Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
File:                     6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft (raw, json)
Hash identifier:          d++JgQpr9RfRqzQcU7ltpbahOROLENwFAo3T/+gJ6OM=
Subject key identifier:   C9:A8:8D:68:45:21:8C:9D:E4:24:BE:41:61:3D:1E:F5:80:3E:F5:68
Authority key identifier: 6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4
Certificate issuer:       /CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4
Certificate serial:       503990B2C4D367605D8F047B49FD08E2DC311BF6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 03:42:25 +0000
Manifest this update:     Tue 28 Jul 2026 03:37:25 +0000
Manifest next update:     Wed 29 Jul 2026 07:35:25 +0000
Files and hashes:         1: 6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl (hash: vC9PnHMhhuHdxZ9vyM+smKLU/SyPQ0j+sB4QM0/FgfY=)
                          2: 323430313a646165303a3a2f33322d3438203d3e203137343133.roa (hash: b68bWoGxHLV5+EX7YP+9x4UhUEcmWXOG9HkIeVaSI1M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:90:b2:c4:d3:67:60:5d:8f:04:7b:49:fd:08:e2:dc:31:1b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4
        Validity
            Not Before: Jul 28 03:37:25 2026 GMT
            Not After : Jul 29 07:35:25 2026 GMT
        Subject: CN=C9A88D6845218C9DE424BE41613D1EF5803EF568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:18:ca:52:27:28:63:28:51:c0:b2:51:50:
                    4f:9a:a8:c1:9a:33:fa:71:40:55:7d:cc:99:1e:89:
                    0b:16:28:3a:96:bf:5f:cf:fe:e9:d9:e2:72:8c:69:
                    e8:b4:89:ff:38:f5:c9:98:f8:4e:e3:a8:9c:3f:4c:
                    c6:36:ed:99:83:ad:03:99:7d:c2:5a:92:69:93:66:
                    62:c1:0c:16:a8:c0:5c:18:de:19:44:a1:97:4f:be:
                    f0:f9:2e:dc:ff:78:58:02:5d:5f:2a:17:ad:a5:5b:
                    b2:78:76:58:e3:01:15:2b:ea:6b:f3:33:61:5e:c1:
                    ee:58:52:3d:90:87:e1:29:21:46:26:1d:4d:da:d3:
                    cc:10:1f:d6:91:15:14:2e:52:75:17:52:1d:b2:0c:
                    68:53:c2:a0:f8:59:b1:1f:9e:39:fb:87:54:33:30:
                    71:4e:03:ae:1b:ea:62:c7:93:ba:4c:de:66:c4:d2:
                    bc:a3:2a:40:95:3d:da:e5:ef:e6:ad:1e:4c:b2:fc:
                    02:96:8d:5e:4c:48:7c:56:ae:31:62:00:b3:bb:43:
                    ab:ae:b1:86:f5:c8:80:4b:e1:09:51:31:04:ad:cc:
                    c5:90:fe:b3:50:87:39:b5:c3:41:d6:16:47:2d:09:
                    41:30:ec:27:cc:76:ca:cf:17:b0:30:30:43:7a:de:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A8:8D:68:45:21:8C:9D:E4:24:BE:41:61:3D:1E:F5:80:3E:F5:68
            X509v3 Authority Key Identifier:
                keyid:6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:17:d4:bb:41:50:4e:f2:4a:c6:bd:1b:44:b7:03:8b:2b:db:
         36:df:a0:73:ba:82:5f:66:9e:db:b0:9c:19:52:df:7d:d8:6e:
         16:f4:de:ba:46:c4:32:84:e6:92:8f:40:e4:40:ec:4d:ba:1b:
         f2:21:51:15:71:ae:fd:d1:1b:00:81:d3:97:d7:d3:b9:d6:a7:
         e6:50:87:a0:ec:5a:d3:2f:fa:b4:87:e9:62:19:67:be:1e:d3:
         51:b7:87:71:d9:46:6a:22:21:38:ca:5d:ac:10:41:8c:3e:d9:
         2d:f5:25:56:39:5a:6a:82:c6:32:bc:5c:a5:78:d8:35:48:92:
         d1:4c:ba:27:45:7c:b9:ad:24:f8:3e:53:1a:f9:70:a7:83:89:
         51:f3:ef:7b:71:0d:18:fc:da:c4:5a:3d:66:1f:a0:10:cd:c2:
         b0:c1:db:a3:c8:cd:ee:3c:38:65:1b:85:5a:1e:46:f6:f6:b6:
         4b:b8:3c:63:e1:27:dd:84:b9:15:74:fa:62:d9:c1:af:ed:fa:
         6d:b7:80:ed:e1:48:a1:c4:e1:f7:0b:d2:59:1e:f9:ae:1b:c2:
         c0:3a:b2:5a:83:bb:ed:38:54:fb:40:5c:11:84:cd:ce:5c:48:
         26:1b:5c:f6:f3:81:ac:f1:59:79:3f:52:60:40:c4:c2:33:78:
         51:ba:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:12 2026 by rpki-client