Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          OVq9V3ctnwVZndz4yXByRjIhsWG3cFC4nLrfHHHktEE=
Subject key identifier:   D0:F8:2B:66:64:AC:C5:4D:E7:55:E0:B1:5C:EC:7B:2C:4F:F4:28:62
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       52DA96FFB35C22CAC95D59CB12E568781AE8B3F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          011A
Signing time:             Sat 14 Nov 2026 09:37:00 +0000
Manifest this update:     Sat 14 Nov 2026 09:32:00 +0000
Manifest next update:     Sun 15 Nov 2026 11:41:00 +0000
Files and hashes:         1: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          2: 323430323a343365303a6463303a3a2f34382d3438203d3e203138303430.roa (hash: r5iZ2BkGq0KNcDV4Zu/Nu2wpilNttsDrZdWEdAiF7UA=)
                          3: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          4: 323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa (hash: Za7J1hKjGlPncRTIVGAw4R5lobM168tANOUejMUtTGA=)
                          5: 323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa (hash: S+iU7Frc3x1pLknr/q2r++M9QmfBtQENR4FkrWH2pOA=)
                          6: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          7: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          8: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          9: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: sGWhb2dg91RbNNAGaXbFRWDEjGvr8VxnU+pPnWvgllM=)
                          10: 323430323a343365303a623639323a3a2f34382d3634203d3e20313532363132.roa (hash: wTZJes2+7/Z6pb2e5vAieJNbMKT2YjpUIm68KntoJTM=)
                          11: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          12: 323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa (hash: sWy58u5i0NoASBHPtiUwZGiJ4LEba5OWhQM8D2/JecE=)
                          13: 323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa (hash: G5ZHFEs/k5egpnslebEEFOvxulbKp3nlVsyJc87M8lQ=)
                          14: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          15: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          16: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: yOQ81rEugef2W5X34ssZgoHH+7NuHAx/mifWNMD85ZE=)
                          17: 323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa (hash: SVU/7dRIRRTqOjWn38YZEpKVNXmqhmDjcJRKxeeNSeU=)
                          18: 323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa (hash: /fSzJCSRkXzZoHEWDs9j2FnyyjuMApCOVFREiP2QtKk=)
                          19: 323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa (hash: xfNSKb3eMl5qrx7slTef/RABgMHr3zPmfnyDAG9hy/E=)
                          20: 323430323a343365303a6463313a3a2f34382d3438203d3e203138303430.roa (hash: 1ynMD9wwolFM/r1eysYUiMZsjCeofw/IUFu0vOHJA8M=)
                          21: 323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa (hash: /ZMYMcRfS4rihkl6K+danfG6J1+aix3g9hU8GRVSTWM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 11:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:da:96:ff:b3:5c:22:ca:c9:5d:59:cb:12:e5:68:78:1a:e8:b3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Nov 14 09:32:00 2026 GMT
            Not After : Nov 15 11:41:00 2026 GMT
        Subject: CN=D0F82B6664ACC54DE755E0B15CEC7B2C4FF42862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:b1:89:d3:2f:40:6d:47:9e:0c:7e:88:37:
                    07:6e:65:28:d8:fa:c5:b5:2d:3f:cb:92:5f:0c:63:
                    b1:de:be:f5:df:78:05:e6:06:f1:9c:38:04:84:8d:
                    58:2b:10:fd:bf:e7:35:45:2b:91:44:b4:67:fb:6d:
                    5f:e6:4e:c8:67:b4:60:a9:f6:2a:ce:31:36:cd:a9:
                    1b:b0:d5:50:fc:e4:24:30:a1:db:f6:b7:04:24:d8:
                    42:c7:96:81:67:01:dc:46:b4:c7:7d:02:b6:63:e2:
                    a7:0d:e7:4e:ee:de:bb:05:e5:0e:d4:df:99:13:a4:
                    ff:d6:2e:5a:38:71:b0:22:31:8b:a4:fb:8a:f6:c7:
                    18:c9:00:e4:93:72:95:e1:f5:d5:e4:f3:b0:b0:19:
                    09:8e:d3:38:13:3a:66:fe:82:3d:7a:89:49:01:20:
                    f3:31:4d:fd:eb:45:83:db:10:ac:17:3e:eb:d0:08:
                    ec:cf:e1:68:62:21:4c:66:8f:a2:e1:dd:23:66:5e:
                    9a:e5:ec:f6:c7:1b:27:10:a8:86:8b:3d:d4:97:59:
                    6b:08:49:c5:e2:e8:67:f5:fd:9f:cb:65:cb:9e:7c:
                    60:73:f5:b9:e4:16:ca:d7:36:9c:66:7b:d5:a3:60:
                    94:ff:ff:c3:12:db:d8:b3:8d:2f:cb:05:d3:ec:f1:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:2B:66:64:AC:C5:4D:E7:55:E0:B1:5C:EC:7B:2C:4F:F4:28:62
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:d8:41:e6:e3:33:bd:ee:e6:9d:78:ac:3d:b8:91:b6:c8:
         c9:03:8d:18:8b:a5:46:c5:f1:d4:32:9f:ed:dd:28:6d:ef:12:
         3c:ec:66:63:22:95:e6:68:5b:a6:cf:8b:15:d4:da:4a:ff:05:
         4d:a7:ef:3d:a7:30:7e:9e:05:00:b3:57:d0:1d:b4:15:b7:dc:
         0e:bb:bb:1e:4d:0d:e8:d2:f8:23:25:df:44:07:84:48:d0:66:
         44:98:19:82:8f:7b:3a:e1:3c:90:85:ec:b0:e2:be:8a:af:c1:
         73:bf:d1:5d:0a:3e:db:df:82:24:ff:ac:9a:0c:13:f5:fb:13:
         ba:35:51:9b:d3:be:ae:d8:7a:b1:42:f1:cc:26:d7:f8:08:ac:
         de:ed:b7:32:ac:b9:53:e0:3d:0f:1b:24:0d:8c:3c:f4:d7:f2:
         d2:87:78:5c:d7:93:00:41:e0:ca:98:4d:5b:af:8e:fc:9d:72:
         7e:aa:06:0a:5c:c4:5c:80:67:43:9a:09:c2:29:1f:6a:48:13:
         73:86:dd:d4:28:64:a2:a3:e2:20:00:48:94:c8:ef:57:1a:a8:
         21:6e:49:9d:51:1c:ed:9c:e1:cd:b3:80:98:2f:49:c2:5f:db:
         f5:7d:ae:31:8b:57:bd:50:00:b7:ba:79:64:13:1e:fc:b1:32:
         1f:ed:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:42:47 2026 by rpki-client