Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File:                     FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier:          LKzVz1jnUPV/LBm4BBYXkPYMb09OlhYLl9yVi1YSBFc=
Subject key identifier:   64:C4:33:FE:1E:BB:9F:2C:A2:99:E8:83:E9:DE:42:BB:F4:61:08:4A
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer:       /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial:       2321191D07109B923D29A9AC85087ABDB252A95A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number:          30
Signing time:             Mon 15 Jun 2026 07:04:55 +0000
Manifest this update:     Mon 15 Jun 2026 06:59:55 +0000
Manifest next update:     Tue 16 Jun 2026 07:31:55 +0000
Files and hashes:         1: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
                          2: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: WzP6fTvN9EbiWCZXbyTT2vWhvh5DZlQgD1o+NOHOhoE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
                          rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 07:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:21:19:1d:07:10:9b:92:3d:29:a9:ac:85:08:7a:bd:b2:52:a9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
        Validity
            Not Before: Jun 15 06:59:55 2026 GMT
            Not After : Jun 16 07:31:55 2026 GMT
        Subject: CN=64C433FE1EBB9F2CA299E883E9DE42BBF461084A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:71:5b:5d:74:4c:87:79:f0:14:fc:e0:cb:
                    2e:da:30:bb:9e:03:63:f0:a5:0a:1d:9b:d7:58:f0:
                    83:50:c0:bd:98:09:73:10:47:c2:52:13:e4:db:e0:
                    50:cb:e1:28:84:8f:b6:f9:24:f7:17:14:7e:49:60:
                    24:d8:c5:6e:10:c8:3b:f9:fc:aa:91:53:9b:89:e1:
                    cf:76:79:ec:3b:98:82:59:26:bc:0f:2d:89:66:fa:
                    91:04:0f:1c:ed:4d:57:58:2d:f7:05:b5:71:76:3c:
                    d1:65:13:73:53:4e:7f:a2:9b:7f:cc:49:36:18:91:
                    e7:2e:3a:f1:ec:35:91:86:16:05:3b:c9:38:6f:bc:
                    a6:f2:7a:b9:ef:0d:54:6f:71:c7:da:cb:bb:07:eb:
                    2a:86:94:ba:e5:d8:a6:c5:d0:e8:07:db:65:14:a2:
                    b6:a0:2b:61:12:2b:29:82:73:77:fd:ba:81:e8:89:
                    e0:7f:88:f6:75:d3:ad:13:a1:a2:b1:ed:9f:c7:e9:
                    f0:ff:57:71:d6:c6:66:10:c0:a0:62:53:a1:0e:fa:
                    cc:35:d0:e5:39:3a:dd:c1:dc:90:05:5f:c8:82:c9:
                    d4:26:08:c3:d0:83:7a:66:6b:17:bf:bc:aa:79:a1:
                    df:e3:26:21:c8:c3:51:2f:b1:ac:cf:d6:4a:df:06:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:33:FE:1E:BB:9F:2C:A2:99:E8:83:E9:DE:42:BB:F4:61:08:4A
            X509v3 Authority Key Identifier:
                keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:59:5e:95:ac:cc:83:19:bd:a3:d0:64:77:4a:15:4a:6e:
         79:ce:bc:1a:5d:be:44:86:9d:18:6e:3d:8f:c5:10:76:57:a0:
         8f:85:16:66:1b:dc:56:38:04:3e:ca:46:45:41:0c:0d:b6:93:
         38:86:80:88:cc:ae:01:28:83:26:b2:57:f0:31:d2:6b:29:7c:
         5b:f6:ea:5a:9a:23:0e:e8:49:b5:85:92:a4:7b:35:a5:b1:77:
         93:8c:db:c5:ec:87:45:30:a5:c2:1a:9d:01:e0:b1:d2:bb:2e:
         7c:12:50:81:54:4f:ea:ef:ff:60:34:dc:df:8a:42:ff:37:76:
         d0:7e:ae:d7:fc:9f:05:36:08:88:df:a6:0f:d6:72:cf:e9:b6:
         bd:3c:2f:56:74:ea:e8:41:d6:35:23:1d:1c:ba:24:ca:71:69:
         43:9e:30:51:04:e2:c1:69:a3:b9:df:16:61:ab:c6:87:59:6f:
         72:79:99:d7:45:47:fe:19:c4:d1:4c:57:f7:00:9d:c8:eb:3d:
         7a:ff:5f:15:c2:a0:96:a1:85:7d:2d:c3:aa:81:b0:59:7f:c1:
         0d:d4:10:31:56:ab:f6:a8:8c:ac:66:59:e5:8a:24:3a:83:cd:
         8f:70:c7:81:89:77:b7:bd:67:34:ae:34:0b:0c:54:52:c3:03:
         0f:36:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:44:10 2026 by rpki-client