Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File:                     D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier:          oFrv7IoYiRgGpA2wc4INQG1+vNRm5lRJaBUqMZO99fc=
Subject key identifier:   07:1F:EA:3A:C5:8A:3C:FF:F5:67:A2:2C:B9:AA:F8:98:87:88:1B:3A
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer:       /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial:       1EFC5131775091CC5988B20BFB00C76A843011CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 19:52:59 +0000
Manifest this update:     Fri 12 Jun 2026 19:47:59 +0000
Manifest next update:     Sat 13 Jun 2026 22:59:59 +0000
Files and hashes:         1: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: 9OVzH2/i15DfUXDxJPSvKCdTMnRHIF1683LvhWSQly0=)
                          2: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
                          rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fc:51:31:77:50:91:cc:59:88:b2:0b:fb:00:c7:6a:84:30:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
        Validity
            Not Before: Jun 12 19:47:59 2026 GMT
            Not After : Jun 13 22:59:59 2026 GMT
        Subject: CN=071FEA3AC58A3CFFF567A22CB9AAF89887881B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c2:31:fa:01:9c:15:a4:db:f7:07:b5:ca:84:
                    89:50:9f:bd:ce:4e:13:e6:83:db:62:2f:78:a4:ff:
                    36:00:8f:dd:f1:27:10:59:0e:cf:cc:f6:0c:7f:94:
                    76:dc:04:ef:70:e8:5d:24:3c:e5:ef:10:32:af:12:
                    11:ff:8f:7b:80:87:2b:60:a4:a3:0c:2e:ca:88:29:
                    96:63:9a:96:92:bf:ce:7d:e7:4b:60:65:09:6e:69:
                    28:8e:bd:2d:8a:c0:2f:22:e1:c3:21:0b:d1:d0:75:
                    5c:8d:7d:00:9b:3f:43:e0:66:0f:0b:7b:6e:f3:2a:
                    0a:64:34:a1:e1:47:73:fa:1c:06:f0:13:a9:2a:96:
                    f6:24:f5:08:d9:1b:ea:3b:9c:9a:3e:cf:43:89:a9:
                    90:5f:71:0a:a1:8f:70:ba:44:b2:a4:79:7b:a8:57:
                    ef:e2:15:01:10:c3:29:ff:ff:1a:5a:25:17:19:cd:
                    9a:7d:93:a4:2c:79:82:91:9f:24:4a:e8:75:0b:f8:
                    91:52:3e:a9:ee:68:f8:2c:52:3e:f5:18:b9:c7:a8:
                    3d:26:2f:e4:78:50:b8:a3:37:1f:a5:d7:43:1b:3d:
                    da:02:cd:36:40:f9:c4:9f:da:72:53:d6:ba:73:88:
                    1d:16:cd:72:3c:6a:d5:94:91:9d:1e:6f:09:57:8c:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1F:EA:3A:C5:8A:3C:FF:F5:67:A2:2C:B9:AA:F8:98:87:88:1B:3A
            X509v3 Authority Key Identifier:
                keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:76:4b:35:1e:e7:fb:67:33:03:9e:35:b0:ba:7d:7d:58:
         53:61:37:00:a4:15:c1:b6:c3:b3:1e:16:1d:58:ea:8f:e4:bd:
         fd:af:86:4c:fa:75:f1:6c:ee:86:9e:8e:07:8e:9c:5d:88:95:
         60:26:13:c0:a5:cb:9f:42:4e:27:cb:cb:72:4c:20:fa:3d:41:
         be:97:cb:43:eb:16:55:40:af:f7:a9:f7:3d:cd:b2:24:02:fb:
         ff:d3:8d:d8:a4:b0:79:6b:12:17:94:7e:ef:52:9b:13:fe:fb:
         49:df:d7:84:c3:a7:28:ee:d4:2c:78:b4:b5:b7:c4:90:60:70:
         0b:11:55:e9:20:18:4f:5b:46:55:c6:85:3d:db:b9:25:b0:7d:
         2c:56:0b:11:31:0b:94:01:58:30:f6:05:4a:87:6d:61:9b:6a:
         d3:ba:85:0a:c2:d1:86:15:b7:d0:c6:e3:bf:60:a5:30:08:20:
         77:11:09:90:f9:3f:51:8d:0c:1d:96:af:ad:ac:5e:fe:df:77:
         00:92:dc:94:98:fd:f5:66:98:d0:4e:10:23:75:f6:55:06:76:
         ce:60:31:c8:f2:66:be:ea:20:b4:31:3c:92:44:82:c4:01:cf:
         a6:a9:0b:e7:97:7c:b5:81:b8:22:28:3b:11:ea:3c:e0:bc:46:
         25:9f:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:18 2026 by rpki-client