Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
File:                     707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json)
Hash identifier:          g1JuGYi91GjYkgrUFqivn44FJH4j5aMECPqCwv1fLi8=
Subject key identifier:   9F:DF:A3:34:40:5F:B6:3C:43:F7:53:32:92:89:36:0A:F7:54:55:43
Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
Certificate issuer:       /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Certificate serial:       11459EAB2F511DDE985DB8E4AFE0DD7CFC3AB471
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
Manifest number:          2F
Signing time:             Fri 12 Jun 2026 19:37:57 +0000
Manifest this update:     Fri 12 Jun 2026 19:32:57 +0000
Manifest next update:     Sat 13 Jun 2026 22:14:57 +0000
Files and hashes:         1: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=)
                          2: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=)
                          3: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=)
                          4: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: b9REtqmg8e3Ek3SmznlYUvijWEEG4DK2l4TwoFFX4OM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl
                          rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:9e:ab:2f:51:1d:de:98:5d:b8:e4:af:e0:dd:7c:fc:3a:b4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
        Validity
            Not Before: Jun 12 19:32:57 2026 GMT
            Not After : Jun 13 22:14:57 2026 GMT
        Subject: CN=9FDFA334405FB63C43F753329289360AF7545543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:58:e0:42:e5:a1:bc:03:26:2b:ef:2b:75:
                    1c:39:16:aa:62:ca:39:9a:e9:92:bd:3d:2a:2b:50:
                    2f:af:30:ff:e0:aa:e8:6e:85:3a:54:5b:9a:e3:9f:
                    ad:d3:ce:c2:64:70:8a:11:41:22:04:b2:0b:7b:d7:
                    db:b7:f1:55:69:b9:d7:f9:c4:6d:8f:1d:aa:5c:c3:
                    5d:36:e4:c6:94:20:9b:80:95:3e:c2:09:bf:0c:40:
                    2a:c0:be:cb:02:17:1e:69:1b:33:21:75:bc:08:d6:
                    f7:75:6f:a3:ca:bc:e6:de:76:a2:58:b0:15:a0:a1:
                    92:5a:d7:ee:c9:8b:90:d1:56:ad:9f:69:60:08:29:
                    10:87:b3:54:1e:17:bc:33:cd:a7:59:36:4b:f4:79:
                    a5:b9:8f:46:51:7d:f6:22:09:e5:10:5d:95:75:a0:
                    fd:b1:22:b1:00:25:55:23:50:4f:a0:65:7a:30:55:
                    e3:70:8b:f7:63:16:e3:e8:18:84:02:29:48:cb:5d:
                    78:7f:9b:88:a4:e5:a7:5f:f2:f8:72:51:6f:d9:e1:
                    63:08:ce:67:47:f6:29:15:b1:8c:de:53:4a:1f:25:
                    0b:c7:c1:9f:13:60:ea:75:c3:17:6e:35:9f:d5:83:
                    bc:e7:4e:93:d3:dd:5c:73:d0:6c:41:a0:80:54:33:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:A3:34:40:5F:B6:3C:43:F7:53:32:92:89:36:0A:F7:54:55:43
            X509v3 Authority Key Identifier:
                keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:d4:a5:b7:21:8d:6c:f2:b8:1f:27:90:a8:8d:0d:1c:a3:
         91:e0:8b:54:fa:c2:77:4e:11:fd:9e:e3:e8:fe:4d:bb:f1:9c:
         b7:3d:56:bf:88:d8:14:f0:ba:9e:0f:fb:de:31:74:3d:e3:d6:
         68:80:51:68:5c:47:df:8d:64:27:e4:9a:ca:d4:3b:f0:ae:e2:
         4d:33:35:bf:12:2c:cc:5d:2a:d0:0d:97:a2:90:9e:15:1d:25:
         82:d8:1d:4c:7d:93:60:5a:99:a9:53:d4:1e:a1:e1:54:d1:39:
         53:51:c5:c7:bd:d6:74:b6:2d:fa:2a:00:98:0d:28:07:13:fc:
         53:b4:3d:40:ad:02:43:83:d4:81:16:ca:cb:c8:c8:98:f5:65:
         10:e4:e8:6f:9a:8d:51:5a:01:6d:8a:41:ee:42:cc:96:03:18:
         eb:44:dd:55:e0:c5:6d:98:5f:45:d5:36:79:4f:f0:ff:4c:d4:
         7a:f9:7e:97:e4:a7:fd:cd:6b:10:54:e7:02:f4:36:6e:e1:79:
         99:55:ca:34:91:1c:d1:9f:98:39:40:bd:8a:1b:6e:69:a0:70:
         a6:9b:18:35:80:a7:c7:1f:8f:42:15:1a:78:73:47:7a:10:5d:
         17:36:43:06:5d:60:ec:26:12:37:3e:4d:23:de:7d:f1:3d:a6:
         48:19:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:37 2026 by rpki-client