Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft
File:                     4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft (raw, json)
Hash identifier:          rXk7I5qWl7pUNHsu8+4ypjpvRHKnKMrM99bC/WUlPxs=
Subject key identifier:   47:78:15:A8:BE:99:CB:25:B1:08:78:28:EB:06:53:A7:A5:C8:C7:35
Authority key identifier: 4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F
Certificate issuer:       /CN=4EB98F523D7ADE585D0759A99A1663EA4285D18F
Certificate serial:       30B609424522C31C79003034C59410EAA65986C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 17:17:25 +0000
Manifest this update:     Fri 12 Jun 2026 17:12:25 +0000
Manifest next update:     Sat 13 Jun 2026 20:04:25 +0000
Files and hashes:         1: 3130332e3136312e39302e302f32332d3234203d3e20313331363833.roa (hash: JwjoRj1j48why172F9G4mQrd5YnaWPfcwnJcrULopfQ=)
                          2: 4EB98F523D7ADE585D0759A99A1663EA4285D18F.crl (hash: miang7o+r9EK0wEF0Yf5cngJ+Ol08fMKRn28saqadGI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.crl
                          rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b6:09:42:45:22:c3:1c:79:00:30:34:c5:94:10:ea:a6:59:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EB98F523D7ADE585D0759A99A1663EA4285D18F
        Validity
            Not Before: Jun 12 17:12:25 2026 GMT
            Not After : Jun 13 20:04:25 2026 GMT
        Subject: CN=477815A8BE99CB25B1087828EB0653A7A5C8C735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:1a:5e:ef:a7:0e:09:60:b3:04:c8:5d:bc:
                    0c:fb:6e:e0:1d:52:1e:e8:e9:8c:02:ed:3f:92:27:
                    08:ce:8e:de:e2:12:41:e9:95:fd:1a:76:ee:1d:20:
                    c6:82:f5:4a:83:74:5a:89:f9:8c:31:1f:fa:5d:28:
                    ea:f5:0e:64:13:47:23:4e:00:7c:2c:17:d6:a1:90:
                    b6:8f:ae:97:a2:ff:82:99:35:d0:0f:48:81:56:92:
                    f8:18:f3:f6:b0:2d:c1:55:8b:ac:ba:7c:b6:57:db:
                    88:c8:71:dc:d0:c0:0e:35:f2:f0:83:72:f0:e4:db:
                    ad:d4:7e:3d:e2:56:48:12:69:42:93:8b:da:8e:2c:
                    d5:c1:e5:6b:83:25:ca:cd:03:bb:05:c4:4c:28:fc:
                    8e:bd:0c:5d:95:f2:31:e6:09:ad:1b:c4:b9:0d:bb:
                    b1:5b:c6:e3:5a:b0:ed:37:43:0e:16:e7:c7:a4:32:
                    b4:ea:f8:47:be:8f:36:32:1a:38:42:cf:50:a1:0c:
                    1c:37:2a:3f:f0:ed:54:c3:56:f0:fb:20:79:94:51:
                    da:fc:ef:f6:e7:97:19:21:1c:a9:83:48:fb:bc:c5:
                    59:5e:46:bf:28:ef:4b:34:19:04:72:65:cf:92:a0:
                    cd:e0:d5:50:fc:a1:cb:61:4e:17:40:eb:2f:1a:bc:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:15:A8:BE:99:CB:25:B1:08:78:28:EB:06:53:A7:A5:C8:C7:35
