Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
File:                     7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft (raw, json)
Hash identifier:          rE/tyyqiknutme8EC/S2ry1KaJSLWVukQ+2LzrEgI9g=
Subject key identifier:   D7:F1:0E:4C:CF:BE:DC:AE:26:58:3B:80:D1:37:9F:85:DA:C5:37:11
Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B
Certificate issuer:       /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
Certificate serial:       795BA021B583F0FEE09523B8901955EE05DC5996
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 02:13:41 +0000
Manifest this update:     Sat 13 Jun 2026 02:08:41 +0000
Manifest next update:     Sun 14 Jun 2026 03:38:41 +0000
Files and hashes:         1: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (hash: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ=)
                          2: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl (hash: m4tXvGbALeYeg89bPcOFvos9usvoXMvu6bhXKmdRzZo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 03:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5b:a0:21:b5:83:f0:fe:e0:95:23:b8:90:19:55:ee:05:dc:59:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
        Validity
            Not Before: Jun 13 02:08:41 2026 GMT
            Not After : Jun 14 03:38:41 2026 GMT
        Subject: CN=D7F10E4CCFBEDCAE26583B80D1379F85DAC53711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:2e:d4:84:13:5f:2c:98:5e:8b:34:49:eb:
                    e7:c1:b5:66:89:b5:87:85:da:1d:5c:02:97:a7:46:
                    ee:a1:77:70:7b:e9:0e:4e:f1:15:04:09:4a:b8:33:
                    75:bc:a6:3b:c5:95:cb:d8:a5:c8:2e:d2:75:ac:1b:
                    e9:3f:8a:62:f5:9e:a0:22:eb:b9:7e:3e:3a:7b:6e:
                    61:17:a8:a3:b9:0e:7d:23:87:c0:96:23:df:5e:34:
                    d6:65:a0:0e:91:65:00:8c:61:bb:e8:69:d8:3f:29:
                    0f:d1:fb:48:8d:f7:cc:00:8b:5c:80:9f:85:6f:bb:
                    f7:fc:d9:93:c2:9c:a3:e0:f6:b8:9e:89:f5:21:d0:
                    99:eb:ba:53:73:4a:2b:23:97:e3:2b:96:a9:6f:cc:
                    54:35:f6:e0:6b:23:a1:4b:d4:0e:27:bb:26:13:3b:
                    48:9f:d5:b4:9f:8c:ca:53:c9:00:19:8f:73:c4:eb:
                    a2:31:b3:a4:84:c0:50:6e:e5:1c:56:97:b6:e3:4a:
                    38:20:5d:46:6f:4b:bf:21:bd:c7:b2:e3:e9:f6:7f:
                    e2:58:3c:33:84:e8:ad:e8:3c:47:8e:10:9e:73:1a:
                    ac:6a:eb:c5:4a:d5:f1:b2:a2:26:22:80:89:94:e9:
                    75:70:19:6b:d6:1e:e0:35:f4:7e:6a:1b:ca:ed:b1:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:0E:4C:CF:BE:DC:AE:26:58:3B:80:D1:37:9F:85:DA:C5:37:11
            X509v3 Authority Key Identifier:
                keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:e8:5d:f9:56:e9:e0:33:ad:93:90:25:a3:55:a2:7a:6e:
         5a:67:04:3a:e5:4e:61:0f:5e:9a:94:5f:2a:46:d5:57:9e:36:
         2b:19:33:4b:e3:bd:ec:6a:e3:8b:99:15:1c:2e:42:7d:e1:2c:
         01:37:f3:61:23:d3:42:38:55:80:6d:3c:ff:95:ea:35:51:0f:
         7b:e4:34:08:9d:ac:1f:65:d3:bd:30:67:7d:e5:5d:4a:22:d7:
         2c:0a:06:d1:05:55:fa:52:9a:27:12:0e:58:01:ed:46:0f:a2:
         c4:1b:2e:68:0e:0c:ac:c5:50:ca:c9:95:64:19:6b:89:f0:6c:
         62:46:5e:6c:1e:80:d7:51:55:87:72:50:ea:2e:03:68:6d:fd:
         f3:7e:34:b1:37:6f:dc:d8:33:40:a6:da:8e:ed:b5:3f:12:cb:
         b0:6c:9e:d1:0a:d5:7b:67:2a:a2:38:a5:77:21:95:16:29:44:
         7f:a4:4a:a2:06:9e:e8:ff:96:82:6b:4b:27:d6:24:1e:ff:45:
         3f:03:19:e5:7f:5d:a8:c2:68:2a:2f:30:ef:bf:76:87:f5:8c:
         23:3c:98:44:12:0e:6f:4e:9f:39:b2:f4:5a:64:65:2f:6d:44:
         20:5f:ba:c2:99:79:1e:ac:5f:3c:0e:47:5d:26:c1:96:3e:64:
         66:de:e0:05
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUeVugIbWD8P7glSO4kBlV7gXcWZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FBNTg1M0Y1
M0E5MTQ5QjAeFw0yNjA2MTMwMjA4NDFaFw0yNjA2MTQwMzM4NDFaMDMxMTAvBgNV
BAMTKEQ3RjEwRTRDQ0ZCRURDQUUyNjU4M0I4MEQxMzc5Rjg1REFDNTM3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXKi7UhBNfLJheizRJ6+fBtWaJ
tYeF2h1cApenRu6hd3B76Q5O8RUECUq4M3W8pjvFlcvYpcgu0nWsG+k/imL1nqAi
67l+Pjp7bmEXqKO5Dn0jh8CWI99eNNZloA6RZQCMYbvoadg/KQ/R+0iN98wAi1yA
n4Vvu/f82ZPCnKPg9rieifUh0JnrulNzSisjl+MrlqlvzFQ19uBrI6FL1A4nuyYT
O0if1bSfjMpTyQAZj3PE66Ixs6SEwFBu5RxWl7bjSjggXUZvS78hvcey4+n2f+JY
PDOE6K3oPEeOEJ5zGqxq68VK1fGyoiYigImU6XVwGWvWHuA19H5qG8rtsWHxAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU1/EOTM++3K4mWDuA0TefhdrFNxEwHwYDVR0j
BBgwFoAUe7ZEeWrAQYjz1Ms4yqWFP1OpFJswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9ET0xU
RC8xLzdCQjY0NDc5NkFDMDQxODhGM0Q0Q0IzOENBQTU4NTNGNTNBOTE0OUIuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzAvN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FB
NTg1M0Y1M0E5MTQ5Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9MVEQvMS83QkI2NDQ3OTZB
QzA0MTg4RjNENENCMzhDQUE1ODUzRjUzQTkxNDlCLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs3oXflW
6eAzrZOQJaNVonpuWmcEOuVOYQ9empRfKkbVV542KxkzS+O97Grji5kVHC5CfeEs
ATfzYSPTQjhVgG08/5XqNVEPe+Q0CJ2sH2XTvTBnfeVdSiLXLAoG0QVV+lKaJxIO
WAHtRg+ixBsuaA4MrMVQysmVZBlrifBsYkZebB6A11FVh3JQ6i4DaG398340sTdv
3NgzQKbaju21PxLLsGye0QrVe2cqojildyGVFilEf6RKogae6P+WgmtLJ9YkHv9F
PwMZ5X9dqMJoKi8w7792h/WMIzyYRBIOb06fObL0WmRlL21EIF+6wpl5HqxfPA5H
XSbBlj5kZt7gBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:41 2026 by rpki-client