Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File:                     3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier:          EvLintLyVXLZlL6hej5z1hyvIvfy5L9SfswvFz976uw=
Subject key identifier:   66:BF:24:45:EF:47:C8:82:4E:D7:47:21:AF:3E:58:2C:DF:70:59:DB
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer:       /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial:       4BA482DC93FE867AB7BCFA1396A9B3DD97F73574
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 19:19:45 +0000
Manifest this update:     Tue 28 Jul 2026 19:14:45 +0000
Manifest next update:     Wed 29 Jul 2026 21:15:45 +0000
Files and hashes:         1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
                          2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: OsftcJ1DxGUKv4Xsutr01mYrwLDrkR8T8G6YtxRplBg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a4:82:dc:93:fe:86:7a:b7:bc:fa:13:96:a9:b3:dd:97:f7:35:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
        Validity
            Not Before: Jul 28 19:14:45 2026 GMT
            Not After : Jul 29 21:15:45 2026 GMT
        Subject: CN=66BF2445EF47C8824ED74721AF3E582CDF7059DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:4d:83:f0:fc:84:78:6f:74:6f:f5:89:16:
                    dd:aa:29:21:9a:74:9b:98:ac:11:b9:ed:72:df:db:
                    bf:ab:df:4d:c7:ab:01:a6:53:b2:70:6d:b7:fc:76:
                    d7:bd:c6:6e:70:4d:93:d2:52:04:69:3b:15:a0:78:
                    27:dc:01:4c:3b:2d:5c:d6:d9:6f:0e:1b:e3:a0:a8:
                    b2:e8:e7:6b:39:d3:89:69:22:8e:f0:5b:c8:41:49:
                    f0:9a:5a:73:2e:99:e4:2a:9a:2f:9a:5e:47:fd:ac:
                    ca:cd:e8:3f:19:c6:5c:f0:a6:a0:f8:6c:34:f7:ab:
                    f9:6f:60:58:07:db:66:e8:70:cb:83:b4:c8:f2:8e:
                    88:55:5a:f4:b9:42:22:c9:e6:fb:d3:1e:8d:a7:63:
                    e0:ba:ad:d1:e5:5d:fb:27:b8:7a:3b:2d:ec:a3:7f:
                    12:d3:8d:03:25:f1:ba:cc:1f:f3:d0:02:a9:05:49:
                    0f:88:22:78:02:d5:f9:05:fb:18:02:c7:63:fa:f5:
                    43:13:fe:18:a2:bd:fe:b7:6a:62:c1:02:19:00:c9:
                    a5:36:4d:89:b9:50:5a:03:3a:d0:33:73:64:57:29:
                    dd:d0:64:2c:a0:2b:7b:3b:18:33:b9:64:4b:65:98:
                    2c:38:38:d5:69:67:87:8b:89:7a:fd:84:c9:23:aa:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BF:24:45:EF:47:C8:82:4E:D7:47:21:AF:3E:58:2C:DF:70:59:DB
            X509v3 Authority Key Identifier:
                keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:ab:7d:9c:6e:4c:27:8b:0f:ef:28:57:a4:8f:90:9f:11:
         d4:a4:5d:bb:90:8f:6e:53:86:00:15:94:ea:26:8d:1f:0c:f4:
         bc:9a:90:5b:b2:39:4d:20:c5:3d:c8:da:29:84:ad:e6:79:71:
         fc:7d:a6:0e:d4:1f:c3:eb:9d:60:5d:d7:42:4f:2d:1b:b3:ee:
         b3:38:37:a3:89:7b:74:d4:15:9f:d6:67:a1:b3:9f:b9:a6:36:
         2a:ee:38:80:0a:57:fb:3b:ef:61:42:72:23:67:a3:ff:b0:0a:
         4c:09:11:03:fa:e1:f5:cc:2f:21:34:bd:77:c5:4b:29:24:c2:
         b6:38:8d:7d:20:69:8b:63:15:56:24:d8:ac:26:64:ac:42:a7:
         d0:88:a1:28:b2:5a:ec:3a:4f:26:06:46:6b:c8:54:7a:26:75:
         ab:18:83:61:ae:fb:61:fd:08:8c:b5:a9:3a:f4:30:78:95:b4:
         0e:09:1a:43:90:10:da:c1:e9:7b:9d:a9:b2:40:de:2d:e1:af:
         33:16:e0:d1:20:9d:34:c8:8a:96:e6:9e:46:cd:9c:48:40:e1:
         bb:5d:df:e4:8d:bb:19:ea:d8:6d:3f:d6:bf:69:5c:fb:4b:d4:
         b0:c8:e6:e4:cd:75:9d:21:28:7c:9a:1c:3a:8a:1f:85:86:84:
         13:92:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:42 2026 by rpki-client