Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File:                     7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier:          Apq8uhHRpfM4Zm3EPNKXf5OBxLAORpv9x36w/teafes=
Subject key identifier:   30:DA:87:C0:9C:2C:05:DB:15:0B:59:60:02:AF:C4:FF:83:38:E1:B4
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer:       /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial:       68EE593E5EE897F8BF1C5395F953606ABEE0DF44
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number:          30
Signing time:             Fri 12 Jun 2026 22:38:18 +0000
Manifest this update:     Fri 12 Jun 2026 22:33:18 +0000
Manifest next update:     Sun 14 Jun 2026 01:10:18 +0000
Files and hashes:         1: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
                          2: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
                          3: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
                          4: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
                          5: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: QBUUZg8HY0XbyaV665vNXECOK4IBE1+4c3bafG/IfoM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
                          rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ee:59:3e:5e:e8:97:f8:bf:1c:53:95:f9:53:60:6a:be:e0:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
        Validity
            Not Before: Jun 12 22:33:18 2026 GMT
            Not After : Jun 14 01:10:18 2026 GMT
        Subject: CN=30DA87C09C2C05DB150B596002AFC4FF8338E1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:60:91:94:8b:74:1b:91:8d:67:9f:bc:5f:
                    2c:ca:90:f8:43:1a:c4:69:d5:33:3c:c4:e2:16:a8:
                    37:df:2a:60:ca:56:a6:90:2f:e9:4c:16:fe:3c:38:
                    35:fa:3e:92:48:03:2b:e5:b0:f0:6d:07:c6:8a:0b:
                    27:ae:0e:a8:db:9a:4d:e9:c0:4c:b7:6c:b4:b0:83:
                    a5:f1:b0:9a:df:cb:eb:53:ec:8c:a7:ea:48:af:0a:
                    c3:54:ef:27:07:80:08:d7:78:8d:cb:47:77:09:c6:
                    40:ce:fe:58:fc:69:5f:d5:d2:80:51:31:20:7f:45:
                    3f:49:6f:ef:8c:8b:70:45:42:d5:71:12:80:48:61:
                    54:b9:1e:76:c1:88:3e:ce:90:79:ec:c8:54:7d:ee:
                    bb:80:23:18:5a:90:8f:34:9a:5d:fe:32:c1:0c:20:
                    b2:12:1f:9e:00:1e:49:4c:7a:a3:48:26:54:ac:3d:
                    19:76:e1:31:de:cd:10:0c:c3:e6:87:c5:76:f2:e1:
                    50:d9:dd:8d:c2:f9:29:71:11:f3:e0:e2:1e:80:99:
                    a2:f5:9a:90:89:a9:b0:4f:d5:5b:05:1b:7a:e1:7c:
                    8b:4a:e0:1e:96:55:df:60:73:bb:59:c6:28:9d:6b:
                    a9:35:95:cb:2d:0c:7f:a2:ee:3b:13:56:3b:71:9c:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:87:C0:9C:2C:05:DB:15:0B:59:60:02:AF:C4:FF:83:38:E1:B4
            X509v3 Authority Key Identifier:
                keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:3c:eb:62:fb:91:6c:cf:08:9a:19:22:95:13:bb:7d:c2:
         e8:ab:36:12:b6:c4:72:9f:2f:3d:25:e1:bc:99:26:b4:d9:69:
         29:3e:b2:b7:aa:f9:c3:62:68:87:cc:79:ba:0c:a9:b4:fb:58:
         08:0c:24:92:5d:e1:ca:88:e0:e0:f4:71:8d:68:0c:f1:57:c5:
         5c:4c:6a:80:a2:95:e7:2d:d4:66:83:79:b2:cc:b8:d1:62:de:
         f2:39:34:33:91:9d:93:40:8c:9d:aa:18:5d:41:67:38:74:9a:
         5d:97:d2:7c:dc:d9:f1:24:c1:72:d1:d4:37:ba:d5:7b:5e:72:
         d2:32:40:de:db:8c:bb:60:fe:5b:e7:9f:78:87:c8:7c:71:90:
         0a:ec:77:d9:36:87:20:19:04:12:d4:67:87:20:4d:a6:29:be:
         a8:8c:e0:b6:e2:65:fe:62:4f:45:7f:fb:5d:b6:56:d7:23:0c:
         7a:0a:f7:03:ba:a3:78:d4:17:2e:8a:69:38:31:7c:e5:8e:e3:
         25:0a:55:b0:86:30:bc:62:89:dd:fb:50:fa:f6:0e:85:65:66:
         af:61:95:f1:6c:e7:df:d3:1c:d6:e6:98:fc:62:94:ca:25:d8:
         70:a1:37:15:08:93:03:af:da:3b:c2:ee:cc:f2:b7:8d:d3:8a:
         ea:a1:d1:75
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUaO5ZPl7ol/i/HFOV+VNgar7g30QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5
NEZBRjgzOTAeFw0yNjA2MTIyMjMzMThaFw0yNjA2MTQwMTEwMThaMDMxMTAvBgNV
BAMTKDMwREE4N0MwOUMyQzA1REIxNTBCNTk2MDAyQUZDNEZGODMzOEUxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLp2CRlIt0G5GNZ5+8XyzKkPhD
GsRp1TM8xOIWqDffKmDKVqaQL+lMFv48ODX6PpJIAyvlsPBtB8aKCyeuDqjbmk3p
wEy3bLSwg6XxsJrfy+tT7Iyn6kivCsNU7ycHgAjXeI3LR3cJxkDO/lj8aV/V0oBR
MSB/RT9Jb++Mi3BFQtVxEoBIYVS5HnbBiD7OkHnsyFR97ruAIxhakI80ml3+MsEM
ILISH54AHklMeqNIJlSsPRl24THezRAMw+aHxXby4VDZ3Y3C+SlxEfPg4h6AmaL1
mpCJqbBP1VsFG3rhfItK4B6WVd9gc7tZxiida6k1lcstDH+i7jsTVjtxnNxzAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUMNqHwJwsBdsVC1lgAq/E/4M44bQwHwYDVR0j
BBgwFoAUcZhgLA//280WiTgLBaxM1pT6+DkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAv
NzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS83MTk4NjAyQzBGRkZEQkNEMTY4OTM4MEIwNUFDNENE
Njk0RkFGODM5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAvNzE5ODYwMkMwRkZGREJDRDE2
ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG6lPOti+5FszwiaGSKV
E7t9wuirNhK2xHKfLz0l4byZJrTZaSk+sreq+cNiaIfMeboMqbT7WAgMJJJd4cqI
4OD0cY1oDPFXxVxMaoCilect1GaDebLMuNFi3vI5NDORnZNAjJ2qGF1BZzh0ml2X
0nzc2fEkwXLR1De61XtectIyQN7bjLtg/lvnn3iHyHxxkArsd9k2hyAZBBLUZ4cg
TaYpvqiM4LbiZf5iT0V/+122VtcjDHoK9wO6o3jUFy6KaTgxfOWO4yUKVbCGMLxi
id37UPr2DoVlZq9hlfFs59/THNbmmPxilMol2HChNxUIkwOv2jvC7szyt43Tiuqh
0XU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:24 2026 by rpki-client