Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
File:                     E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft (raw, json)
Hash identifier:          gfxbhIqAOYTXdberHkodnVgr1Ph0ZYiuHGyijh8WQM8=
Subject key identifier:   A0:0B:4F:A1:F4:0F:DD:6D:3A:24:31:B7:39:BF:4A:E7:2E:40:59:56
Authority key identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8
Certificate issuer:       /CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
Certificate serial:       6F808B31A495FC017F8143E46347715BF4A72E89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 15:32:03 +0000
Manifest this update:     Fri 12 Jun 2026 15:27:03 +0000
Manifest next update:     Sat 13 Jun 2026 17:31:03 +0000
Files and hashes:         1: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl (hash: jeMcXZL+ZVo2xVnFQex+QeKwcxusvbxUbYNAUnY0DmU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl
                          rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 17:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:80:8b:31:a4:95:fc:01:7f:81:43:e4:63:47:71:5b:f4:a7:2e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
        Validity
            Not Before: Jun 12 15:27:03 2026 GMT
            Not After : Jun 13 17:31:03 2026 GMT
        Subject: CN=A00B4FA1F40FDD6D3A2431B739BF4AE72E405956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:7a:14:56:81:93:93:d1:55:e0:77:27:b3:
                    0f:65:cc:e3:5f:39:ab:4d:c8:d6:a5:04:50:f8:a4:
                    f6:65:6c:fc:18:0e:6d:e5:fc:1f:90:a0:cb:55:aa:
                    5f:05:39:27:05:79:07:33:e5:04:8c:02:13:82:9c:
                    a3:2a:df:68:5f:2a:81:91:e5:52:85:ad:c1:35:55:
                    1d:2d:c7:e6:52:0a:32:6c:99:55:53:e9:78:4f:c9:
                    f2:79:66:78:f9:7a:57:25:c8:53:3c:17:43:5a:d2:
                    96:94:97:30:87:e5:d4:c5:84:85:ec:b6:bc:6e:e4:
                    02:5e:ce:b8:1d:60:6f:31:6b:53:dc:bf:1a:52:c8:
                    99:7d:b4:fa:5f:a3:76:2a:93:85:9f:5d:10:96:93:
                    fa:50:64:0c:8d:cd:ea:51:06:8b:4c:5b:54:65:93:
                    66:7d:be:87:ad:db:e2:e9:2b:f3:fd:15:63:52:da:
                    a0:ad:f6:6a:79:e8:f2:2b:0b:43:45:21:b2:05:82:
                    21:d7:70:0d:b4:74:b5:6c:9f:a3:b5:f0:e1:65:86:
                    91:f4:9f:3a:2c:99:8c:91:d4:e2:7c:32:06:00:a4:
                    56:61:e4:f8:b0:45:e8:2f:8c:16:5f:b8:16:31:90:
                    aa:20:bb:28:6b:dc:84:f4:d5:7d:21:ed:59:0e:8c:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:4F:A1:F4:0F:DD:6D:3A:24:31:B7:39:BF:4A:E7:2E:40:59:56
            X509v3 Authority Key Identifier:
                keyid:E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:84:5d:36:9a:9d:3f:d4:51:4c:92:3e:23:9c:9e:e0:ec:
         84:f7:a0:b3:57:0b:d5:8e:8a:c2:da:ee:43:d7:1d:81:9f:a6:
         c9:86:0f:51:26:05:5d:9d:2c:7b:f1:32:48:96:da:4e:5d:5f:
         01:32:93:f9:06:ed:3a:ee:d9:79:21:80:d5:83:e4:05:76:0e:
         3f:fb:f8:f5:fd:61:8e:9c:c6:12:ba:46:7d:7d:e1:be:61:45:
         41:9f:06:8f:6f:15:50:65:a9:93:a9:bf:80:cd:e9:21:ec:22:
         df:1a:95:d8:66:97:a9:3a:fa:9d:e2:10:e2:40:74:ec:c0:d9:
         d5:98:72:c2:12:3f:18:9a:2e:1b:c1:b5:de:3b:a8:73:d4:42:
         58:7f:14:8c:95:9b:43:5e:79:c3:e6:7c:92:b2:a7:ed:d2:10:
         32:c6:26:1f:54:f6:af:95:ee:b2:c2:79:d1:6c:bd:75:2e:a7:
         72:15:33:9b:05:f8:a0:a0:15:bc:3c:d3:4f:56:b2:98:cd:3c:
         d7:b4:2d:d4:ca:a6:cf:b1:71:6e:41:5d:11:a1:95:a5:40:ae:
         a0:ad:1f:58:a5:20:2f:2b:69:5c:ab:a2:28:da:c4:52:5a:7e:
         a9:94:e6:6e:9d:f3:12:ea:01:aa:60:57:ec:6e:de:6b:d0:3a:
         85:42:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:23 2026 by rpki-client