Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File:                     EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier:          aBYIzsRvwMoWcDGMEL8ALa/+/uw74HlR6iaLQbJtQZ0=
Subject key identifier:   9A:19:3B:85:E4:54:42:1E:53:82:F1:DF:69:28:3B:D7:58:A1:23:4C
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer:       /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial:       3ECFAF9A3564996A6E184A8C5E2E4081879E5E9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 05:47:38 +0000
Manifest this update:     Tue 28 Jul 2026 05:42:38 +0000
Manifest next update:     Wed 29 Jul 2026 07:06:38 +0000
Files and hashes:         1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
                          2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: 1Fb270jqmldbCsCT89hGKaJP6BX54pU8p6NoHCfQCMk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
                          rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cf:af:9a:35:64:99:6a:6e:18:4a:8c:5e:2e:40:81:87:9e:5e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
        Validity
            Not Before: Jul 28 05:42:38 2026 GMT
            Not After : Jul 29 07:06:38 2026 GMT
        Subject: CN=9A193B85E454421E5382F1DF69283BD758A1234C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:18:26:82:e0:4f:2f:18:38:be:c4:6d:31:
                    5f:b6:4e:20:af:e1:2e:11:8c:c5:c2:f8:75:b9:92:
                    e1:78:25:7b:27:48:1f:14:84:98:3c:61:63:52:02:
                    46:f9:46:1c:77:04:45:7d:f8:ce:1e:5c:9e:84:01:
                    a1:5e:84:cf:ac:73:ba:9c:ed:ed:36:66:6c:89:78:
                    f4:2b:1c:8b:11:1c:ae:1b:f9:41:55:87:18:0f:ac:
                    1d:54:46:a7:50:8a:3f:59:d0:16:52:6d:f1:52:58:
                    3d:02:27:65:59:a7:1a:94:35:22:3c:62:0e:e4:fe:
                    19:5d:6b:f7:4f:01:2b:58:f9:9c:04:00:7f:3a:67:
                    42:1b:01:c8:53:5d:8a:e1:21:ab:20:b6:c7:1b:66:
                    9f:99:20:53:bd:f3:d6:0c:ec:9f:fc:b3:0c:9a:22:
                    fd:02:70:db:d0:e3:ea:15:2c:99:34:cb:07:01:2e:
                    03:68:e1:bd:92:e9:28:30:1a:9d:12:2b:77:49:e1:
                    28:2e:85:4d:c2:f8:bf:dc:10:fe:a2:b6:f9:87:08:
                    c8:2e:fd:40:51:ef:f5:09:08:01:a7:61:7d:66:eb:
                    c7:79:3b:34:51:51:ca:bf:fd:1a:92:c0:9d:d0:a6:
                    9a:49:a2:46:33:72:60:aa:d0:16:d5:89:47:7a:3f:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:19:3B:85:E4:54:42:1E:53:82:F1:DF:69:28:3B:D7:58:A1:23:4C
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:d7:cf:e8:4b:ab:58:fe:79:fe:8f:4c:d2:ac:27:a6:cc:
         10:46:32:14:8e:df:eb:4b:f0:21:8a:e1:f1:6a:62:08:9d:f7:
         83:5d:f4:0a:be:e9:c9:0c:76:70:37:77:a0:34:a0:bc:e6:88:
         ee:c4:1f:e4:15:d4:11:a1:8b:07:2e:55:cc:17:ad:80:9a:3a:
         0a:fd:e8:e4:26:9e:a4:65:be:ee:05:f8:a6:ea:60:59:93:83:
         40:cd:59:3a:c4:81:d5:53:9d:97:1f:14:94:e1:d1:00:db:53:
         e5:07:1a:0c:85:82:2c:dc:3b:cb:d2:3f:53:61:4c:3f:ca:ca:
         50:04:3f:69:ae:8c:d8:c8:f7:47:16:d2:6b:a2:28:37:1f:35:
         3b:3e:8e:9e:eb:4c:90:cf:71:d7:05:dd:ce:13:e5:85:24:f4:
         42:9c:71:eb:ed:dd:2d:72:3b:44:d7:5f:82:0c:76:08:3c:f2:
         22:59:d9:cf:93:ed:fe:64:98:14:1b:24:27:02:9d:13:58:cd:
         e5:a0:ea:8c:b1:4f:4c:36:7b:eb:f4:3e:71:c2:8d:b9:c3:87:
         a4:89:0b:9c:4f:41:ad:8b:8e:b2:84:bf:8f:c3:08:97:d5:fb:
         0d:3f:95:74:6a:73:a0:0a:34:f4:4a:3c:0b:d9:2e:5e:c9:2d:
         2c:d6:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:10 2026 by rpki-client