Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File:                     3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier:          JHzUW0fl2T5q5nm9dccV2ndu4an6rpYmT8P+jTLUKOI=
Subject key identifier:   B6:DD:66:E7:14:0B:1F:F7:5F:1A:4E:F4:70:66:7F:38:50:7E:83:06
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer:       /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial:       5CCAC2F23838597FB7EA6764F4CA2CACE7E8DFB0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number:          30
Signing time:             Mon 15 Jun 2026 01:33:50 +0000
Manifest this update:     Mon 15 Jun 2026 01:28:50 +0000
Manifest next update:     Tue 16 Jun 2026 04:07:50 +0000
Files and hashes:         1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: +o9OTfla+dytOCafHhfjpqmvGOqjHlcESc3S+c0YGBs=)
                          2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
                          rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 04:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ca:c2:f2:38:38:59:7f:b7:ea:67:64:f4:ca:2c:ac:e7:e8:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
        Validity
            Not Before: Jun 15 01:28:50 2026 GMT
            Not After : Jun 16 04:07:50 2026 GMT
        Subject: CN=B6DD66E7140B1FF75F1A4EF470667F38507E8306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:da:72:f3:c5:c2:5b:ba:7d:95:81:39:ca:
                    2a:64:c5:a5:94:53:36:4e:32:8b:48:73:1b:1b:b0:
                    b1:cc:71:c8:ac:e0:78:c6:3b:7c:32:87:90:c0:98:
                    f4:17:ed:0c:c7:c9:2e:38:d8:56:c3:5d:d8:7d:6b:
                    74:59:5a:fc:7f:c6:08:64:10:44:ce:a2:f8:63:c2:
                    8f:90:d6:e1:f3:23:e3:ea:0a:81:5e:60:55:80:22:
                    8d:01:7c:e9:aa:53:c7:45:19:d7:d8:26:e4:6c:81:
                    09:63:54:9f:e1:a0:d5:0a:0f:cd:5e:e7:d2:e9:b0:
                    42:0b:08:38:69:35:74:c1:94:8d:8a:ab:a8:2b:00:
                    1e:81:a9:41:ac:84:19:37:9f:95:37:53:5a:b6:cc:
                    49:dd:be:58:1f:10:72:6e:87:99:ac:b2:96:3a:a7:
                    f1:d3:b2:8d:cb:74:4d:0b:c4:4b:33:e2:d6:43:87:
                    86:4a:44:f4:8b:c6:d8:80:22:a5:4a:15:d9:ad:17:
                    7f:77:ec:a3:11:97:f1:f7:cf:cc:84:58:9c:60:d9:
                    81:b4:70:96:74:9b:ea:36:17:0b:96:ce:93:0d:a3:
                    f0:b6:ad:fb:e5:6b:7d:df:84:8d:3f:ab:d7:cd:75:
                    aa:2e:72:f8:01:32:dc:b8:dd:a1:82:ec:6d:13:e6:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:66:E7:14:0B:1F:F7:5F:1A:4E:F4:70:66:7F:38:50:7E:83:06
            X509v3 Authority Key Identifier:
                keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:b6:d1:30:17:56:cf:82:21:de:10:e9:f2:68:35:b0:5b:
         39:dd:5a:26:7e:0a:43:83:41:9a:3b:c2:23:a9:e3:30:af:42:
         db:e5:c8:a9:1a:08:2d:04:dc:ce:55:fd:fa:bb:c6:5e:63:55:
         81:25:5e:90:a7:30:0e:80:79:55:86:ab:44:17:4a:8c:41:cc:
         19:78:67:70:d0:b8:41:a7:f3:14:06:2a:fb:e3:aa:e9:46:f8:
         cc:53:eb:a5:45:78:a9:0b:47:d5:85:15:b1:c1:a9:1e:50:2e:
         bd:f6:ba:71:b9:a3:ac:4e:d8:e4:a1:cf:e0:e1:8f:3a:92:f8:
         e2:90:aa:de:ec:e4:38:7c:13:03:bf:fd:06:65:92:c7:be:d2:
         be:87:d3:6d:27:12:fc:b9:bf:34:72:69:3a:02:85:e6:0d:00:
         50:e2:83:a4:0e:3c:28:c1:31:05:eb:d3:26:7b:13:42:03:3b:
         0d:d4:21:6d:3b:24:b9:bf:8e:70:6a:93:bc:c8:ab:fe:61:4f:
         24:01:cd:da:a2:07:63:38:30:7f:6d:c0:9d:3e:72:f5:fa:a1:
         22:a3:af:9c:6b:e4:dc:04:f5:ef:e1:55:44:b9:ac:7d:c6:33:
         f8:fc:65:51:a3:d4:7f:fa:98:9e:a0:61:58:9a:bb:39:e7:a5:
         ce:9f:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:44:50 2026 by rpki-client