Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
File:                     7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft (raw, json)
Hash identifier:          0bWAJDV/+NNFE0GcIlw/GZ0pZI5w/lAXqWHNKvC/Lpo=
Subject key identifier:   C1:A8:3F:E2:4C:69:22:DB:46:99:29:1E:97:52:FA:D0:27:50:E0:A1
Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B
Certificate issuer:       /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
Certificate serial:       39F427465806E5E54CB2D81921B5F1A232AE8F72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
Manifest number:          B4
Signing time:             Tue 22 Sep 2026 02:43:30 +0000
Manifest this update:     Tue 22 Sep 2026 02:38:30 +0000
Manifest next update:     Wed 23 Sep 2026 03:25:30 +0000
Files and hashes:         1: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (hash: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ=)
                          2: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl (hash: R59J97+r8IbscrvG1m+YFCTzUNHtQchQtGsXdVCor9A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 03:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:27:46:58:06:e5:e5:4c:b2:d8:19:21:b5:f1:a2:32:ae:8f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
        Validity
            Not Before: Sep 22 02:38:30 2026 GMT
            Not After : Sep 23 03:25:30 2026 GMT
        Subject: CN=C1A83FE24C6922DB4699291E9752FAD02750E0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:1d:d7:a2:40:af:56:19:a9:58:f7:d2:0a:
                    74:cd:33:f1:1f:f0:2f:ee:ea:ce:af:05:a9:08:ef:
                    56:52:94:41:aa:aa:b1:6d:5b:09:fd:a4:a1:86:b2:
                    6f:a6:d0:a2:50:09:eb:a5:b0:c3:cc:8c:25:37:d5:
                    d2:75:a2:d6:1e:b6:05:46:72:28:6c:ea:2d:90:e4:
                    6f:71:e9:ad:f4:d8:08:d1:bf:bc:3a:90:43:d4:20:
                    51:e9:1c:7b:d7:59:43:4e:cd:ad:bd:e9:7c:9b:e0:
                    bf:2d:6c:4f:4b:88:67:f4:a8:35:d9:3d:6a:e7:1c:
                    13:02:3e:1f:13:55:8f:4c:fa:f0:ff:e7:a0:ee:3b:
                    28:d3:a6:9c:2d:ed:ef:9e:33:9b:1c:32:09:8f:78:
                    64:f6:b0:36:64:1f:db:f3:85:9d:7a:c3:5a:93:a0:
                    fe:6c:62:46:66:ce:5b:2f:00:cf:15:fd:cf:f3:66:
                    c7:38:8d:e7:65:70:61:f2:81:09:ea:08:a3:d3:97:
                    27:7a:15:76:90:fa:08:81:32:2f:9a:74:7a:c0:30:
                    45:c8:a7:51:cd:cb:1e:78:04:74:b6:6e:dd:57:ac:
                    bc:18:af:6f:46:60:ca:70:2f:20:a4:b9:81:96:14:
                    ce:93:8c:4a:5b:a1:9e:3e:79:9b:92:46:02:ea:70:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A8:3F:E2:4C:69:22:DB:46:99:29:1E:97:52:FA:D0:27:50:E0:A1
            X509v3 Authority Key Identifier:
                keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:40:c3:93:32:c8:b2:96:47:a0:d8:40:87:17:09:34:16:
         3d:5c:4b:62:10:36:9a:2a:f1:19:11:b3:8e:09:53:1f:38:b8:
         32:47:97:09:cd:d1:aa:c0:7a:00:c0:d1:a0:36:43:37:12:ed:
         c7:2e:fe:0b:d0:c9:c2:38:7d:73:be:bf:92:c3:f5:13:63:a0:
         4f:eb:17:9c:44:bd:a8:7a:39:84:33:a7:ac:43:82:a3:9e:a0:
         fb:4a:e1:7e:7f:15:65:40:5e:17:b4:06:88:5f:e8:64:cf:72:
         0d:0e:ef:44:eb:cf:83:56:fe:2f:cb:bc:37:0e:6e:6e:00:17:
         8b:35:2a:ff:ce:a7:c7:85:f9:c1:97:92:71:bc:36:32:76:3e:
         fa:f9:8d:9e:85:49:4d:9b:db:63:3a:64:d5:49:99:ba:c8:81:
         72:6d:23:9d:94:5c:55:fb:69:a9:3b:08:4f:cd:b4:3f:3e:59:
         e1:6b:ab:31:ce:f2:f9:77:4b:79:79:be:b0:75:45:ae:6a:15:
         8b:f3:9e:a3:92:7c:f1:41:53:9f:09:be:53:e3:a2:c8:81:50:
         d6:80:80:06:2c:eb:7c:1f:6d:a3:63:e7:a0:c7:50:84:bb:cf:
         7a:c3:dc:a5:b2:e0:b9:79:b0:f3:73:5d:ad:e1:88:8f:d9:63:
         03:34:ef:91
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUOfQnRlgG5eVMstgZIbXxojKuj3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FBNTg1M0Y1
M0E5MTQ5QjAeFw0yNjA5MjIwMjM4MzBaFw0yNjA5MjMwMzI1MzBaMDMxMTAvBgNV
BAMTKEMxQTgzRkUyNEM2OTIyREI0Njk5MjkxRTk3NTJGQUQwMjc1MEUwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPPR3XokCvVhmpWPfSCnTNM/Ef
8C/u6s6vBakI71ZSlEGqqrFtWwn9pKGGsm+m0KJQCeulsMPMjCU31dJ1otYetgVG
cihs6i2Q5G9x6a302AjRv7w6kEPUIFHpHHvXWUNOza296Xyb4L8tbE9LiGf0qDXZ
PWrnHBMCPh8TVY9M+vD/56DuOyjTppwt7e+eM5scMgmPeGT2sDZkH9vzhZ16w1qT
oP5sYkZmzlsvAM8V/c/zZsc4jedlcGHygQnqCKPTlyd6FXaQ+giBMi+adHrAMEXI
p1HNyx54BHS2bt1XrLwYr29GYMpwLyCkuYGWFM6TjEpboZ4+eZuSRgLqcAaDAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUwag/4kxpIttGmSkel1L60CdQ4KEwHwYDVR0j
BBgwFoAUe7ZEeWrAQYjz1Ms4yqWFP1OpFJswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9ET0xU
RC8xLzdCQjY0NDc5NkFDMDQxODhGM0Q0Q0IzOENBQTU4NTNGNTNBOTE0OUIuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzAvN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FB
NTg1M0Y1M0E5MTQ5Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9MVEQvMS83QkI2NDQ3OTZB
QzA0MTg4RjNENENCMzhDQUE1ODUzRjUzQTkxNDlCLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVtAw5My
yLKWR6DYQIcXCTQWPVxLYhA2mirxGRGzjglTHzi4MkeXCc3RqsB6AMDRoDZDNxLt
xy7+C9DJwjh9c76/ksP1E2OgT+sXnES9qHo5hDOnrEOCo56g+0rhfn8VZUBeF7QG
iF/oZM9yDQ7vROvPg1b+L8u8Nw5ubgAXizUq/86nx4X5wZeScbw2MnY++vmNnoVJ
TZvbYzpk1UmZusiBcm0jnZRcVftpqTsIT820Pz5Z4WurMc7y+XdLeXm+sHVFrmoV
i/Oeo5J88UFTnwm+U+OiyIFQ1oCABizrfB9to2PnoMdQhLvPesPcpbLguXmw83Nd
reGIj9ljAzTvkQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:06:33 2026 by rpki-client