Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
File:                     71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json)
Hash identifier:          Pg7Rq0KDfvsXB53gEAfEHwht9OJswpI51LKTn8Y4LJU=
Subject key identifier:   A7:A6:D3:9A:DD:60:21:DA:92:E1:FB:A3:A3:14:4F:9D:BA:9E:46:8F
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Certificate issuer:       /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial:       5E9590EEEF897652E4E3291C24D3E3164D984C53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
Manifest number:          F1
Signing time:             Wed 17 Jun 2026 00:06:23 +0000
Manifest this update:     Wed 17 Jun 2026 00:01:23 +0000
Manifest next update:     Thu 18 Jun 2026 01:50:23 +0000
Files and hashes:         1: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=)
                          2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: eD1Zek7AqQvEzLgrKpevLUXYjVHrEcKLbTNOwnQbmbA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
                          rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:95:90:ee:ef:89:76:52:e4:e3:29:1c:24:d3:e3:16:4d:98:4c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
        Validity
            Not Before: Jun 17 00:01:23 2026 GMT
            Not After : Jun 18 01:50:23 2026 GMT
        Subject: CN=A7A6D39ADD6021DA92E1FBA3A3144F9DBA9E468F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:62:1a:69:a4:7e:85:5c:66:f5:0b:bf:c8:
                    2a:52:73:5d:66:13:e8:55:7b:3e:03:7e:7f:e5:98:
                    7f:6c:0c:c0:bb:20:38:72:04:41:4a:63:3d:59:c9:
                    f7:11:ce:bb:fa:fc:de:9c:eb:c5:b6:b4:20:92:23:
                    21:48:a6:87:15:4d:5d:3d:00:63:24:cb:87:e3:ca:
                    3c:68:64:e8:d1:ac:dd:19:f6:ed:49:0d:f0:76:e2:
                    19:88:8e:45:a4:aa:e1:16:f9:ae:bf:03:c6:bf:00:
                    aa:ca:55:e3:e2:d7:3d:18:72:91:9b:d3:b4:2f:ef:
                    c4:bd:b7:b1:95:48:95:01:ef:91:62:37:fd:72:15:
                    30:9e:31:73:55:a2:e5:d9:df:10:f3:4b:28:b8:c7:
                    fa:d5:fb:7a:19:17:0d:54:ab:87:f9:94:01:10:3a:
                    fd:71:ce:eb:0c:d5:59:ea:9c:68:0b:d3:5c:07:5b:
                    9b:08:2d:7e:1b:3d:6b:88:b9:d7:41:5f:7a:59:24:
                    e6:77:f6:d6:43:30:d5:ee:b3:79:d7:c0:29:20:4d:
                    75:99:15:b5:ea:46:28:89:9c:4e:2a:0e:5a:a2:88:
                    9e:f8:4c:29:f0:52:cd:6b:60:0f:34:af:fd:80:da:
                    f8:b8:29:ab:3d:d3:4b:c9:47:38:c6:98:9b:76:74:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A6:D3:9A:DD:60:21:DA:92:E1:FB:A3:A3:14:4F:9D:BA:9E:46:8F
            X509v3 Authority Key Identifier:
                keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:af:5b:ba:a9:7b:27:9b:fa:b6:e2:12:75:8e:aa:65:39:
         aa:e1:6d:e3:43:d5:cf:a2:56:c5:a8:4d:74:2b:37:b6:ee:19:
         42:7f:96:91:74:98:de:59:9a:3a:cc:4e:06:ad:e7:ac:48:27:
         06:5a:80:77:de:91:65:a2:f3:1d:8b:6b:46:f4:15:a4:7d:20:
         64:aa:5d:0c:05:9c:34:71:51:24:21:3b:bb:bc:fc:38:5e:02:
         cf:68:a9:1e:24:24:ae:c5:36:d9:0f:66:80:a5:46:9a:80:f5:
         b5:13:02:ed:7b:17:99:bc:62:09:4c:87:f2:30:50:21:0f:15:
         25:6d:ab:0b:06:70:11:2c:2d:8d:e9:63:82:a7:07:a9:9b:c0:
         68:7d:5d:4b:06:67:b0:68:4d:ce:b6:ec:d1:3e:66:35:a8:5a:
         70:ea:f7:af:56:20:79:ae:48:a2:0d:39:14:e3:e6:fd:00:ab:
         31:2c:cc:a6:b6:a7:c6:e6:9f:52:d2:b1:ec:0c:32:e9:b6:f8:
         64:9e:5b:b9:de:b6:ba:e1:ca:ca:2a:0e:ba:34:e6:10:6d:31:
         3f:66:84:9e:f9:64:15:87:ce:ca:e0:13:20:47:bd:57:2e:6b:
         18:91:f0:14:96:32:5a:80:d3:d7:38:4b:30:ec:d3:01:b1:71:
         af:95:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:14 2026 by rpki-client