Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
File:                     AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json)
Hash identifier:          O827vWZ2o9V8IkMrFyeIbeI0CGw5/RORvOZfUfSOIfc=
Subject key identifier:   26:E4:0E:27:C9:61:B1:AE:B8:C6:89:0A:96:28:95:45:D9:B1:51:3D
Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
Certificate issuer:       /CN=AAED3548B647C9B95804411BAB19736F229C5A54
Certificate serial:       08B70EFBA5AED075750D2D8E7F96DEEA928318A4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 17:02:23 +0000
Manifest this update:     Fri 12 Jun 2026 16:57:23 +0000
Manifest next update:     Sat 13 Jun 2026 18:58:23 +0000
Files and hashes:         1: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=)
                          2: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: zjCJ7RaS4pEoMEy/n8AQXkk9hVQi/0DC00WWQi3aKpU=)
                          3: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
                          rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 18:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:0e:fb:a5:ae:d0:75:75:0d:2d:8e:7f:96:de:ea:92:83:18:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54
        Validity
            Not Before: Jun 12 16:57:23 2026 GMT
            Not After : Jun 13 18:58:23 2026 GMT
        Subject: CN=26E40E27C961B1AEB8C6890A96289545D9B1513D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:37:8b:9f:68:8d:dd:25:1d:f5:c1:a5:e4:
                    26:dc:ba:4e:35:a9:c4:f4:bf:9a:c1:b7:cf:f5:b3:
                    0d:41:37:a8:63:f5:9f:67:8b:a7:00:1a:63:ef:5b:
                    d2:ca:9e:a1:9c:62:81:35:4e:fd:fa:56:d8:5f:ec:
                    4c:b5:5a:01:81:2c:65:ad:dd:5a:f8:02:1a:2e:41:
                    f8:0a:d9:85:4d:ed:77:a7:03:ee:a6:3c:fa:12:ee:
                    29:77:d0:e6:bc:89:a7:0f:1b:b4:80:fc:65:8f:ca:
                    c1:a4:ba:74:3c:d3:41:39:5f:7f:2b:2f:36:ef:cc:
                    29:65:29:c1:b4:09:80:30:8c:2d:02:6b:e1:4a:bd:
                    95:62:ad:9e:87:04:1d:1b:51:d7:fb:79:bb:fd:89:
                    84:88:27:0f:ec:fc:c9:6f:21:03:cc:36:ea:48:39:
                    b2:be:74:a8:2b:26:ed:7d:4d:70:9e:9a:99:5d:0f:
                    c6:71:4a:09:36:0a:19:f6:8d:fb:23:90:77:4f:96:
                    b6:b3:26:6d:43:16:3d:fe:e9:d3:a7:de:46:48:05:
                    2a:4e:e7:e4:02:f8:4d:f0:5c:47:25:9b:cc:70:c7:
                    19:ec:20:73:96:45:56:24:af:d2:32:57:c9:0b:5b:
                    29:d5:e4:f0:f6:38:b0:26:23:9d:c1:0e:8b:82:aa:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:0E:27:C9:61:B1:AE:B8:C6:89:0A:96:28:95:45:D9:B1:51:3D
            X509v3 Authority Key Identifier:
                keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:7e:d4:1a:29:26:b2:d8:ba:32:2d:bc:b0:82:af:45:65:
         4c:76:97:69:95:e5:f2:59:96:09:bb:2c:6a:60:6d:44:c6:91:
         67:07:6c:fb:ab:c5:bd:8a:02:a4:1c:ff:db:38:d7:71:df:46:
         62:73:9f:de:92:e7:20:21:3e:e9:66:c1:49:1b:c6:6d:fb:49:
         58:e0:53:8d:43:09:ef:61:43:10:c8:56:0e:ab:17:13:16:f9:
         25:7b:75:f7:82:86:b0:0d:d9:bf:d9:d8:43:85:cd:c8:5d:b2:
         61:ff:ab:30:73:cf:c0:89:52:f2:10:f5:9a:c9:1a:19:89:82:
         1b:8d:7b:ef:2e:fd:76:61:89:7e:00:7f:9c:02:e1:64:e3:3a:
         e8:01:cf:e5:9f:9b:8d:aa:30:0b:4b:f5:c2:33:e4:11:63:6a:
         ca:8b:79:35:12:f7:9a:9d:ed:86:bd:fb:82:4c:39:9a:03:2f:
         17:8f:36:72:d7:07:83:91:0b:ab:9b:08:22:5a:5a:99:1f:88:
         d6:cc:69:b6:2e:99:9f:73:29:1b:ed:c1:69:aa:c8:02:d1:81:
         cf:b0:6e:a3:6b:be:b1:74:13:e2:4e:65:3d:c7:d9:28:03:98:
         09:15:1a:9f:81:c7:73:6d:26:72:37:04:fa:43:eb:f9:70:63:
         f6:22:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:08 2026 by rpki-client