Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
File:                     A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json)
Hash identifier:          7kl4Gq8fvbT5ChWZcwLF24N8mPBJrCyloo/MZCtC4YQ=
Subject key identifier:   6D:36:7C:FF:8D:FD:7C:CE:87:2C:4A:15:04:BB:19:CC:00:45:4D:0D
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Certificate issuer:       /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial:       4487C030FB889C27E77D74E257F636028EFDA0F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
Manifest number:          2E
Signing time:             Fri 12 Jun 2026 16:52:20 +0000
Manifest this update:     Fri 12 Jun 2026 16:47:20 +0000
Manifest next update:     Sat 13 Jun 2026 19:25:20 +0000
Files and hashes:         1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=)
                          2: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: j/Z63/bbVR9ph3hUMBNjLHM5Wv1s7fLOGJgs+kZd5XM=)
                          3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
                          rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:87:c0:30:fb:88:9c:27:e7:7d:74:e2:57:f6:36:02:8e:fd:a0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
        Validity
            Not Before: Jun 12 16:47:20 2026 GMT
            Not After : Jun 13 19:25:20 2026 GMT
        Subject: CN=6D367CFF8DFD7CCE872C4A1504BB19CC00454D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:3b:41:e4:f0:55:7e:cd:80:ab:50:06:35:
                    09:be:ee:7d:9a:38:5c:77:98:44:95:34:db:70:b2:
                    7b:0c:2a:d1:3b:8c:12:33:d1:81:90:b2:61:31:28:
                    07:0f:25:97:a0:ef:a0:4a:d7:ca:34:a4:29:98:ce:
                    8a:b0:a6:1a:16:d2:47:6b:55:8a:98:6b:b7:fd:67:
                    68:7b:89:a5:36:2e:22:5e:02:75:a3:f7:30:7b:83:
                    4b:b0:45:e3:26:43:a3:a8:41:c8:8f:0a:a7:26:fc:
                    03:98:d4:3c:88:8e:cc:0b:4c:94:da:6e:7f:67:3d:
                    71:17:35:e6:73:71:a1:c7:67:d3:f9:03:98:02:56:
                    7a:35:c9:d3:da:ff:5d:01:30:c7:20:a6:9f:62:28:
                    3c:0b:af:72:14:6e:9a:3b:41:e1:95:55:3c:10:22:
                    e4:79:c2:5a:1b:ce:8d:f1:65:07:b7:6e:44:c4:aa:
                    de:78:b9:bf:cc:ae:52:1e:77:73:42:7f:23:70:5d:
                    76:18:b3:72:a4:0a:08:fa:34:28:da:fd:0f:47:19:
                    f3:95:bf:24:ca:9e:76:b3:41:fe:f3:38:ce:13:ca:
                    95:ed:84:e0:03:90:8e:1f:c7:1f:27:d7:de:68:45:
                    15:1e:f0:22:8d:6b:21:83:6e:57:f4:22:5d:c1:db:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:7C:FF:8D:FD:7C:CE:87:2C:4A:15:04:BB:19:CC:00:45:4D:0D
            X509v3 Authority Key Identifier:
                keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:4b:ad:c7:73:a7:3e:1b:3e:eb:f0:ad:24:13:44:20:d2:
         0a:8d:19:7a:14:25:83:da:78:16:9c:d5:31:04:55:83:ef:b5:
         ea:5d:18:b4:0a:30:1f:24:d0:c4:88:26:1c:b1:6c:f4:83:a0:
         b4:76:d9:e6:5f:e6:fa:21:42:ee:29:21:5a:22:e6:b9:56:38:
         cd:e9:0d:e6:99:fc:fc:9a:7b:f8:b7:f8:ed:21:07:24:fb:21:
         c3:7d:4a:74:b3:bb:46:67:a7:60:09:bf:0b:d8:3d:09:40:66:
         4c:c4:0a:17:4c:e9:19:71:81:f3:d1:16:12:dd:d9:c0:44:3a:
         d5:8b:b3:d5:54:b0:27:22:ed:df:b5:87:a2:67:8c:6b:39:ed:
         63:f5:b7:df:0f:d1:f0:0f:6d:cd:25:3c:d0:6d:82:7a:59:0b:
         2a:8e:64:60:21:47:e8:5b:8c:fc:55:b3:a7:bb:5f:d8:40:98:
         19:5c:f4:00:af:56:ba:c6:5a:1b:c6:94:61:05:d5:e2:f6:9b:
         17:b2:7f:6b:fd:e9:fc:89:0a:70:e0:d0:65:dd:54:3c:21:67:
         b4:d7:9b:8f:d4:dc:91:64:f9:bc:fc:ed:5d:6d:56:40:da:0d:
         9f:dd:6d:65:f1:60:77:4e:1e:53:6b:27:e3:80:6b:c2:a8:ea:
         2f:ac:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:04 2026 by rpki-client