Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
File:                     871300497118DBA75FA9B46DE2D7D39663DBDE52.mft (raw, json)
Hash identifier:          1fXX4yHzlszqChBQVnaweqL5/+K9QQ0U1HYcJiwJtKw=
Subject key identifier:   6D:76:42:C8:7C:F9:63:0A:0F:7C:51:E5:95:A5:48:DB:3A:06:A2:14
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Certificate issuer:       /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial:       01305859EE5F985D2DBB71054AE71A9FD98C4D8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 08:24:24 +0000
Manifest this update:     Sat 13 Jun 2026 08:19:24 +0000
Manifest next update:     Sun 14 Jun 2026 08:42:24 +0000
Files and hashes:         1: 3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (hash: jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=)
                          2: 871300497118DBA75FA9B46DE2D7D39663DBDE52.crl (hash: c6XQjFzo0x8AgtxvhA/RG+3S0Wc7rb1hUVE3PlLoNUs=)
                          3: 3130332e3131372e342e302f32322d3234203d3e20313331363233.roa (hash: Tln46/ulM0jeOxnleoQfL0KZfR8c6xYxi9yDZm65GwA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
                          rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:58:59:ee:5f:98:5d:2d:bb:71:05:4a:e7:1a:9f:d9:8c:4d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
        Validity
            Not Before: Jun 13 08:19:24 2026 GMT
            Not After : Jun 14 08:42:24 2026 GMT
        Subject: CN=6D7642C87CF9630A0F7C51E595A548DB3A06A214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:06:ed:db:4f:bc:eb:b1:27:41:06:b9:c5:
                    fe:be:8f:a4:7f:bc:62:46:41:3f:34:a1:d9:c5:16:
                    66:e4:57:cc:94:9f:6d:1e:31:ce:f9:57:e6:43:23:
                    58:d8:3f:7e:0f:99:4f:dd:eb:50:8a:d7:4f:bd:1a:
                    39:f8:6b:b5:12:9f:64:03:0a:5a:2a:df:c4:88:cb:
                    69:cd:8f:74:6e:7e:ba:be:92:d8:3b:e5:04:35:1b:
                    78:d4:b1:83:88:bc:44:a0:04:b6:f6:f6:04:87:47:
                    cb:96:34:67:f3:77:8e:4e:ff:95:37:68:4f:6b:62:
                    91:d9:67:67:92:42:8c:42:26:21:1f:e5:e9:19:a5:
                    8e:09:5b:e3:65:58:bd:c9:0a:ce:50:e6:81:10:d4:
                    43:be:cf:09:6d:14:9b:ad:43:23:de:79:28:d2:de:
                    cd:8c:df:91:3b:ee:b4:f4:63:46:6b:91:6f:c6:c0:
                    56:3f:a3:52:72:3d:bb:9d:eb:de:aa:2e:5f:91:c7:
                    ff:55:92:b3:d2:a5:57:9e:ff:09:44:b4:31:cb:fd:
                    ff:42:8f:4b:f5:ba:ad:02:4c:61:84:b3:fc:cb:2e:
                    b4:7e:75:b6:79:65:da:cd:64:40:c7:a2:9c:d3:c1:
                    1a:b1:61:74:ec:87:12:93:36:23:62:90:79:86:e3:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:76:42:C8:7C:F9:63:0A:0F:7C:51:E5:95:A5:48:DB:3A:06:A2:14
            X509v3 Authority Key Identifier:
                keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:50:93:d6:cd:d4:d3:7f:76:76:ac:ce:52:e5:52:6f:9c:
         48:12:53:4b:14:5f:a9:c0:fa:30:33:e0:44:41:23:a3:21:3c:
         38:15:d2:f1:bd:2f:fd:12:86:39:fd:1e:03:6d:fb:8b:c8:1a:
         95:fb:8d:f1:28:42:0e:67:48:a0:dd:cb:5a:de:79:29:10:14:
         ed:1f:e5:4e:cb:1e:b0:33:43:22:f3:42:99:91:3d:24:5f:98:
         40:d3:c6:28:54:7a:a8:85:84:c4:9e:d0:f2:df:90:0a:c2:ad:
         1f:22:82:35:16:ca:e7:0f:0f:a2:7d:35:c3:7d:da:19:ce:2b:
         6e:bd:4b:d4:cb:a2:92:3d:ba:51:8a:2d:ea:b9:4c:2b:e1:89:
         cb:14:eb:86:40:0e:43:92:e9:1c:18:e3:32:79:a0:e2:c0:d3:
         ce:a9:86:44:38:f8:d1:a2:44:a5:be:47:8f:3f:98:7f:06:f4:
         ca:36:7f:35:52:8d:37:c4:67:81:5b:fe:a1:b6:6d:2c:39:39:
         89:e4:28:99:38:0b:11:23:7f:88:1e:8c:2a:0e:84:d4:ea:fa:
         97:ee:e3:f7:71:6b:03:55:8c:c8:95:79:0b:aa:b0:0a:e2:69:
         27:de:4e:2a:fc:68:a3:41:bf:73:ed:bb:a3:ec:5f:ed:05:0c:
         5c:f5:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:16 2026 by rpki-client