Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
File:                     2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json)
Hash identifier:          V9YH/DYScI1gWxTAqcUpX3DTv4i3XIq5pXM6Y3B6d3g=
Subject key identifier:   89:AF:EA:FD:28:44:2A:3A:D2:3E:14:52:63:39:32:B6:5D:2E:B5:70
Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
Certificate issuer:       /CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Certificate serial:       25246A6864E38CBF7F60C8BE27AFA7FB60272593
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 15:05:24 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 17:50:24 +0000
Files and hashes:         1: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: wd+8w8Nk4gAd3p1iLZtsyY7JXb/ssczZ2gVjbq7Y3mY=)
                          2: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl
                          rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:6a:68:64:e3:8c:bf:7f:60:c8:be:27:af:a7:fb:60:27:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853
        Validity
            Not Before: Jun 13 15:00:24 2026 GMT
            Not After : Jun 14 17:50:24 2026 GMT
        Subject: CN=89AFEAFD28442A3AD23E1452633932B65D2EB570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:52:fb:91:23:80:e3:17:03:23:f0:0e:a1:
                    f1:ab:9c:b5:82:ff:01:2d:c6:ec:3d:bc:fb:c6:92:
                    7f:0f:27:0f:3a:16:33:6d:e6:19:e5:f0:f2:a8:53:
                    d8:78:a6:ec:87:7c:22:75:0b:b4:ee:42:1c:49:cf:
                    33:5b:d8:f6:e9:84:1b:5d:f4:f4:9f:b5:94:e4:68:
                    ef:3d:c4:a7:2c:96:13:bc:06:a6:b1:1a:ec:a2:a1:
                    d2:d6:5b:72:bc:5c:30:62:84:e3:a6:04:05:68:7e:
                    2e:89:75:7c:c3:28:fc:b3:66:4c:92:fc:85:4c:df:
                    d4:08:1a:4d:04:40:87:56:dc:22:66:d4:4b:a4:67:
                    40:26:e3:2f:61:ca:8e:1e:78:22:eb:40:d7:26:c6:
                    67:46:17:ea:1b:e1:b3:5e:30:92:29:b8:86:ff:b5:
                    a1:cb:80:01:cd:f7:b8:40:1e:63:6f:c5:1d:13:b7:
                    a8:27:07:20:0c:11:10:57:f9:7f:59:bc:30:59:c9:
                    42:1a:41:03:18:11:65:cf:6c:9f:dc:ec:12:cd:c6:
                    b8:2d:41:76:f1:72:26:e1:fe:be:5f:6a:e0:95:40:
                    fe:5a:13:1c:9f:66:e2:17:73:51:9c:b5:7c:5d:f3:
                    5d:aa:5e:0c:11:da:5d:af:c0:bf:51:d0:8f:36:e3:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:EA:FD:28:44:2A:3A:D2:3E:14:52:63:39:32:B6:5D:2E:B5:70
            X509v3 Authority Key Identifier:
                keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:18:39:59:9f:30:9d:9f:0b:ea:28:55:df:77:d0:5c:c4:d6:
         bd:a0:6b:99:70:b9:ce:78:20:56:ff:3f:28:c4:78:06:c1:a8:
         a6:8e:c5:63:9b:91:48:55:f2:35:9d:44:0e:2e:fc:76:ba:c6:
         e9:29:06:ff:54:67:27:3d:75:bd:5f:1b:fd:17:bd:83:bd:e6:
         05:db:c2:74:59:1d:3c:bd:29:f3:64:76:e4:10:2f:94:7b:53:
         cf:f4:a2:74:bb:81:60:f7:f2:3b:cc:fd:03:ab:93:e9:ab:77:
         03:6b:f4:cd:b7:ff:21:47:b6:b8:14:eb:85:cd:52:36:7f:2b:
         13:08:06:94:f1:20:3e:26:5d:85:03:5d:27:a9:ec:06:75:de:
         b5:63:be:84:03:d3:62:00:30:58:9d:4b:34:e5:f8:5d:5c:5f:
         80:b2:d6:3f:00:86:3c:68:35:42:98:89:c8:e0:1c:95:ae:65:
         7d:1c:12:1c:b0:9f:cd:dc:2d:7f:23:75:37:63:e7:20:55:4a:
         63:e1:f1:9a:36:90:83:cf:69:4e:9f:ec:1b:59:39:36:e3:8a:
         f9:92:7c:36:39:c0:f8:85:bb:c0:25:a6:5f:cd:fa:f9:b3:be:
         3c:d9:b8:32:c7:20:ab:50:14:c0:5d:85:7a:03:12:dc:ec:cd:
         11:5b:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:02 2026 by rpki-client