Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
File:                     061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json)
Hash identifier:          hCo1h6DwKZP4Y6mh51t77lO9qitbyQTeVl3hOU/VzZA=
Subject key identifier:   5A:12:79:13:B6:29:3B:AA:57:70:B0:E9:A2:26:92:BA:A8:92:AB:FD
Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
Certificate issuer:       /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Certificate serial:       5EB4E4AF99530ED5C290A18DABA84334F8940264
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
Manifest number:          6C
Signing time:             Wed 29 Jul 2026 07:06:02 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:02 +0000
Manifest next update:     Thu 30 Jul 2026 08:23:02 +0000
Files and hashes:         1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=)
                          2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: lk8aL8oD95tIHzZbYIZccfTP++JSJtyC1e0wTDCLBSU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b4:e4:af:99:53:0e:d5:c2:90:a1:8d:ab:a8:43:34:f8:94:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
        Validity
            Not Before: Jul 29 07:01:02 2026 GMT
            Not After : Jul 30 08:23:02 2026 GMT
        Subject: CN=5A127913B6293BAA5770B0E9A22692BAA892ABFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:a0:a6:e8:fc:bb:d4:54:8f:6d:0c:66:c7:
                    52:d5:7b:81:52:64:24:6e:7a:62:03:9e:cd:b3:2b:
                    87:b6:e8:40:10:cc:c1:24:f3:be:5c:c9:17:d4:01:
                    d3:ca:3a:93:2c:c3:7e:a4:82:3a:d8:38:e4:4d:0f:
                    0f:5f:57:19:8e:d9:66:6f:9c:6f:72:0d:6a:9c:fe:
                    ed:b5:de:ee:c1:1c:40:42:7e:a2:47:89:21:9a:af:
                    c3:21:df:84:bd:27:46:c2:f2:a3:ce:79:09:05:6e:
                    69:7e:da:4e:2b:cd:3a:d8:80:e3:f6:d4:ee:77:d4:
                    2b:cf:a5:a7:e4:3a:07:e0:82:67:e4:4d:98:29:9c:
                    7a:3a:e8:4a:4b:b9:e4:f9:48:51:a4:5e:b4:42:5c:
                    f3:5c:bd:1d:be:a7:18:eb:23:cb:bf:ba:f2:2b:0c:
                    7c:85:a4:b8:0c:42:e0:77:a6:c1:ae:d8:8a:90:0d:
                    f2:4d:85:c6:7e:13:66:aa:23:32:56:3a:47:d3:d7:
                    fe:e7:85:e2:28:eb:07:e2:ea:a1:48:a9:bb:85:ed:
                    c5:d9:11:9b:b0:a2:61:f6:b9:2a:04:f3:e8:b0:31:
                    7b:b4:6b:12:ab:7a:4f:1b:41:ef:43:8d:06:2c:cc:
                    11:d0:da:79:b9:3b:58:46:80:e8:5b:8a:b4:44:f7:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:79:13:B6:29:3B:AA:57:70:B0:E9:A2:26:92:BA:A8:92:AB:FD
            X509v3 Authority Key Identifier:
                keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:80:95:60:8c:d1:7d:a1:74:0e:0a:5f:13:ea:1c:20:6a:0a:
         4c:b1:0e:95:eb:2b:dc:78:54:48:cd:15:71:ae:a0:33:57:bc:
         c8:2b:21:4e:92:90:5c:be:a8:3d:ff:6e:81:2d:5e:c7:dd:f0:
         44:ad:94:bc:6e:3c:80:9c:82:a5:e2:65:6a:18:1f:c4:24:38:
         a5:c4:6a:eb:15:95:f1:8a:72:51:22:be:b3:0d:6c:c2:ba:c2:
         ed:15:c1:18:a9:62:21:23:67:88:6b:ce:b5:8c:d5:81:ac:64:
         bf:6f:c9:14:da:76:c9:05:ff:09:bd:b2:16:3d:92:09:17:7c:
         1f:a8:c1:49:fd:cc:64:00:a0:0b:57:83:ba:e2:7c:aa:9f:57:
         b5:68:d7:29:ea:4d:0f:69:a2:3e:04:c1:d9:a5:5c:98:0f:20:
         3a:4b:b1:02:c6:8a:40:ed:4e:b5:83:2a:5a:6a:c2:f7:ab:35:
         90:0c:12:07:71:ad:df:3e:8d:25:5e:fe:c5:d0:ac:bb:64:dc:
         3d:20:dd:47:a0:7e:43:38:c8:55:95:4c:bf:2a:71:3f:e5:d0:
         72:96:ed:25:76:be:05:c9:47:ee:13:a0:e2:34:26:9f:c9:24:
         39:fc:66:a1:52:73:aa:8c:dd:d9:1e:87:de:a2:50:d8:cb:ff:
         49:ce:df:8f
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUXrTkr5lTDtXCkKGNq6hDNPiUAmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz
OUQ3ODBBRjAeFw0yNjA3MjkwNzAxMDJaFw0yNjA3MzAwODIzMDJaMDMxMTAvBgNV
BAMTKDVBMTI3OTEzQjYyOTNCQUE1NzcwQjBFOUEyMjY5MkJBQTg5MkFCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24KCm6Py71FSPbQxmx1LVe4FS
ZCRuemIDns2zK4e26EAQzMEk875cyRfUAdPKOpMsw36kgjrYOORNDw9fVxmO2WZv
nG9yDWqc/u213u7BHEBCfqJHiSGar8Mh34S9J0bC8qPOeQkFbml+2k4rzTrYgOP2
1O531CvPpafkOgfggmfkTZgpnHo66EpLueT5SFGkXrRCXPNcvR2+pxjrI8u/uvIr
DHyFpLgMQuB3psGu2IqQDfJNhcZ+E2aqIzJWOkfT1/7nheIo6wfi6qFIqbuF7cXZ
EZuwomH2uSoE8+iwMXu0axKrek8bQe9DjQYszBHQ2nm5O1hGgOhbirRE97ilAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUWhJ5E7YpO6pXcLDpoiaSuqiSq/0wHwYDVR0j
BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ
Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD
QkE4QzUzOUQ3ODBBRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8wNjFFNjBFOUZE
QTVBMjVFREM5NjE1NzJBNENCQThDNTM5RDc4MEFGLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYCVYIzR
faF0DgpfE+ocIGoKTLEOlesr3HhUSM0Vca6gM1e8yCshTpKQXL6oPf9ugS1ex93w
RK2UvG48gJyCpeJlahgfxCQ4pcRq6xWV8YpyUSK+sw1swrrC7RXBGKliISNniGvO
tYzVgaxkv2/JFNp2yQX/Cb2yFj2SCRd8H6jBSf3MZACgC1eDuuJ8qp9XtWjXKepN
D2miPgTB2aVcmA8gOkuxAsaKQO1OtYMqWmrC96s1kAwSB3Gt3z6NJV7+xdCsu2Tc
PSDdR6B+QzjIVZVMvypxP+XQcpbtJXa+BclH7hOg4jQmn8kkOfxmoVJzqozd2R6H
3qJQ2Mv/Sc7fjw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:52 2026 by rpki-client