Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          dV0O9feHyAD8X9VeD6gRfORfcdjgGUnydPUryBb2JLw=
Subject key identifier:   A2:EB:23:A4:25:D2:94:1C:22:F8:F5:DC:BC:F4:EC:3A:51:E6:A0:07
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       09A3FAAB96D06C74AC749BB3245E360256ECD0EA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          3B
Signing time:             Sat 13 Jun 2026 00:33:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:28:31 +0000
Manifest next update:     Sun 14 Jun 2026 01:22:31 +0000
Files and hashes:         1: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          2: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          3: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          4: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          5: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          6: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          7: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: 84DtLUosMBAl6PeR+adoJzGtaDvXSBpopBCTIZNgWuk=)
                          8: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          9: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          10: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          11: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          12: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          13: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:fa:ab:96:d0:6c:74:ac:74:9b:b3:24:5e:36:02:56:ec:d0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Jun 13 00:28:31 2026 GMT
            Not After : Jun 14 01:22:31 2026 GMT
        Subject: CN=A2EB23A425D2941C22F8F5DCBCF4EC3A51E6A007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:e9:e4:f6:98:85:99:37:a1:83:ed:d5:ee:
                    62:a2:58:87:34:99:d4:a5:a4:b0:52:11:55:58:04:
                    c4:72:18:b1:0a:6e:ae:a4:01:3f:3f:d8:c2:60:d3:
                    a4:28:0b:9b:b0:99:95:03:c9:27:09:8f:80:0e:78:
                    71:f7:a0:f7:f7:10:c1:92:aa:d6:f7:3c:f1:01:2d:
                    d8:07:44:69:22:9a:22:20:5b:28:02:f9:eb:05:12:
                    73:84:06:41:e2:9e:b6:93:56:cd:62:3c:72:ef:81:
                    7b:2c:89:49:46:3f:97:e9:fa:3a:0b:a4:3f:0a:44:
                    c6:24:74:a3:92:f1:a0:58:40:ec:c8:1d:34:e4:11:
                    b9:12:70:e0:1d:63:ed:3d:c0:d9:18:df:09:c8:0c:
                    28:ef:1b:c7:a2:47:1e:80:5d:31:a9:16:48:24:86:
                    55:67:43:4e:49:68:31:ad:93:14:b9:84:40:db:56:
                    dd:c0:62:92:1e:64:6a:7f:76:52:26:38:42:af:d7:
                    0f:18:bd:70:f7:c7:5b:39:a5:95:99:e3:cd:78:cd:
                    52:3a:09:29:7c:3e:ea:f9:b0:b3:c1:5a:81:84:da:
                    bc:6a:38:86:cd:e1:d9:cb:28:ed:2b:c1:d3:b1:aa:
                    22:f5:c7:c9:56:f5:62:38:0d:0d:38:8f:93:8c:e5:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:23:A4:25:D2:94:1C:22:F8:F5:DC:BC:F4:EC:3A:51:E6:A0:07
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:28:b9:4c:b5:1b:71:c5:f0:ec:36:4d:96:f3:3b:fa:88:
         ce:bc:ad:ba:f0:ea:43:3e:54:1c:32:ef:60:19:0d:17:99:d4:
         ae:8e:8c:6f:11:77:84:9c:8a:03:1b:2b:77:32:23:4c:38:f3:
         71:90:37:76:0f:5f:93:d1:b9:cc:4d:74:d6:93:bd:7c:4d:a8:
         2b:1e:bd:c4:ca:9a:8d:a2:b0:ee:3c:d3:26:c0:c0:35:76:1c:
         6e:d0:9f:17:71:1f:ce:73:2a:8b:39:50:11:ea:47:73:a9:57:
         c8:09:26:88:ce:ad:a4:2c:25:ed:6c:29:3e:c1:0f:f4:cd:03:
         e5:3c:f7:57:c2:e8:53:2f:72:0f:19:ca:cd:6d:e2:d2:46:0a:
         2e:7a:af:9c:07:85:e6:24:54:28:5d:8f:17:b8:c7:35:76:2a:
         f3:f5:4c:1c:4d:6c:7b:1e:25:4c:d0:31:a5:ae:0d:a9:dc:ca:
         32:77:46:7f:6d:06:42:b1:2b:40:4b:46:3c:26:e3:80:e2:fe:
         02:3d:6a:c4:f4:cd:bb:c0:15:c6:60:14:6c:4e:73:a0:ba:c7:
         93:0c:3d:37:0d:17:56:27:bb:87:ec:9e:f7:44:2d:40:47:9d:
         5d:1c:7f:85:9d:58:e7:64:85:2e:66:67:76:6e:69:1c:f5:93:
         71:42:92:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:13 2026 by rpki-client