Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File:                     D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier:          3JtVOyU8+Bu7bajkl3bebi2Co4TdBT1hub8sRw5YZ4Y=
Subject key identifier:   02:1E:0B:3E:39:EB:1B:3D:63:92:FE:0A:14:25:45:42:4C:9A:47:92
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer:       /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial:       4433BAD63970B172854E5F530758A0893F4F68CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 21:44:57 +0000
Manifest this update:     Tue 28 Jul 2026 21:39:57 +0000
Manifest next update:     Wed 29 Jul 2026 23:25:57 +0000
Files and hashes:         1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: DxoSyJgfLJgZ/1IO+fKuKYcuX4U4puK7Ap4WDbOHws8=)
                          2: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
                          3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
                          rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:33:ba:d6:39:70:b1:72:85:4e:5f:53:07:58:a0:89:3f:4f:68:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
        Validity
            Not Before: Jul 28 21:39:57 2026 GMT
            Not After : Jul 29 23:25:57 2026 GMT
        Subject: CN=021E0B3E39EB1B3D6392FE0A142545424C9A4792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:e4:82:59:08:5c:bf:39:de:c1:35:81:7c:
                    89:36:2c:c7:2f:e3:d9:2a:3c:41:a9:2d:63:28:d6:
                    a1:07:4a:09:c7:a4:ce:b1:03:72:1d:40:11:e4:d9:
                    68:28:ea:40:8a:2a:3b:34:d8:0b:50:4d:ee:6a:3e:
                    2d:4d:73:a6:d7:0f:12:dc:9c:13:09:8b:0f:6e:83:
                    48:3d:7f:4f:95:80:e5:db:d2:d7:b0:ec:71:8f:79:
                    cf:28:48:23:7b:91:f1:43:74:95:18:74:15:b1:fc:
                    aa:0d:59:12:43:9d:5e:a0:dd:d0:5e:19:33:3f:78:
                    e0:f8:61:8d:c8:02:2b:ad:27:59:fe:8f:1e:55:ee:
                    38:d8:1e:ac:20:6a:f9:c0:46:d9:83:b5:46:b3:fe:
                    dd:29:26:a6:f9:3f:de:da:28:7c:f7:8b:a1:da:a2:
                    ba:10:83:93:f0:22:ea:a0:84:f6:5d:a3:6a:cf:9f:
                    41:61:e8:12:12:76:ee:e3:ce:2d:08:51:08:2b:75:
                    42:a1:0b:b6:cf:b1:69:6e:b5:c1:a5:f8:0c:bd:ed:
                    61:ab:a0:47:94:43:83:dd:a6:a1:10:f1:cf:28:a7:
                    0a:5a:46:77:d2:23:c8:1f:1b:9d:cb:bf:88:9a:d0:
                    fc:f3:de:d2:40:01:c3:ff:a7:95:66:eb:aa:78:45:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1E:0B:3E:39:EB:1B:3D:63:92:FE:0A:14:25:45:42:4C:9A:47:92
            X509v3 Authority Key Identifier:
                keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:45:d5:31:1d:1e:ac:85:99:9c:88:1a:e4:43:f6:3b:0f:13:
         e7:86:d2:8d:6e:3a:bb:c8:29:94:c4:58:78:e0:be:7e:70:2f:
         51:7b:93:45:d8:0b:1c:22:eb:08:e7:fe:16:89:be:5a:2a:79:
         e0:79:05:33:59:b0:1f:f2:4f:ee:11:ab:79:3b:0d:08:ff:df:
         3c:35:1f:11:cf:67:74:c5:b0:08:ac:6b:63:10:e0:e2:e8:56:
         fd:52:e7:5d:9b:6b:06:76:37:cb:c5:38:41:8c:80:8c:9a:be:
         20:91:36:bf:c7:6c:0c:68:50:dc:11:e0:f1:3f:c9:f9:44:b8:
         49:63:c0:1a:f9:4f:b4:5d:4e:1d:6e:63:07:31:65:4c:86:d8:
         59:ce:6a:08:97:51:2e:2e:33:27:8a:22:f2:7c:c2:43:f7:0b:
         a0:17:2f:24:85:5a:79:cd:d5:31:6b:50:b8:7e:39:94:e0:3b:
         41:8d:5e:dd:1f:bc:78:a7:f4:1b:a2:36:8d:a9:a7:03:20:32:
         c0:54:d1:f6:e9:d9:17:29:31:d6:1a:d6:8d:8f:56:f5:92:3c:
         61:2c:45:e7:2c:49:05:1c:07:33:d6:d1:b5:ca:e0:49:e6:4f:
         3e:0e:1b:6c:8a:54:a3:2d:fc:0f:e5:1c:9e:50:42:de:ff:37:
         04:91:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:23 2026 by rpki-client