Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File:                     0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier:          6A9DY3mjQy0rkqo27dBA/vwehnwMDPHRFI4gsPqfVUE=
Subject key identifier:   91:E7:65:13:D1:F0:9A:A7:F6:1A:D1:01:21:C1:19:A7:A5:B1:76:1B
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer:       /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial:       7E9939768E268DA6480A26BEB08C2F95BDB688D8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number:          33
Signing time:             Wed 17 Jun 2026 08:27:07 +0000
Manifest this update:     Wed 17 Jun 2026 08:22:07 +0000
Manifest next update:     Thu 18 Jun 2026 12:11:07 +0000
Files and hashes:         1: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
                          2: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
                          3: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: AuP+w6qk8NdR3PE7Th5ugjp5J4qEVKrm9RPQKfzKdQE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
                          rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:99:39:76:8e:26:8d:a6:48:0a:26:be:b0:8c:2f:95:bd:b6:88:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
        Validity
            Not Before: Jun 17 08:22:07 2026 GMT
            Not After : Jun 18 12:11:07 2026 GMT
        Subject: CN=91E76513D1F09AA7F61AD10121C119A7A5B1761B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:75:6e:b5:14:86:7a:2e:74:3e:34:34:b6:
                    01:17:83:56:be:5d:35:34:97:57:b9:5e:89:89:b6:
                    99:e8:62:d6:c5:f7:2b:04:f5:d4:47:59:59:59:cd:
                    e5:93:33:15:c1:25:d5:06:bd:b8:9c:9a:dd:5a:4a:
                    4d:1a:f2:6c:23:50:f7:35:b3:a1:27:62:77:35:bd:
                    0d:9d:69:97:55:9d:3c:56:36:33:75:76:22:20:24:
                    34:29:81:82:d0:6c:0c:a4:cd:c0:12:c1:21:a8:f1:
                    a4:f3:66:9e:ed:51:ae:11:82:be:29:9c:36:a9:cc:
                    bc:e9:ab:9f:b4:d1:74:c2:86:09:f4:6c:b8:84:06:
                    d4:ca:01:e7:b7:14:04:44:84:3b:95:dd:d0:4c:c0:
                    2c:bc:fd:98:3d:96:ed:a6:e5:77:0b:09:55:71:42:
                    6b:a5:77:83:97:6b:47:75:d0:07:30:39:66:5a:68:
                    cb:5f:e6:3f:a5:ed:72:29:9d:b7:01:f5:fb:14:f7:
                    28:5d:0e:05:33:c1:6d:cb:3d:b9:d0:09:97:07:6d:
                    39:f8:88:36:21:fb:50:55:7f:bf:a7:be:bd:01:9e:
                    5c:4a:3a:13:92:9a:d9:8a:1d:32:d9:a4:d7:a4:29:
                    55:7a:27:2e:61:7c:61:c3:46:5e:f8:87:43:07:ef:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:65:13:D1:F0:9A:A7:F6:1A:D1:01:21:C1:19:A7:A5:B1:76:1B
            X509v3 Authority Key Identifier:
                keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:31:f7:63:f9:10:6d:58:01:16:90:0d:29:ba:f7:7a:ca:
         87:e8:3c:7d:5e:8c:01:e7:a6:42:6b:b8:70:d6:ed:bb:e6:e1:
         1c:e7:79:4a:de:ed:51:50:da:c9:70:a0:38:35:60:bd:9d:f5:
         5c:f8:c8:b7:f8:48:3f:e9:55:f2:b6:e7:ae:a5:ee:b7:d8:37:
         49:da:2c:11:d9:5b:1f:51:13:32:50:05:ac:8d:c1:e2:45:24:
         6b:80:5e:f5:67:36:c5:e5:c2:b1:3d:5a:93:41:9e:d6:54:46:
         50:6d:77:89:6c:15:03:cd:b6:df:9a:33:2b:b6:1a:11:e8:45:
         8b:d1:d7:7f:92:95:df:51:5c:84:98:88:b1:29:27:f1:53:7e:
         67:a0:b8:8e:dc:f0:bb:34:e8:a2:ec:87:65:47:94:7f:4a:9c:
         d4:db:60:08:8b:01:50:9b:10:d9:3f:b5:a1:18:ca:05:c5:75:
         b3:0f:8c:c7:eb:56:96:d7:ef:80:74:87:4e:76:ca:6b:b2:99:
         9c:a6:61:81:61:63:d4:5f:7f:7c:af:58:6a:4a:bd:b8:0b:28:
         c7:bd:fe:6a:fc:36:c5:ba:22:b0:fc:f0:19:56:da:9e:b7:6d:
         67:fd:30:d6:3a:3b:f7:91:b9:65:53:e1:13:a8:93:a3:f1:c9:
         6b:ca:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:14 2026 by rpki-client