Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
File:                     061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json)
Hash identifier:          LiTEbCYb77wLyqeOnXozyVHEdS186kKCoIXP/U7uiWw=
Subject key identifier:   EE:12:32:C6:21:BC:98:39:13:93:3E:F6:AC:33:12:1C:1B:54:CB:3F
Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
Certificate issuer:       /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Certificate serial:       39A3A7E525F18F0F2C56929376F765CAF20B7D3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 18:25:11 +0000
Manifest this update:     Sat 13 Jun 2026 18:20:11 +0000
Manifest next update:     Sun 14 Jun 2026 21:12:11 +0000
Files and hashes:         1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=)
                          2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: sCJJ9dQk6D/R6YIciMTH8kMSapiTy7Ycxo8IKAQXGsg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:a7:e5:25:f1:8f:0f:2c:56:92:93:76:f7:65:ca:f2:0b:7d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
        Validity
            Not Before: Jun 13 18:20:11 2026 GMT
            Not After : Jun 14 21:12:11 2026 GMT
        Subject: CN=EE1232C621BC983913933EF6AC33121C1B54CB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:f1:d5:c9:17:b3:1b:50:ef:c1:5f:60:1f:
                    4f:f7:57:13:72:c7:fa:e4:ca:b1:eb:02:62:52:38:
                    b4:14:41:51:43:c3:cf:80:fa:16:2e:56:22:cd:14:
                    32:bc:2a:c7:17:c6:0b:d2:a4:e9:12:23:25:91:a6:
                    55:04:9e:e9:f6:57:49:8b:96:30:4e:aa:79:24:1b:
                    b8:dd:5b:f7:b3:2b:04:fd:9a:88:95:2d:3e:42:e1:
                    cb:50:a2:84:ca:72:bc:ab:7c:4e:65:9d:13:9c:b7:
                    38:84:ea:e2:13:c7:96:77:b0:90:1e:9d:5c:c9:37:
                    6c:5a:11:04:8c:aa:3b:4d:00:bd:8c:c9:0b:bf:fd:
                    a8:68:3d:5f:33:28:3e:4e:d7:56:d9:97:03:66:2d:
                    46:b4:30:5a:90:89:54:be:72:0b:84:4d:e0:21:5e:
                    b2:0d:8f:6d:0a:9e:59:88:c0:fa:0f:e9:35:d0:33:
                    87:dd:c8:8d:0a:7b:06:bd:d2:b3:62:15:d9:d1:7e:
                    56:b9:c7:7b:44:b2:05:50:e3:43:29:3f:7e:cc:e3:
                    76:e2:0f:2c:c2:70:64:05:c7:1f:cb:b3:67:54:7a:
                    52:d9:da:f2:03:d1:a7:2f:92:6a:11:73:f3:67:92:
                    72:0b:9c:26:e2:e7:3c:65:58:b5:5c:b3:f8:d0:55:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:32:C6:21:BC:98:39:13:93:3E:F6:AC:33:12:1C:1B:54:CB:3F
            X509v3 Authority Key Identifier:
                keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:1f:56:95:a0:c7:32:cd:db:50:64:23:6e:f2:f7:5d:59:
         e6:ce:6f:a1:0c:a9:96:cd:43:dd:a8:62:2c:13:13:a4:19:fb:
         90:0f:c2:2b:ff:79:f6:9a:50:f6:87:72:59:2b:55:bc:61:93:
         5b:a3:ae:4a:81:43:a2:56:40:58:69:11:b0:8c:89:4d:ac:9e:
         20:55:af:0d:79:25:f1:4c:b1:62:7d:c2:6e:74:96:dc:4b:14:
         0d:42:ac:ef:c1:ea:e4:07:c7:2b:58:b1:bf:c0:89:5c:21:3e:
         be:97:4b:1f:57:44:c6:8a:e1:3b:28:1b:4d:4a:8d:af:d0:9b:
         0a:dc:d4:c3:45:82:9b:d6:4d:c2:06:54:e2:c7:9d:41:3f:9e:
         81:a5:d7:71:73:33:1c:36:85:22:38:3f:48:61:16:ae:6f:b0:
         97:98:ec:7a:b1:f3:a4:e4:69:95:d6:c4:6d:94:a6:3e:da:d4:
         72:9d:03:e1:a3:1e:6b:dd:5b:14:8b:61:7c:3e:b2:2e:84:59:
         b6:c9:c3:c2:f0:35:61:10:28:e2:63:5f:2d:a9:16:a7:3c:5b:
         7c:f6:a8:80:da:6c:e1:40:c9:4a:50:5e:3d:7a:6a:83:7e:e8:
         12:ff:7b:2f:75:d3:8a:af:ad:0b:14:5e:0c:4f:1d:da:af:e4:
         99:cc:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:22 2026 by rpki-client