Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File:                     9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier:          kaF20ubGXOx7koOwQreo9LEx0EbIMHHZyFJ10/edt0s=
Subject key identifier:   A0:37:66:7D:5E:58:F2:26:A9:6E:50:1D:AB:4F:67:97:B1:49:26:B4
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer:       /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial:       391D96557B1C3F6CB74904D6CDAEDDF88E2719C2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number:          33
Signing time:             Tue 16 Jun 2026 20:05:50 +0000
Manifest this update:     Tue 16 Jun 2026 20:00:50 +0000
Manifest next update:     Wed 17 Jun 2026 21:20:50 +0000
Files and hashes:         1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: IR2PCBVHXexTrkRJe5Cu3+QFAD9qGABolxj4FiUemHc=)
                          2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
                          3: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
                          rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:96:55:7b:1c:3f:6c:b7:49:04:d6:cd:ae:dd:f8:8e:27:19:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
        Validity
            Not Before: Jun 16 20:00:50 2026 GMT
            Not After : Jun 17 21:20:50 2026 GMT
        Subject: CN=A037667D5E58F226A96E501DAB4F6797B14926B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:a1:ee:b1:cf:37:11:57:01:76:03:6c:c4:
                    af:63:c0:4b:4b:23:2b:1c:4c:c9:91:54:c7:97:ec:
                    68:4a:16:43:1a:b2:0b:74:a6:c2:b9:3f:6d:42:bf:
                    1c:3f:a0:6f:83:1d:2a:53:87:84:d1:42:b5:9a:3c:
                    bb:b6:77:49:24:a5:49:9d:c0:3e:dc:3a:0f:aa:5d:
                    60:ec:2e:84:23:30:4f:7f:bb:57:e6:a0:1a:5b:4c:
                    ee:74:8a:05:a7:a9:1b:02:aa:80:a0:0a:27:c8:d3:
                    2f:88:13:7d:9d:20:8e:ba:20:6e:00:92:d8:5d:08:
                    0a:a2:ed:dc:ea:dd:dc:1b:95:cb:01:5c:87:cd:31:
                    ff:14:f4:e6:a7:e2:d6:37:3a:ea:2c:1d:ad:9c:fd:
                    0b:af:d8:64:30:61:a5:f6:77:5a:cb:57:d4:47:87:
                    58:11:a6:d5:c0:8f:f3:2c:eb:58:33:28:6a:62:1d:
                    fe:1b:cf:fa:21:a8:26:d2:08:e7:36:29:aa:57:3d:
                    45:e3:a9:e0:b5:57:2e:5d:3a:e9:f6:6c:0e:64:cc:
                    cb:87:b1:96:6e:0e:5e:6b:40:79:09:91:6f:8c:6f:
                    63:1e:22:19:c0:e6:5e:bd:54:8c:37:ff:35:ea:6a:
                    a5:63:0d:7e:1c:33:89:14:bc:83:d8:42:dd:3a:3b:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:37:66:7D:5E:58:F2:26:A9:6E:50:1D:AB:4F:67:97:B1:49:26:B4
            X509v3 Authority Key Identifier:
                keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:34:5f:dc:4b:22:e0:43:d0:1f:bb:a4:b1:4b:42:21:ce:
         25:9d:18:3b:7b:9d:6f:0a:af:ab:7f:57:92:9a:55:c6:36:7e:
         87:4c:87:17:6a:43:b2:25:90:71:5b:1f:e0:df:a1:87:8a:55:
         84:c1:13:48:38:97:ea:45:e9:52:36:54:bb:c9:01:01:38:b3:
         c1:3b:06:e9:b8:1d:62:ee:24:df:e5:ea:0d:51:bf:47:75:e7:
         65:9a:45:a1:68:c0:39:4b:d0:56:d4:46:e9:2c:11:f2:eb:65:
         72:7e:90:c5:83:ba:32:fd:3a:32:12:43:23:7e:f5:b5:e7:5a:
         50:60:b2:ed:8a:73:cf:84:16:2d:44:79:a6:13:a8:54:39:ae:
         c7:ff:0b:da:3d:69:83:b5:c3:97:82:fe:68:40:b5:0e:d7:8a:
         15:2e:d7:17:60:0a:aa:90:9e:3c:ee:33:8c:7d:f3:39:09:65:
         37:d3:d3:92:e9:6c:58:72:88:b5:46:12:39:c4:53:20:e8:bc:
         a2:c1:ac:e9:29:d4:6f:04:4a:db:2d:02:4f:d2:cf:7a:41:b8:
         22:58:d7:54:57:ae:26:28:84:94:c9:4f:15:88:57:65:2b:a2:
         54:8a:2d:3a:82:b2:81:30:c9:6d:ae:d7:f8:7d:ff:2c:e7:fb:
         0f:97:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:13 2026 by rpki-client