Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
File:                     FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft (raw, json)
Hash identifier:          uQZzTKrrzhNTgSNKpOF/H27RHAmnsFsjVGSu+rcupwg=
Subject key identifier:   6D:14:B8:D9:F3:A5:7E:D0:B0:B7:5E:05:C6:E3:69:6A:07:7E:12:56
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       36E3FA036EB2EA9FC27D827FAEA5FC3AAFC5F58F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
Manifest number:          35
Signing time:             Fri 12 Jun 2026 17:07:23 +0000
Manifest this update:     Fri 12 Jun 2026 17:02:23 +0000
Manifest next update:     Sat 13 Jun 2026 19:17:23 +0000
Files and hashes:         1: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl (hash: L1a5PQVcOU4/bv/8SDKOf9BJGuRQ1jxw0OWLd6EYiL0=)
                          2: 3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa (hash: QJpakj5AI9RKVWG2PgQIpjIivIC60des2reJiowl4os=)
                          3: 3130332e3133352e32332e302f32342d3234203d3e203633383937.roa (hash: exU/uxBFxdMLqjIaTPfzwp1d8d9NZ/lg5sgoV3G0so0=)
                          4: 3130332e3133352e32322e302f32332d3233203d3e2035303635.roa (hash: iWARJBn4vMQOBwB3Q05z+epz9OlkdIYS5W6NmlmWssc=)
                          5: 3130332e3133352e32322e302f32332d3234203d3e203130313033.roa (hash: etSY0iPHg+QFBuxkSoWWrdTsB958SF+SYPdXB4Jcolc=)
                          6: 3130332e3133352e32322e302f32332d3234203d3e2035303635.roa (hash: lIAXsdszRfTpwCQ9dqAUJtuBksm9sDp6S2xr+9/+yT0=)
                          7: 3130332e3133352e32322e302f32332d3233203d3e2039333034.roa (hash: w+9yE9SmJnaREr5tKGvYWSBKPbCpy/4FytVd0vk/6p4=)
                          8: 3130332e3133352e32302e302f32342d3234203d3e20323038393332.roa (hash: PbKYhImIixRMhBpJ3h2Vfk+XxKRIlc4w91SfYuYeE/E=)
                          9: 3130332e3133352e32322e302f32342d3234203d3e20323038393332.roa (hash: 2jKmsFA/4FFA8Uec2ltToiEb29B4iAKyAlOM9BJdgLo=)
                          10: 3130332e3133352e32312e302f32342d3234203d3e203633383937.roa (hash: YwhItagtaRjuaO7DPIKNJnjb7/MjB9VTKfuoj4e9bQc=)
                          11: 3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa (hash: JgeKv43zj2I8mn+V1L9xsA2666IYScxWd+2UEJ5XPhc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e3:fa:03:6e:b2:ea:9f:c2:7d:82:7f:ae:a5:fc:3a:af:c5:f5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: Jun 12 17:02:23 2026 GMT
            Not After : Jun 13 19:17:23 2026 GMT
        Subject: CN=6D14B8D9F3A57ED0B0B75E05C6E3696A077E1256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:64:00:e0:43:0e:2d:82:d4:cc:2b:6a:1c:
                    51:74:ca:bc:8d:20:2c:df:b0:09:b7:56:e4:8e:5e:
                    fa:db:6f:f1:91:e3:63:09:1d:37:18:70:e0:bc:2b:
                    16:73:3a:72:b3:a1:39:dc:e8:26:c3:4a:c7:1e:7d:
                    03:12:33:4f:8b:ba:4f:3a:13:9b:53:b8:05:ff:90:
                    65:12:6d:3f:6a:1a:b6:5d:c6:29:e9:07:ff:37:f3:
                    64:f0:0e:39:ed:f1:49:56:dc:d0:64:65:13:56:d5:
                    d9:bb:44:07:e4:18:de:6c:ea:5f:54:d1:de:d8:7a:
                    78:11:47:e8:21:e3:82:46:02:fb:9f:40:9d:33:8f:
                    12:8a:c0:ee:30:b0:ad:0c:07:7c:ab:9e:6f:e3:22:
                    6f:21:23:be:b3:d3:2e:2b:ca:45:8e:41:93:0f:93:
                    34:31:5a:f3:9a:e6:eb:04:d6:88:31:1b:db:8d:05:
                    7d:a4:38:54:f1:7e:34:99:1e:6e:63:6b:77:19:bb:
                    1a:79:7e:8f:a9:94:d3:f5:6b:6d:ec:0e:a7:57:c2:
                    00:7f:70:14:ca:b5:48:4c:5b:6c:57:44:5b:41:da:
                    ec:00:89:2f:c8:59:66:64:bf:54:f7:d1:d2:e5:39:
                    28:a8:57:76:ea:09:50:dc:c7:c2:05:41:b2:ed:0e:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:B8:D9:F3:A5:7E:D0:B0:B7:5E:05:C6:E3:69:6A:07:7E:12:56
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:95:94:b4:48:99:f3:27:39:31:df:c9:35:44:92:b9:03:1a:
         15:94:1d:68:a0:9f:3b:68:ab:56:41:f0:1f:9d:38:19:52:96:
         19:69:ae:58:95:9d:97:47:39:d4:bf:e1:27:44:0f:08:f1:3d:
         b7:ef:dd:b7:44:c7:34:90:ca:44:a2:3c:3d:18:11:0f:52:fd:
         ed:9a:ba:f4:8d:57:48:82:bc:9d:76:e6:28:5e:c8:49:a9:52:
         7d:b3:9c:3d:25:a1:54:f7:03:95:c5:7e:f4:48:c3:20:4b:e8:
         0c:62:e2:13:b7:d8:67:88:c6:9c:cb:44:9b:fe:d0:83:90:bf:
         35:54:5d:6a:24:0f:ff:ec:46:9f:98:01:a0:1a:20:42:e0:ea:
         ee:12:08:be:79:ce:52:a3:91:1a:f6:54:36:1d:04:a4:2c:3a:
         6d:e4:92:f8:68:d1:d1:57:f4:a8:1e:e6:73:4f:7d:f4:a3:04:
         f2:57:a2:c9:d7:99:15:13:6a:ac:2d:5b:59:86:26:20:35:1c:
         69:dc:ba:88:3f:fa:c6:dc:26:27:f0:20:f9:12:14:16:e2:fb:
         1c:33:f5:67:bf:1d:94:fb:a2:91:f4:43:c0:04:cb:69:d2:86:
         0f:27:29:01:2d:69:f5:c9:90:20:d8:59:7b:3d:ef:10:51:5a:
         9c:e7:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:13 2026 by rpki-client