Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File:                     CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier:          EOdZ2tnZJy2leTdO4ZRPGESlaQxSSnItOvDLYasS2tU=
Subject key identifier:   05:14:1A:40:F7:5A:94:FA:06:82:10:F5:56:91:59:B9:54:1C:62:F5
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer:       /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial:       33131499A78DE46D76CFCDD68F3A2184F33E326B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number:          2E
Signing time:             Fri 12 Jun 2026 21:23:09 +0000
Manifest this update:     Fri 12 Jun 2026 21:18:09 +0000
Manifest next update:     Sun 14 Jun 2026 00:51:09 +0000
Files and hashes:         1: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
                          2: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: ZEBmZq57FPCBgJgBIoC1B6/SKQ5+JOMHOo2SRb7WDMc=)
                          3: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:13:14:99:a7:8d:e4:6d:76:cf:cd:d6:8f:3a:21:84:f3:3e:32:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
        Validity
            Not Before: Jun 12 21:18:09 2026 GMT
            Not After : Jun 14 00:51:09 2026 GMT
        Subject: CN=05141A40F75A94FA068210F5569159B9541C62F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:2b:8b:e6:08:72:0b:d3:87:41:a7:9f:dc:
                    b4:0e:7f:d5:df:7f:da:03:29:e0:34:73:7f:33:df:
                    ed:56:3d:9e:9a:46:9d:6b:8f:a5:26:da:75:de:25:
                    d5:46:a4:b1:e0:d7:45:85:34:2a:04:c4:94:e6:80:
                    a6:38:cb:20:59:55:dd:5d:c4:08:0d:fe:8a:96:09:
                    e0:24:16:07:da:dc:16:f4:d0:c2:06:dd:d8:2c:ac:
                    b3:07:fe:e6:59:96:53:89:14:f3:8e:a7:15:c1:fb:
                    c1:85:a5:85:28:be:ce:2c:c5:ea:23:1d:49:28:4c:
                    d9:75:4d:84:18:cb:9c:6b:e6:3e:47:31:ff:45:88:
                    d8:09:04:8a:2c:28:29:a5:25:23:4e:3a:52:d3:d2:
                    26:0b:7a:9e:7c:48:29:3e:04:28:bc:4a:b8:43:6b:
                    10:0a:bb:d6:dd:46:03:ff:83:dd:58:6f:fe:1e:c5:
                    cb:fd:e9:af:ac:92:64:b7:9d:fd:73:b8:a3:fb:67:
                    0e:17:b6:d2:64:07:9c:06:3b:9f:78:1f:f4:7e:84:
                    04:2d:4d:42:5e:17:14:b6:da:e8:93:39:6f:bf:b1:
                    f2:b0:95:50:b5:a5:2b:64:f7:3a:c4:da:78:fe:b7:
                    e1:e7:b9:ea:e1:a3:8b:ac:9b:6f:5d:e5:d8:62:82:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:1A:40:F7:5A:94:FA:06:82:10:F5:56:91:59:B9:54:1C:62:F5
            X509v3 Authority Key Identifier:
                keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:97:11:0b:16:b7:c1:c2:b4:b8:af:71:75:17:77:bb:09:
         54:da:e0:d4:12:20:da:b4:06:39:db:73:2a:de:31:44:5a:97:
         21:d4:ea:08:31:05:26:7e:e5:43:c7:7a:2b:35:c2:34:af:c1:
         25:61:f9:0c:87:5c:01:30:d1:e2:49:01:09:de:4a:b8:b7:08:
         3b:23:5b:28:2d:8a:e3:19:84:67:ff:7f:da:4f:34:21:42:e6:
         26:28:f7:53:29:f0:15:d4:5a:69:03:01:42:fb:47:26:cf:0e:
         4f:40:f7:c3:ba:a5:51:18:8c:f4:2e:75:f3:d7:51:29:45:2c:
         cc:10:3f:98:a5:c2:ce:7d:ad:75:fc:84:1c:00:c2:95:c4:e9:
         01:b5:e6:2b:a7:88:e0:04:39:bc:32:03:68:38:2f:d8:b2:7a:
         06:99:00:2d:9d:69:47:c8:30:cd:af:1f:cb:13:3f:82:ae:c7:
         ff:dc:b4:ca:d8:25:48:59:79:5a:59:f1:54:34:e3:de:c4:ae:
         19:4d:76:f3:0c:ad:fd:03:28:d2:d2:45:e4:bb:95:d7:57:02:
         a6:60:aa:13:db:4e:e9:5a:42:bf:ad:18:ce:b4:24:76:c6:06:
         c5:df:d7:29:ca:a8:07:bb:60:51:9a:e1:66:e8:35:5d:fd:7c:
         77:5d:d9:c5
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUMxMUmaeN5G12z83WjzohhPM+MmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGNzQyODU5MDNFRUEzMzQ2RkIxRTc0ODcyODk1QTRD
RThEMTc0MjAeFw0yNjA2MTIyMTE4MDlaFw0yNjA2MTQwMDUxMDlaMDMxMTAvBgNV
BAMTKDA1MTQxQTQwRjc1QTk0RkEwNjgyMTBGNTU2OTE1OUI5NTQxQzYyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+SuL5ghyC9OHQaef3LQOf9Xf
f9oDKeA0c38z3+1WPZ6aRp1rj6Um2nXeJdVGpLHg10WFNCoExJTmgKY4yyBZVd1d
xAgN/oqWCeAkFgfa3Bb00MIG3dgsrLMH/uZZllOJFPOOpxXB+8GFpYUovs4sxeoj
HUkoTNl1TYQYy5xr5j5HMf9FiNgJBIosKCmlJSNOOlLT0iYLep58SCk+BCi8SrhD
axAKu9bdRgP/g91Yb/4excv96a+skmS3nf1zuKP7Zw4XttJkB5wGO594H/R+hAQt
TUJeFxS22uiTOW+/sfKwlVC1pStk9zrE2nj+t+Hnuerho4usm29d5dhigvahAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUBRQaQPdalPoGghD1VpFZuVQcYvUwHwYDVR0j
BBgwFoAUzvdChZA+6jNG+x50hyiVpM6NF0IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRlUv
MC9DRUY3NDI4NTkwM0VFQTMzNDZGQjFFNzQ4NzI4OTVBNENFOEQxNzQyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0NFRjc0Mjg1OTAzRUVBMzM0NkZCMUU3NDg3Mjg5
NUE0Q0U4RDE3NDIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlGVS8wL0NFRjc0Mjg1OTAzRUVB
MzM0NkZCMUU3NDg3Mjg5NUE0Q0U4RDE3NDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA8JcRCxa3wcK0
uK9xdRd3uwlU2uDUEiDatAY523Mq3jFEWpch1OoIMQUmfuVDx3orNcI0r8ElYfkM
h1wBMNHiSQEJ3kq4twg7I1soLYrjGYRn/3/aTzQhQuYmKPdTKfAV1FppAwFC+0cm
zw5PQPfDuqVRGIz0LnXz11EpRSzMED+YpcLOfa11/IQcAMKVxOkBteYrp4jgBDm8
MgNoOC/YsnoGmQAtnWlHyDDNrx/LEz+Crsf/3LTK2CVIWXlaWfFUNOPexK4ZTXbz
DK39AyjS0kXku5XXVwKmYKoT207pWkK/rRjOtCR2xgbF39cpyqgHu2BRmuFm6DVd
/Xx3XdnF
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:13 2026 by rpki-client