Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft
File:                     E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json)
Hash identifier:          o7gwOAx9vzKJ/EuzbZfm3BHbWCEHM2Hs+G+E68Li85E=
Subject key identifier:   C3:85:DC:7B:DE:FE:B3:5C:B6:41:13:A4:18:8C:36:3B:96:A1:BD:17
Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0
Certificate issuer:       /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0
Certificate serial:       64B9B796494B3BD9886DC1C76F1DB3B5B41AE862
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft
Manifest number:          05
Signing time:             Sat 13 Jun 2026 04:03:50 +0000
Manifest this update:     Sat 13 Jun 2026 03:58:50 +0000
Manifest next update:     Sun 14 Jun 2026 07:45:50 +0000
Files and hashes:         1: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: 8Lm10iy9Yy1es5AnTNRF7xQcDBp7OZ+Xq0oOJks3Yn8=)
                          2: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl
                          rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:b7:96:49:4b:3b:d9:88:6d:c1:c7:6f:1d:b3:b5:b4:1a:e8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0
        Validity
            Not Before: Jun 13 03:58:50 2026 GMT
            Not After : Jun 14 07:45:50 2026 GMT
        Subject: CN=C385DC7BDEFEB35CB64113A4188C363B96A1BD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:30:a6:ab:73:ee:e7:a2:70:b8:d1:c6:e2:
                    ff:a6:7b:2c:ee:6b:e9:d5:97:49:e4:e0:1e:d5:f0:
                    2a:5b:7c:2c:f9:93:9d:45:d0:87:e7:4f:f6:dc:80:
                    1f:f6:9c:6d:0c:88:f4:4a:0a:23:28:38:b0:c9:13:
                    26:87:45:e7:56:e0:40:f5:ce:fe:c0:98:50:ff:5b:
                    5f:e3:cc:2d:d3:0e:8e:fe:c2:aa:9f:a5:84:80:1f:
                    f0:d3:29:af:1b:59:b2:2a:b4:c7:03:4f:38:e7:96:
                    d3:a1:2b:5a:96:ef:05:c7:d6:7b:72:2c:3d:d8:53:
                    87:46:c0:8b:0e:0f:d0:ad:c6:f8:72:e8:12:9d:48:
                    2e:93:04:be:b8:66:e5:f5:53:18:56:da:5b:d3:0e:
                    53:02:0c:05:bb:76:ba:ef:a1:88:f1:b2:67:ea:91:
                    9a:a4:7f:9d:56:27:37:f0:50:aa:7c:1e:cb:a2:f6:
                    d9:54:fd:46:8a:e4:6f:b6:2a:74:3a:db:2c:7c:e9:
                    72:de:44:f3:e5:85:b3:4d:e2:d1:42:c0:4c:4f:00:
                    7b:79:ad:56:c7:00:36:33:4b:ef:43:c7:f9:62:4e:
                    cf:b1:8b:c6:1b:df:dd:96:f8:41:1f:48:35:2c:21:
                    d0:27:34:97:d6:09:45:cd:a8:2f:45:9a:66:aa:57:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:85:DC:7B:DE:FE:B3:5C:B6:41:13:A4:18:8C:36:3B:96:A1:BD:17
            X509v3 Authority Key Identifier:
                keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:c4:bf:3f:f0:fc:22:2f:41:33:4d:b4:5f:f0:c1:7a:44:
         4c:36:bf:f3:3e:42:62:43:17:bf:69:ea:50:9b:d9:69:b9:6c:
         48:be:3f:ba:b7:02:3a:f7:3c:cb:d8:10:36:54:c0:35:a3:1b:
         b9:5d:72:bf:c3:01:ec:27:96:c7:4c:1b:54:dc:bc:11:ae:0a:
         f0:db:74:af:a7:8b:89:7e:bd:f6:c9:ff:88:dd:eb:0a:6d:d8:
         ac:90:17:ab:b1:a0:cc:a3:ac:6f:90:8d:4a:7f:d1:54:c9:6f:
         5e:f7:65:d5:8b:1c:6b:98:90:ff:e6:62:13:e7:2e:71:df:51:
         b8:1c:59:95:30:a5:a0:db:7a:15:35:a8:0f:aa:ed:8b:1f:35:
         8f:e0:bb:2b:fe:88:1a:8b:1a:f3:e6:6c:cd:ad:14:c4:06:70:
         ac:5c:04:d7:3c:0d:15:45:05:2c:d0:c2:b4:6b:e1:5e:c5:bf:
         5f:67:2f:1d:11:d2:4b:f9:cd:48:23:12:e0:32:69:4b:ef:13:
         87:7a:8b:d4:26:c5:59:db:6a:e3:3f:48:59:54:ff:62:3b:fd:
         c2:62:c7:43:3d:7a:04:ff:30:54:bd:1e:02:ab:1d:80:bb:7d:
         dd:bd:43:53:d0:b7:c3:2a:8a:bd:0a:55:c5:b4:18:c4:07:ca:
         fe:b7:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:35 2026 by rpki-client