Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
File:                     D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json)
Hash identifier:          IzTc2B2siZgLksZ+BaaVz0BaHib2CcWGgML8G/v0zqc=
Subject key identifier:   40:12:D2:DB:F1:ED:80:58:78:5B:EB:B8:AB:A4:CA:41:F9:E0:B9:16
Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
Certificate issuer:       /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Certificate serial:       4A98365813274752DE33C241A41F5C2A0FB18888
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 10:04:43 +0000
Manifest this update:     Sat 13 Jun 2026 09:59:43 +0000
Manifest next update:     Sun 14 Jun 2026 13:25:43 +0000
Files and hashes:         1: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: XNDuvBA5CukcoLqg5VjJM09QVh6kCgsZ9uSsUxICp3U=)
                          2: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
                          rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:98:36:58:13:27:47:52:de:33:c2:41:a4:1f:5c:2a:0f:b1:88:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
        Validity
            Not Before: Jun 13 09:59:43 2026 GMT
            Not After : Jun 14 13:25:43 2026 GMT
        Subject: CN=4012D2DBF1ED8058785BEBB8ABA4CA41F9E0B916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:12:fc:e6:17:a1:2a:d3:9e:21:b4:98:1b:
                    60:e0:ad:5d:a7:28:3e:05:de:14:e2:03:e3:c4:74:
                    ea:3e:4a:b4:67:9e:77:13:22:e0:8d:7f:06:30:40:
                    d9:8b:e8:27:c0:77:d7:d2:b7:f5:2f:4a:53:b4:d3:
                    8c:fa:6e:fb:3e:83:63:64:66:ad:62:57:bc:0d:4a:
                    37:bf:74:b3:29:fa:bf:12:54:0a:04:96:f1:d0:96:
                    f5:e3:ba:e9:cb:65:0d:5c:e5:07:40:74:d0:65:4c:
                    9d:da:23:d8:74:28:1e:c8:8a:5c:c5:82:f7:db:cf:
                    c4:3f:a9:11:73:b8:28:57:c0:68:f7:9c:35:d5:9e:
                    07:d5:02:f6:40:2e:bc:68:e0:2e:d6:07:ce:5d:fa:
                    bc:58:1b:5a:e8:3e:51:6e:f0:6c:19:37:ed:64:ec:
                    cc:7a:85:d6:27:7f:af:37:17:8b:f4:b8:e7:0a:6e:
                    0f:4f:46:84:07:5e:a9:3a:79:e2:26:f9:8a:70:da:
                    c8:ab:a5:9e:ec:37:5d:0e:82:7f:ba:a7:3f:18:8c:
                    4e:ae:53:7b:f4:22:b5:3a:a8:b0:dc:a9:e6:ba:76:
                    3b:9d:c9:e1:9b:1a:31:11:6c:80:5b:7c:51:6b:1e:
                    f9:8e:86:0a:66:a6:f6:8b:48:a4:78:6d:01:ab:73:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:12:D2:DB:F1:ED:80:58:78:5B:EB:B8:AB:A4:CA:41:F9:E0:B9:16
            X509v3 Authority Key Identifier:
                keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:05:fe:40:3c:11:a4:6f:c2:56:5b:4b:6d:85:a9:29:c5:
         8c:a7:f0:4e:ef:34:67:1d:b2:f2:24:b0:8c:34:e3:6a:99:9d:
         56:df:c1:7b:86:ce:35:f0:98:61:81:72:b6:8c:a6:98:8c:65:
         93:ff:51:96:2f:2c:81:12:a3:f6:c3:b2:88:30:a8:83:56:44:
         0e:22:ce:07:5d:cc:8e:3a:a7:63:5c:d6:a9:02:94:10:97:e2:
         d8:b2:c4:60:a9:f9:34:c3:76:47:76:09:ef:62:52:03:b5:57:
         0c:7f:00:ac:f0:2f:a0:44:0e:99:ac:0b:63:ed:20:7b:65:10:
         a9:d6:5a:08:40:ce:09:b8:93:df:d5:72:7c:0e:61:be:24:c1:
         5b:87:ca:15:5f:9d:72:09:ba:99:db:ab:1b:1e:fe:63:72:b6:
         44:7c:5e:02:d1:3f:05:3b:90:da:c5:52:ce:c9:4e:46:28:b9:
         f5:23:fb:de:64:f8:b3:35:01:b9:21:68:bc:30:d7:eb:e1:f0:
         86:ee:0e:f2:3a:a6:26:48:07:a9:55:30:fb:d0:6b:a6:9d:4f:
         3b:43:b6:75:94:08:7a:6e:64:c1:7f:09:c3:2f:48:7a:4a:8d:
         1e:fa:13:6c:2b:1d:8d:2a:22:8a:0f:2b:d1:73:57:eb:fe:20:
         81:e9:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:50 2026 by rpki-client