06:68:8e:f5:91:
                    09:6c:ec:12:72:4f:77:ba:1a:c8:bf:3d:37:f7:68:
                    5b:c7:5a:43:0a:ca:9d:0c:62:92:65:74:e4:f7:b4:
                    1c:b5:78:c5:87:39:37:44:f5:26:db:56:b1:f4:dd:
                    3b:91:7a:30:81:8c:fb:cd:de:c7:52:77:cc:75:e7:
                    1a:84:5f:9d:9f:32:1a:88:24:a9:7f:9a:55:72:72:
                    bb:e9:ed:84:05:27:4b:96:5f:7f:f7:35:ec:85:74:
                    e9:67:54:48:d6:a4:6c:87:69:98:7a:c4:d9:1a:09:
                    b0:06:72:9a:99:ed:02:eb:ed:43:a2:6e:91:5c:97:
                    eb:c2:44:63:a5:47:b2:e0:a0:8e:bc:3c:77:73:e9:
                    d6:ff:94:d7:36:cc:6c:78:1a:13:ba:8a:e3:6e:aa:
                    a0:7a:ea:18:52:77:a2:76:fd:eb:bb:4f:ee:07:6b:
                    ea:cb:2f:8d:ac:37:23:2e:1e:48:b5:8c:01:ed:3e:
                    ae:5b:e3:60:a5:15:03:39:d7:cf:d6:7e:f5:d3:76:
                    e1:fb:0e:be:70:cf:91:e1:2f:26:4d:3b:58:6a:77:
                    f9:14:90:f7:92:f8:cd:ed:3d:f7:38:d1:9d:23:98:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9D:BD:4E:2C:AF:4C:39:00:0C:F4:2C:8B:30:18:51:7F:12:20:2F
            X509v3 Authority Key Identifier:
                keyid:0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:78:1d:ba:c3:40:4e:72:d7:f0:a1:4c:00:13:36:e4:87:
         04:c5:82:ec:d2:71:9e:e0:69:a6:35:c2:53:99:3c:d0:c9:f9:
         53:70:2e:3c:f4:af:4e:f4:ce:13:2b:1c:28:9a:79:0b:46:e9:
         6e:48:b6:96:4d:df:da:5d:61:86:fe:78:4f:83:26:49:3e:25:
         d2:2a:00:0e:56:ba:4e:d8:0a:6b:a0:d8:da:b5:84:c0:52:ed:
         40:1c:b2:3a:84:7b:5c:5a:b5:c0:e5:ce:40:c1:3f:be:99:91:
         91:26:fc:71:b7:c5:7f:50:f2:74:df:87:a9:63:fe:36:3d:8e:
         78:4c:39:26:fb:b2:27:bf:0b:4a:4a:09:22:e5:89:72:65:ba:
         f5:d8:1f:20:61:51:6f:39:0c:8f:12:fb:8d:25:64:03:7c:92:
         31:4e:58:cc:14:01:81:44:93:2f:96:50:70:aa:5f:c7:59:3a:
         61:b7:db:a1:ea:62:10:6f:67:6f:37:0f:4d:d3:32:94:0e:90:
         ce:00:d4:6e:cf:c8:fa:2c:4e:c7:8c:75:ee:b5:78:1d:a3:8d:
         9f:77:31:27:ad:4f:00:89:5e:fc:a0:a2:13:37:92:1b:ad:4a:
         29:21:a7:13:27:b3:f1:8b:bb:ca:04:7e:5c:fa:5d:d2:99:08:
         d4:f6:3e:44
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUY0b0Gmt6x88GsIl3S7Amik4EdkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZERDU2NkY2RUEzRDY3NjA2NEMxQTc5MTE0QjQ2NzQ5
RDdEMTVCNzAeFw0yNjA2MTIxNjA3MTVaFw0yNjA2MTMxNjUzMTVaMDMxMTAvBgNV
BAMTKDkwOURCRDRFMkNBRjRDMzkwMDBDRjQyQzhCMzAxODUxN0YxMjIwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQPxv16bh5+S3lTltQ3UV/UMG
KGoCbjYGaI71kQls7BJyT3e6Gsi/PTf3aFvHWkMKyp0MYpJldOT3tBy1eMWHOTdE
9SbbVrH03TuRejCBjPvN3sdSd8x15xqEX52fMhqIJKl/mlVycrvp7YQFJ0uWX3/3
NeyFdOlnVEjWpGyHaZh6xNkaCbAGcpqZ7QLr7UOibpFcl+vCRGOlR7LgoI68PHdz
6db/lNc2zGx4GhO6iuNuqqB66hhSd6J2/eu7T+4Ha+rLL42sNyMuHki1jAHtPq5b
42ClFQM518/WfvXTduH7Dr5wz5HhLyZNO1hqd/kUkPeS+M3tPfc40Z0jmG1FAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUkJ29TiyvTDkADPQsizAYUX8SIC8wHwYDVR0j
BBgwFoAUD91Wb26j1nYGTBp5EUtGdJ19FbcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1dUVy8w
LzBGREQ1NjZGNkVBM0Q2NzYwNjRDMUE3OTExNEI0Njc0OUQ3RDE1QjcuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMEZERDU2NkY2RUEzRDY3NjA2NEMxQTc5MTE0QjQ2
NzQ5RDdEMTVCNy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NXVFcvMC8wRkRENTY2RjZFQTNENjc2
MDY0QzFBNzkxMTRCNDY3NDlEN0QxNUI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpp4HbrDQE5y1/Ch
TAATNuSHBMWC7NJxnuBppjXCU5k80Mn5U3AuPPSvTvTOEyscKJp5C0bpbki2lk3f
2l1hhv54T4MmST4l0ioADla6TtgKa6DY2rWEwFLtQByyOoR7XFq1wOXOQME/vpmR
kSb8cbfFf1DydN+HqWP+Nj2OeEw5JvuyJ78LSkoJIuWJcmW69dgfIGFRbzkMjxL7
jSVkA3ySMU5YzBQBgUSTL5ZQcKpfx1k6YbfboepiEG9nbzcPTdMylA6QzgDUbs/I
+ixOx4x17rV4HaONn3cxJ61PAIle/KCiEzeSG61KKSGnEyez8Yu7ygR+XPpd0pkI
1PY+RA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:03 2026 by rpki-client