Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
File:                     AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft (raw, json)
Hash identifier:          LXvX8/jYjqpqULUHqSntry4puAd9277MlbutPykowl8=
Subject key identifier:   35:1D:78:16:29:74:38:E4:0B:92:EF:78:AF:E2:DD:E2:9F:2C:A1:B0
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Certificate issuer:       /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial:       7B88427CEFB631A834E0FD23BE7D8B83B5479845
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 04:03:57 +0000
Manifest this update:     Sat 13 Jun 2026 03:58:57 +0000
Manifest next update:     Sun 14 Jun 2026 07:54:57 +0000
Files and hashes:         1: 3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (hash: 1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=)
                          2: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl (hash: SIcd+ZGPHo+O11C3+hhcq7xhmC2EoD1ztAwVLe7tiJw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
                          rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:88:42:7c:ef:b6:31:a8:34:e0:fd:23:be:7d:8b:83:b5:47:98:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
        Validity
            Not Before: Jun 13 03:58:57 2026 GMT
            Not After : Jun 14 07:54:57 2026 GMT
        Subject: CN=351D7816297438E40B92EF78AFE2DDE29F2CA1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:ae:07:29:93:55:ee:37:df:55:88:d7:17:
                    21:04:df:3e:29:ba:68:b1:a5:78:b3:f2:f7:34:1d:
                    53:c8:6f:be:a3:56:2c:f7:4e:8f:db:90:ca:05:c7:
                    8f:e3:f7:6c:32:ec:04:9b:2e:00:7e:31:3e:2b:40:
                    0c:8c:cf:64:bc:06:75:df:fc:4a:1b:51:48:bd:3c:
                    51:ba:7c:56:3d:4c:82:8a:da:ac:4a:b5:83:44:78:
                    08:b9:77:b5:75:09:0e:82:b5:e5:f3:73:5b:0f:42:
                    5e:e8:ea:57:a2:81:e2:8d:16:67:6d:d9:c9:47:f1:
                    34:e4:b3:84:d5:1a:a1:51:2b:94:55:4f:a2:c1:87:
                    7e:91:32:af:18:87:cc:59:8f:9e:9c:6c:7f:8c:cc:
                    52:23:f2:bc:aa:a4:4b:65:2d:7f:98:08:21:c1:9c:
                    cf:7c:6a:4b:1a:87:47:7c:82:d2:3a:33:a0:d5:00:
                    a1:88:78:98:32:cf:7b:b7:25:08:f7:9f:72:66:e5:
                    86:35:15:19:e9:14:75:05:1b:82:2e:89:bc:f2:d6:
                    9b:18:b5:f4:02:58:ad:5c:e8:ac:40:d4:dd:b8:7f:
                    ec:68:83:d1:f0:6b:c8:65:f4:ac:e3:e4:6f:e5:f6:
                    c0:95:45:9e:18:f0:b6:9a:28:f2:31:ef:b7:eb:81:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1D:78:16:29:74:38:E4:0B:92:EF:78:AF:E2:DD:E2:9F:2C:A1:B0
            X509v3 Authority Key Identifier:
                keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:33:56:c0:29:34:45:06:dd:e6:a7:5b:8a:67:c2:27:b5:fd:
         63:0e:44:34:cf:8b:43:3a:cf:96:36:9a:69:d7:20:f4:6a:62:
         dc:a4:f7:ba:24:e9:ee:26:a5:fe:4b:a8:b7:19:bb:1d:64:c7:
         58:a4:ef:74:24:95:3c:9e:f1:21:76:d9:40:6f:a5:f0:48:11:
         03:f4:61:f2:78:be:61:ce:55:74:c4:9f:3f:19:fb:f1:f6:6c:
         ff:22:b5:49:36:5a:eb:4f:6a:28:5f:2b:6b:e3:4b:87:3c:36:
         3c:a8:68:7d:32:6b:35:7a:c8:54:8a:6c:f2:e7:c5:c2:cd:3f:
         4e:ff:34:77:78:32:bf:ff:d4:d6:d5:f5:37:c5:2c:a9:64:f4:
         ae:ea:c6:4f:1c:dc:e4:97:33:47:f5:eb:f1:22:e3:f8:86:81:
         8c:b0:ed:ee:3d:96:85:b2:58:17:8e:ad:ff:de:4b:92:04:3f:
         b3:98:60:dd:76:94:73:da:9a:04:d6:ae:7c:dc:be:fa:f9:69:
         f3:de:17:8b:fd:53:c6:0d:d6:e7:26:27:99:39:73:ce:b1:f8:
         c4:e9:01:c4:64:75:6b:0a:41:04:11:d6:09:a0:86:00:19:5d:
         f6:d5:4f:6e:8e:4f:79:e1:e1:db:d2:0d:0a:f7:2b:5a:02:47:
         10:d3:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:12 2026 by rpki-client