            X509v3 Authority Key Identifier:
                keyid:4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:62:1b:af:4f:c8:f3:46:9c:7d:f4:a7:64:e9:b6:d7:9f:
         01:fc:7c:b6:4c:90:03:b4:78:cd:04:9c:e6:00:a7:3c:f3:b8:
         45:e5:27:52:64:76:23:0d:7b:45:a3:6e:ca:3e:f4:a2:c1:f2:
         cc:6d:71:a0:8b:64:9f:79:00:eb:c4:6e:10:f7:dc:74:38:6f:
         61:66:84:c0:0f:99:32:7a:c9:17:2f:c5:71:9f:a1:21:5e:95:
         78:6b:5d:e7:2f:74:77:df:98:a2:ba:f2:0b:ce:f1:64:3b:a2:
         ef:e9:cb:60:1e:d1:36:fb:eb:a2:e6:52:2f:64:5e:d2:d5:42:
         73:5e:3d:4f:5f:64:9c:90:17:d9:bd:65:80:fd:30:d2:f9:01:
         ff:98:58:1b:32:e8:f5:29:73:e5:9f:04:c2:4e:cc:f0:91:41:
         af:2d:69:32:fb:cd:06:67:d6:c7:fb:25:c2:3a:71:d0:29:d7:
         32:36:69:c3:96:29:4d:82:29:49:26:f3:0e:53:c1:ad:c8:d4:
         89:f9:46:7e:e3:13:69:fa:8f:31:0f:bd:df:3a:ae:dc:fc:1d:
         f5:80:c6:4b:8e:5c:ad:ad:f2:ae:63:e7:f0:00:0b:fe:da:e6:
         06:16:05:45:09:8e:a4:53:e0:2e:ee:a4:85:9e:04:66:2e:3c:
         aa:b4:da:84
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUMLYJQkUiwxx5ADA0xZQQ6qZZhsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVCOThGNTIzRDdBREU1ODVEMDc1OUE5OUExNjYzRUE0
Mjg1RDE4RjAeFw0yNjA2MTIxNzEyMjVaFw0yNjA2MTMyMDA0MjVaMDMxMTAvBgNV
BAMTKDQ3NzgxNUE4QkU5OUNCMjVCMTA4NzgyOEVCMDY1M0E3QTVDOEM3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqhpe76cOCWCzBMhdvAz7buAd
Uh7o6YwC7T+SJwjOjt7iEkHplf0adu4dIMaC9UqDdFqJ+YwxH/pdKOr1DmQTRyNO
AHwsF9ahkLaPrpei/4KZNdAPSIFWkvgY8/awLcFVi6y6fLZX24jIcdzQwA418vCD
cvDk263Ufj3iVkgSaUKTi9qOLNXB5WuDJcrNA7sFxEwo/I69DF2V8jHmCa0bxLkN
u7FbxuNasO03Qw4W58ekMrTq+Ee+jzYyGjhCz1ChDBw3Kj/w7VTDVvD7IHmUUdr8
7/bnlxkhHKmDSPu8xVleRr8o70s0GQRyZc+SoM3g1VD8octhThdA6y8avPjNAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUR3gVqL6ZyyWxCHgo6wZTp6XIxzUwHwYDVR0j
BBgwFoAUTrmPUj163lhdB1mpmhZj6kKF0Y8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU5OT0xV
WC8wLzRFQjk4RjUyM0Q3QURFNTg1RDA3NTlBOTlBMTY2M0VBNDI4NUQxOEYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNEVCOThGNTIzRDdBREU1ODVEMDc1OUE5OUEx
NjYzRUE0Mjg1RDE4Ri5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lOTk9MVVgvMC80RUI5OEY1MjNE
N0FERTU4NUQwNzU5QTk5QTE2NjNFQTQyODVEMThGLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtxiG69P
yPNGnH30p2TpttefAfx8tkyQA7R4zQSc5gCnPPO4ReUnUmR2Iw17RaNuyj70osHy
zG1xoItkn3kA68RuEPfcdDhvYWaEwA+ZMnrJFy/FcZ+hIV6VeGtd5y90d9+Yorry
C87xZDui7+nLYB7RNvvrouZSL2Re0tVCc149T19knJAX2b1lgP0w0vkB/5hYGzLo
9Slz5Z8Ewk7M8JFBry1pMvvNBmfWx/slwjpx0CnXMjZpw5YpTYIpSSbzDlPBrcjU
iflGfuMTafqPMQ+93zqu3Pwd9YDGS45cra3yrmPn8AAL/trmBhYFRQmOpFPgLu6k
hZ4EZi48qrTahA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:40:54 2026 by rpki-client