Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File:                     F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier:          T1d1qE1npYWEdZ5JZWjNCGpNIE6xagSIY0kZRdfdzMM=
Subject key identifier:   E8:EE:F2:E2:03:73:82:86:BD:D9:86:EC:8C:20:DD:5A:8F:A0:35:95
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer:       /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial:       346A7E7055D455145AFE785DAC5C8BFE36413C78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number:          30
Signing time:             Fri 12 Jun 2026 20:33:02 +0000
Manifest this update:     Fri 12 Jun 2026 20:28:02 +0000
Manifest next update:     Sat 13 Jun 2026 22:11:02 +0000
Files and hashes:         1: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
                          2: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
                          3: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: DdcD3xSWYCtsLINjMDXkEoCTuY2ym5gXlT+I2fZiyOo=)
                          4: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
                          5: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
                          rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:7e:70:55:d4:55:14:5a:fe:78:5d:ac:5c:8b:fe:36:41:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
        Validity
            Not Before: Jun 12 20:28:02 2026 GMT
            Not After : Jun 13 22:11:02 2026 GMT
        Subject: CN=E8EEF2E203738286BDD986EC8C20DD5A8FA03595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:f0:d8:d1:73:38:19:17:79:e5:bb:62:db:
                    4d:88:53:f2:fc:7a:e2:15:4b:e1:da:8c:80:fe:31:
                    cb:60:02:80:27:88:5b:0a:c0:e7:7c:a9:3a:76:92:
                    c7:eb:f1:62:54:5a:b2:e9:7b:7b:52:6c:e4:62:98:
                    6e:cd:34:d9:35:c4:50:d2:74:11:60:55:44:0e:dc:
                    68:aa:3d:64:ea:5d:cf:17:33:d4:ec:72:fd:25:cd:
                    76:6d:50:3c:99:49:b0:e2:30:e2:b6:07:df:d1:02:
                    87:ed:a9:96:bc:46:d8:8d:cd:ea:b5:1d:92:53:56:
                    3a:21:1e:7a:b0:da:b8:0f:0c:9b:36:58:d6:1b:11:
                    65:8f:23:6c:fe:c1:cc:13:ce:df:84:39:5b:20:16:
                    bb:8d:8c:c3:e4:26:b4:65:9b:d0:f3:88:5c:6e:2a:
                    f3:aa:ff:fb:2b:03:11:76:21:6f:ec:0b:5b:11:05:
                    61:65:54:7e:f7:ba:fc:55:3f:00:68:15:18:e0:31:
                    e8:65:17:f0:ca:25:dd:f3:03:b9:7f:df:85:a6:c1:
                    cb:10:f1:8c:18:ce:cb:2b:8d:12:6f:f4:a0:e2:dc:
                    14:71:3b:a0:a4:81:99:43:a1:f3:0b:e7:5a:7e:76:
                    3e:5b:52:6f:c7:8d:d3:82:3f:fc:14:fa:03:64:e9:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:F2:E2:03:73:82:86:BD:D9:86:EC:8C:20:DD:5A:8F:A0:35:95
            X509v3 Authority Key Identifier:
                keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:92:7a:2c:c3:b5:1b:97:35:fd:dd:fc:17:c9:ab:2f:b5:
         f8:07:a4:80:ce:8d:79:4a:14:39:92:21:71:e2:4c:74:82:77:
         fc:30:82:7b:57:27:23:49:c0:e5:66:c2:91:f2:9d:fc:65:56:
         db:29:52:f2:cb:e4:04:98:4b:73:9a:c6:d8:67:4b:74:b6:b0:
         32:8a:06:9c:59:01:f5:5e:53:13:01:29:34:d1:41:c5:36:51:
         38:3b:0d:a7:d0:7d:eb:0a:33:19:ad:12:64:5e:76:48:44:00:
         cd:11:39:5f:9f:5c:a6:5c:0b:fd:65:fe:8c:5a:0c:cf:db:36:
         5e:e7:7d:1e:5b:cc:18:69:f7:d4:56:5b:db:8f:9d:59:6f:17:
         28:ab:84:f3:d2:b6:38:d8:3e:9f:2b:b7:a5:72:ba:e1:6e:eb:
         14:14:e7:6b:e1:f1:cf:b4:58:8f:57:55:79:a8:ee:5a:ee:a6:
         de:ab:5f:ce:df:7a:99:f6:c2:44:4c:3e:e1:ba:6e:72:da:28:
         4f:f9:5a:47:a0:8c:15:dd:1b:d8:d1:13:ee:c1:82:56:41:6c:
         f8:e5:25:b8:c4:aa:ba:ea:e9:63:a5:be:97:ad:65:71:12:84:
         bf:6d:9d:b3:7a:dd:96:cb:94:b1:26:cd:52:94:08:c5:18:f5:
         aa:f3:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:00 2026 by rpki-client