Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
File:                     2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft (raw, json)
Hash identifier:          2kb3s1xNckGhyOjhhm+xQc/J5YHxpmBnx0L4UOytbfo=
Subject key identifier:   A9:5A:2E:07:B2:E5:D2:6E:A0:42:18:A4:9E:C7:7B:F5:0A:EC:85:A3
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       5E079679A27FCEA76DF6FB551084C19735DA09CD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
Manifest number:          38
Signing time:             Wed 17 Jun 2026 08:57:09 +0000
Manifest this update:     Wed 17 Jun 2026 08:52:09 +0000
Manifest next update:     Thu 18 Jun 2026 10:00:09 +0000
Files and hashes:         1: 3231312e37392e3130372e302f32342d3234203d3e203136353039.roa (hash: CjGMLe+Z4zl3oKhMgAnUNX5Qzo2hJu6hNiBeWrjbWr8=)
                          2: 3130332e3132352e3232372e302f32342d3234203d3e203136353039.roa (hash: KGP6KIcV9P6yWvdW9RIZNoookZNci1EPcCE5EkDPzQg=)
                          3: 3231312e37392e3130362e302f32342d3234203d3e203136353039.roa (hash: ChYOUadKkOPkyOsEvqDqF4mp00sueJFLaUXSsLjiDAw=)
                          4: 3130332e3132352e3232362e302f32342d3234203d3e203136353039.roa (hash: 5Tf8/6KeNcrgy6JUvG6HFw++mwSYoU/UPstq8SkHoNA=)
                          5: 3130332e3132352e3232352e302f32342d3234203d3e203136353039.roa (hash: FmHmQMwwJ/NNx1Ea23G9M1I2l9BOeklXW28LFaNMNeA=)
                          6: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl (hash: YLIa0ViTQip42sKM/f9PTl3FZziGa5YWUMrMCqSeQcI=)
                          7: 3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa (hash: Uem5Q3NCsbS+pBiksFlyOVkJAZV5kyuPM0+iiLLcI/A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:07:96:79:a2:7f:ce:a7:6d:f6:fb:55:10:84:c1:97:35:da:09:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Jun 17 08:52:09 2026 GMT
            Not After : Jun 18 10:00:09 2026 GMT
        Subject: CN=A95A2E07B2E5D26EA04218A49EC77BF50AEC85A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:c3:47:7e:9a:f3:76:2b:a8:ea:96:25:1f:
                    89:8a:5b:dc:81:40:ae:cd:5e:94:ad:a1:5e:41:17:
                    b4:57:e8:90:ca:79:78:51:21:da:88:d3:36:22:cb:
                    76:d4:ab:e4:29:fb:0f:54:6d:8a:c7:3d:e0:18:bc:
                    d3:7f:24:ed:04:dc:79:d9:cd:d8:c2:91:d1:4a:64:
                    90:c2:f2:24:59:f6:ac:db:2c:a5:6b:5d:6c:8b:4a:
                    ec:05:4f:e8:f0:24:26:51:ee:e5:fb:d0:2f:ab:c3:
                    ed:70:ef:a0:52:c8:1c:d6:7e:91:ad:8d:01:d3:68:
                    12:88:f2:3b:42:03:7c:c8:32:99:84:1a:74:a2:f6:
                    65:7d:df:08:32:3d:53:18:b2:55:03:1b:7d:27:2b:
                    0c:09:cb:e0:44:6a:19:01:6d:d3:42:44:bd:d4:36:
                    af:d8:3e:d0:21:3f:43:f1:55:d6:2b:ce:b0:71:8c:
                    8d:9f:85:a2:d4:f9:f5:ca:ea:ac:23:ba:8b:1e:4d:
                    6e:d1:c7:b9:aa:c6:a5:c0:e0:ee:95:b8:34:53:7a:
                    e5:82:cb:90:77:5b:ee:ce:52:24:15:62:3b:f0:15:
                    59:7f:f1:33:70:98:a0:ec:37:36:e4:3a:8c:64:e5:
                    26:e3:20:be:16:3d:55:98:c9:2e:45:c2:70:83:63:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:2E:07:B2:E5:D2:6E:A0:42:18:A4:9E:C7:7B:F5:0A:EC:85:A3
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:58:55:a6:12:35:6d:96:ad:27:a2:23:a5:0f:a6:83:df:
         f6:e9:53:78:26:d2:5b:39:b8:e8:98:8f:17:5e:2c:50:54:72:
         65:c9:08:de:77:b7:a7:93:a2:70:57:b8:0c:b0:19:b0:78:cb:
         74:cf:64:e8:a2:af:ad:69:e8:ea:98:ef:10:54:05:ac:52:1a:
         93:0c:43:96:17:8a:9b:3a:0f:f6:09:11:34:34:2d:72:7a:3c:
         2d:ee:ce:97:7b:ab:07:14:11:5a:e2:ab:34:57:ae:32:0a:4a:
         a6:a1:16:ca:e2:bb:a5:92:24:e7:a7:16:08:be:8e:72:89:56:
         1c:8a:ed:67:09:e6:1f:1c:33:3b:ad:1e:83:32:c9:9c:35:cf:
         45:c0:97:20:7a:a4:f8:37:fb:9f:4f:d7:b4:02:1c:2b:d7:5a:
         b0:e5:72:72:fa:e8:79:45:21:4e:64:5c:f4:ba:5c:de:67:9d:
         57:15:a5:7f:0e:5c:c4:8e:d4:69:b9:8e:10:f6:f4:13:9e:32:
         d9:af:47:8a:69:7e:37:79:76:59:b0:26:d0:0e:71:c3:97:f5:
         45:2f:6e:e9:1b:18:a7:d2:15:d9:5f:81:12:6f:55:0e:61:70:
         0a:87:63:ae:fe:2b:ab:7a:12:ee:c2:51:ad:7b:14:df:b7:40:
         72:51:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:16 2026 by rpki-client