Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          7T83ds6eGQEkdNXJuopqVIs6j4+JKEsWNJODcYlJU98=
Subject key identifier:   96:86:96:BC:92:28:63:4D:A4:F0:DD:F6:D6:89:37:DE:B6:4B:89:B2
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       43E38BA357C015B0C9B32D814A64CE4A52F3AD2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          D2
Signing time:             Wed 23 Sep 2026 17:16:50 +0000
Manifest this update:     Wed 23 Sep 2026 17:11:50 +0000
Manifest next update:     Thu 24 Sep 2026 20:56:50 +0000
Files and hashes:         1: 323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa (hash: S+iU7Frc3x1pLknr/q2r++M9QmfBtQENR4FkrWH2pOA=)
                          2: 323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa (hash: sWy58u5i0NoASBHPtiUwZGiJ4LEba5OWhQM8D2/JecE=)
                          3: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: 2JSdslYDQWPUgJgCPd1l6RAjMt8GBoXt32lqD3pE9vs=)
                          4: 323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa (hash: G5ZHFEs/k5egpnslebEEFOvxulbKp3nlVsyJc87M8lQ=)
                          5: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          6: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          7: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          8: 323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa (hash: xfNSKb3eMl5qrx7slTef/RABgMHr3zPmfnyDAG9hy/E=)
                          9: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          10: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          11: 323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa (hash: /fSzJCSRkXzZoHEWDs9j2FnyyjuMApCOVFREiP2QtKk=)
                          12: 323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa (hash: Za7J1hKjGlPncRTIVGAw4R5lobM168tANOUejMUtTGA=)
                          13: 323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa (hash: /ZMYMcRfS4rihkl6K+danfG6J1+aix3g9hU8GRVSTWM=)
                          14: 323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa (hash: SVU/7dRIRRTqOjWn38YZEpKVNXmqhmDjcJRKxeeNSeU=)
                          15: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          16: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          17: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: yOQ81rEugef2W5X34ssZgoHH+7NuHAx/mifWNMD85ZE=)
                          18: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          19: 323430323a343365303a623639323a3a2f34382d3634203d3e20313532363132.roa (hash: wTZJes2+7/Z6pb2e5vAieJNbMKT2YjpUIm68KntoJTM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e3:8b:a3:57:c0:15:b0:c9:b3:2d:81:4a:64:ce:4a:52:f3:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Sep 23 17:11:50 2026 GMT
            Not After : Sep 24 20:56:50 2026 GMT
        Subject: CN=968696BC9228634DA4F0DDF6D68937DEB64B89B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:83:9e:d3:47:7c:2c:a6:82:8e:6b:c1:96:
                    b9:58:b5:d7:3c:7e:01:a5:4d:16:06:a8:6f:77:62:
                    05:26:42:1b:55:78:a8:da:10:f1:db:d0:ff:25:41:
                    f3:d0:7c:62:43:4e:95:87:90:da:c6:7b:6b:81:c5:
                    84:b7:99:5b:b0:27:07:9a:3e:2b:94:af:70:f8:20:
                    cd:c8:6c:89:ca:c3:76:20:d0:f5:ca:85:2a:4e:56:
                    7b:fa:c8:7a:d5:b5:3a:30:89:64:0d:c2:a1:30:29:
                    ed:9a:18:5d:d9:b1:71:dd:7d:c5:93:cc:bd:93:ae:
                    fb:9a:09:c4:8f:ba:b6:0a:13:9c:e7:80:62:48:d7:
                    cb:ad:ee:8e:ac:f5:e4:9b:e6:a3:41:bb:e1:c8:76:
                    b1:39:ff:39:b2:4b:94:20:24:46:2c:e7:89:1f:56:
                    a8:e2:84:fc:16:b7:c2:02:77:9c:69:6e:02:19:05:
                    04:a8:17:d9:d0:1d:8c:07:6d:94:e5:f6:9d:35:fb:
                    41:85:6d:26:12:d7:a0:3a:be:3d:ff:c8:18:44:87:
                    e7:12:86:8e:b8:94:75:43:d2:c6:c3:ac:b1:53:2c:
                    13:f5:24:00:51:18:62:c7:4e:34:42:00:e8:4b:81:
                    39:54:a9:98:46:6d:78:3e:55:06:a5:43:f3:c0:61:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:86:96:BC:92:28:63:4D:A4:F0:DD:F6:D6:89:37:DE:B6:4B:89:B2
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:29:c2:53:c2:e9:29:ff:3b:88:85:b4:f3:4f:eb:35:a5:8e:
         a8:18:2a:1b:52:82:66:ce:fb:64:1d:c3:6a:32:10:c7:3d:f4:
         56:4d:06:d6:0d:17:bf:7d:8f:8e:c9:e1:cb:d0:7a:1b:69:d1:
         e8:95:37:00:ca:d2:32:7d:c3:b9:6a:cb:95:58:82:30:c9:a6:
         66:c2:5d:b7:a4:36:6a:4c:b9:6d:81:73:c3:ba:d3:0b:6f:4f:
         cd:a6:06:cf:8d:d0:73:b2:7d:2a:da:89:1c:03:06:ab:b7:17:
         4e:fb:50:42:55:57:04:c0:1d:9c:26:9c:14:0a:f7:58:b2:f2:
         48:57:36:c4:cb:ea:ad:60:b4:71:f2:5b:6e:60:25:7d:a1:55:
         e0:39:ad:03:9b:87:68:73:e3:fa:87:f6:f9:21:8e:51:bb:17:
         d4:c0:59:23:86:53:e7:1a:51:47:64:ca:d4:4d:1a:63:1d:ac:
         1f:ea:2d:ed:a9:70:a8:36:bc:61:7e:4d:7a:e9:fd:c8:40:96:
         d1:02:81:05:e5:bf:0a:e3:8b:a3:75:29:d4:9f:85:d0:14:cb:
         e3:dc:42:a9:19:75:cb:42:95:16:dc:8e:67:fa:ff:50:91:3a:
         a0:70:98:27:8c:27:2e:32:fe:84:89:63:0b:d1:15:1a:47:e2:
         06:00:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:27:18 2026 by rpki-client