Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          6a0RSxJd4Php5nDO7uB42Dyp8lA40dS72EGrEDHDct4=
Subject key identifier:   A1:B9:CF:BC:1B:6A:98:0D:3C:A5:57:A2:2D:80:93:EA:89:D6:F8:AE
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       7F178F8B2ECF5764B093017CE066FCAD53781012
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 00:33:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:28:31 +0000
Manifest next update:     Sun 14 Jun 2026 01:55:31 +0000
Files and hashes:         1: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
                          2: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
                          3: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: Fnjba5d4jIr8oMbEA3dpb7VrPk+yMjnSnYwA4nfvS+k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:17:8f:8b:2e:cf:57:64:b0:93:01:7c:e0:66:fc:ad:53:78:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: Jun 13 00:28:31 2026 GMT
            Not After : Jun 14 01:55:31 2026 GMT
        Subject: CN=A1B9CFBC1B6A980D3CA557A22D8093EA89D6F8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:da:4e:c8:ac:c8:fd:b4:33:ee:b9:70:e2:
                    02:71:37:a0:39:fc:26:c5:30:1d:c1:9b:65:99:01:
                    59:d2:f4:4d:2d:62:99:ed:41:1b:68:fa:10:aa:a9:
                    d1:9e:1a:f9:f2:9a:90:99:f4:6b:48:fc:4a:ae:7c:
                    47:66:d4:14:b6:f4:49:44:f6:be:33:bd:eb:da:1f:
                    a1:88:49:57:2c:7d:04:11:69:59:93:a0:17:e2:50:
                    f4:11:69:0b:96:4e:ce:be:6f:b7:09:fa:ba:e9:d9:
                    44:58:32:e4:28:93:ed:fe:3c:e5:48:62:4f:4e:c7:
                    ea:d1:92:f0:76:92:46:b3:d6:06:19:00:17:72:88:
                    ce:48:ee:0e:ed:6b:f3:49:d5:77:f0:4c:74:b7:31:
                    25:e8:76:9f:c5:61:df:5c:40:c2:8e:d7:4f:13:ab:
                    27:da:24:dc:ef:54:08:f5:22:d1:b5:eb:9f:69:87:
                    5b:16:74:f0:fd:2a:e6:6e:5b:bd:e2:fa:38:2d:04:
                    f3:bc:d5:2b:3f:2d:fa:7e:af:2d:9f:f7:e5:64:86:
                    1b:af:85:c7:9b:35:93:23:46:18:94:4c:da:8d:61:
                    3d:a8:89:c8:b5:fc:cc:94:47:7b:da:6f:ad:65:e6:
                    f8:91:93:68:4d:42:80:4a:3b:24:49:f1:25:57:0d:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B9:CF:BC:1B:6A:98:0D:3C:A5:57:A2:2D:80:93:EA:89:D6:F8:AE
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:dc:50:6b:1d:ad:80:3f:8a:d2:d0:d9:b8:9a:58:ef:37:
         e0:6f:1b:5c:a1:e0:54:8e:c4:bb:6a:f8:cf:96:84:e4:13:fd:
         d3:a8:39:ca:78:db:2b:79:ec:75:0c:d6:59:a2:f4:b6:8e:76:
         8b:2e:cc:15:e0:cb:16:9b:88:f9:ba:97:4e:4b:8c:71:69:27:
         14:ad:59:81:41:75:e2:a5:4a:08:fd:66:cc:a4:43:86:06:e2:
         b2:b3:5e:23:6a:5b:73:c0:76:dc:05:f2:74:a5:9d:21:1c:d8:
         17:4c:12:41:c3:77:a5:ec:5f:63:dc:e4:fb:9f:f6:1e:24:72:
         b5:a6:6b:a6:ab:ee:c2:41:25:c5:07:2d:35:4e:8c:4d:b9:eb:
         bf:16:9b:ce:95:8e:71:c3:47:cc:36:06:bb:47:55:6e:a4:19:
         99:b2:3c:5c:92:83:6b:fd:d3:f9:91:98:f6:1c:a5:73:20:af:
         90:3e:23:86:90:4b:75:b0:97:db:cf:2a:1c:bf:90:57:3b:c8:
         1f:da:ec:24:6e:f7:a4:8d:e0:36:1f:8f:d2:67:56:a0:df:e7:
         a3:90:54:75:f0:e0:6b:86:a0:59:1c:56:21:6f:be:dd:aa:a6:
         bc:fd:5d:c0:8a:f4:28:cd:f9:06:07:ec:6f:fd:2a:3a:90:a6:
         88:c7:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:14 2026 by rpki-client