Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
File:                     2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json)
Hash identifier:          4ijui4ntIHtj4gA/D7Ocg7ii+jcFltk7OhoaivcT0nw=
Subject key identifier:   FD:47:C2:72:DA:51:D7:B4:D9:25:02:08:82:D3:6C:B4:01:EE:F0:A1
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Certificate issuer:       /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial:       198958AFB1AB36148E15496F208C3FF47BFDD4A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 15:17:02 +0000
Manifest this update:     Fri 12 Jun 2026 15:12:02 +0000
Manifest next update:     Sat 13 Jun 2026 15:23:02 +0000
Files and hashes:         1: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=)
                          2: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=)
                          3: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: ZnTr1I69/HIAfCm8rrYC2KoMm2S6zQKmVpC0y+3g6RU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
                          rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 15:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:58:af:b1:ab:36:14:8e:15:49:6f:20:8c:3f:f4:7b:fd:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
        Validity
            Not Before: Jun 12 15:12:02 2026 GMT
            Not After : Jun 13 15:23:02 2026 GMT
        Subject: CN=FD47C272DA51D7B4D925020882D36CB401EEF0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:9e:50:97:5f:7b:6f:2f:d5:98:7b:34:ef:
                    eb:12:65:3e:dc:22:e3:ce:9d:68:5d:e0:d3:90:c9:
                    a9:e4:75:89:02:b7:df:cc:4d:ee:6e:96:d2:21:28:
                    a7:f0:cf:95:30:e4:d9:82:85:47:17:f4:cd:5f:e5:
                    33:b7:4b:6f:fc:af:74:39:23:a7:c4:ae:92:7b:cb:
                    5e:f3:f6:bf:09:87:3b:59:a1:ee:c1:58:38:50:6a:
                    b6:5f:fc:e4:f1:d1:7e:4e:4e:ad:d4:d4:20:35:d0:
                    2f:41:30:0a:6e:1f:19:8b:7e:ad:ac:4d:33:21:8e:
                    5e:8a:6e:ac:91:d5:5f:4e:f3:f7:ac:e8:61:83:94:
                    19:9f:a8:f5:7c:28:16:e4:c3:03:b8:8f:83:62:f3:
                    6d:b8:cc:e5:e5:5a:dc:16:17:e4:32:0c:eb:3c:59:
                    19:e7:a5:52:be:28:7e:21:f1:cd:3e:bd:7f:4e:11:
                    78:89:a8:1e:cd:0f:b6:e5:8f:b3:03:71:67:62:55:
                    6b:81:93:54:29:3c:f3:52:8c:87:be:56:96:71:3c:
                    51:b5:33:67:58:7b:5e:a7:c5:17:55:f5:eb:72:4d:
                    dc:25:f4:61:e1:90:c4:60:8a:28:26:68:0a:62:67:
                    45:e6:06:2a:eb:18:79:7d:d5:00:78:0e:ef:e4:82:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:C2:72:DA:51:D7:B4:D9:25:02:08:82:D3:6C:B4:01:EE:F0:A1
            X509v3 Authority Key Identifier:
                keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:aa:ca:7d:d9:4f:86:bb:1d:28:28:01:9b:fe:94:95:dc:
         ff:6f:d9:cf:09:37:09:0a:b3:d2:90:c5:1c:c5:f2:2b:24:8a:
         75:9b:16:1c:68:43:85:aa:9a:68:1b:ac:63:de:7f:c8:ac:c6:
         f3:ca:31:f3:84:6b:71:90:d3:c1:04:a9:0e:1f:df:a5:6c:8f:
         a0:04:4b:e7:fb:10:e4:91:9d:6f:ab:9f:4c:c7:2c:80:c0:df:
         dc:54:27:a3:a8:e7:19:61:9f:64:ef:a6:55:86:99:c6:4a:58:
         5f:c6:94:15:50:cf:8e:2b:5f:5d:cb:23:c2:b6:14:89:c8:4b:
         4a:c5:94:4e:36:a3:a5:15:e5:dd:be:bc:86:b3:f5:4e:64:1b:
         79:ba:e9:a5:05:e5:79:30:4c:a0:ff:ff:d2:12:44:b5:2d:e7:
         a0:ba:42:62:99:bb:12:ac:94:6d:1f:a2:7b:a3:a9:69:15:4a:
         88:b0:98:79:72:3d:c5:dd:ce:ab:14:9c:34:b8:d8:53:69:f4:
         a8:98:49:27:7f:86:21:5a:fe:50:6b:c9:37:31:01:48:5d:0f:
         e3:a6:b3:08:d5:aa:ae:ae:dd:d9:4a:89:ea:62:83:5d:fa:6c:
         d4:95:5d:a8:31:08:64:1d:3b:a2:62:37:23:52:74:ff:b0:d3:
         8b:b6:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:09 2026 by rpki-client