Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          FFW00vS41DBe9weOWKvoGH1KVp2brM8oJml7Upcey38=
Subject key identifier:   50:9E:EA:12:04:B6:FE:70:CD:D3:3A:36:1D:09:25:07:45:C8:D9:FE
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       2DB0C41643DAE7CE8463D8CE886842715B1EC746
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 04:00:00 +0000
Manifest this update:     Tue 12 May 2026 03:55:00 +0000
Manifest next update:     Wed 13 May 2026 07:58:00 +0000
Files and hashes:         1: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          2: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          3: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          4: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          5: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          6: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          7: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=)
                          8: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          9: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=)
                          10: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: q2mtx+6JmgaMILjoP5/pHTSL6Ap1UyHLvkIo/6HU0/o=)
                          11: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b0:c4:16:43:da:e7:ce:84:63:d8:ce:88:68:42:71:5b:1e:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: May 12 03:55:00 2026 GMT
            Not After : May 13 07:58:00 2026 GMT
        Subject: CN=509EEA1204B6FE70CDD33A361D09250745C8D9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:54:45:e0:cf:06:45:76:37:20:3c:75:1d:
                    a2:68:71:66:02:3f:7a:ee:1c:0e:b8:1b:bd:d7:e9:
                    6a:94:64:c3:e7:1d:23:89:50:ba:13:64:6c:98:3c:
                    74:6f:60:68:61:9b:39:91:7c:56:29:6a:3e:0a:67:
                    bf:11:91:07:56:e8:58:6f:4f:6a:5d:3f:81:dd:58:
                    95:89:c9:e2:9b:54:80:0f:f9:30:54:b7:c1:63:2d:
                    0e:30:da:91:a0:72:57:77:b7:1d:03:8c:1f:3d:cd:
                    12:79:72:5d:ce:63:a9:ac:96:08:84:e4:c3:02:8e:
                    3a:6f:53:8e:eb:59:d3:c8:88:54:16:bd:22:06:f5:
                    4d:6a:94:32:be:d6:af:c0:45:02:a1:f9:24:81:22:
                    3f:83:1d:5b:86:4b:f6:e7:6e:39:86:bd:c0:75:02:
                    4c:27:fa:4b:13:98:ca:2d:2f:27:6b:ec:22:e0:fb:
                    44:2b:36:7f:ce:93:53:1f:91:9e:51:2f:36:9b:68:
                    72:4a:07:02:1f:5c:6a:3a:9a:56:9c:d9:42:87:fa:
                    c5:b5:6e:b0:d8:5e:42:5a:b5:2a:3f:c2:65:3a:f6:
                    1d:89:52:d8:96:5b:1e:6b:da:1e:3d:04:f8:22:ff:
                    21:65:68:18:2f:68:c6:1b:99:5d:45:1a:69:36:7e:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:EA:12:04:B6:FE:70:CD:D3:3A:36:1D:09:25:07:45:C8:D9:FE
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ef:89:a9:87:93:13:d2:45:39:1e:41:90:5a:75:8c:15:a3:
         d8:07:2d:01:86:92:45:aa:eb:94:ad:23:f5:0f:e4:47:a9:5d:
         61:4f:b1:04:36:cc:0e:f8:88:18:d4:29:78:8f:e0:d0:0d:0f:
         22:ad:c3:ea:8b:93:3e:b4:f4:e2:84:2f:9b:77:a1:d1:1b:c3:
         6c:7d:6b:0a:68:9a:3a:37:f2:5a:2c:f6:a6:b2:b3:a8:ab:d4:
         9e:67:1c:e7:e2:f3:e7:40:f1:99:e1:fe:6c:d5:a6:7e:56:43:
         83:a6:5a:01:19:69:43:9d:d5:26:15:23:2b:4a:ce:24:0a:4a:
         6d:c8:a5:29:ce:72:1f:26:e4:a8:53:6e:e5:ca:02:f7:09:b3:
         e8:a5:03:e7:2c:d9:26:5e:f0:0c:13:a4:92:74:68:8c:30:4a:
         b5:18:52:07:8d:e6:9c:8b:48:99:4c:34:4f:ec:54:97:47:df:
         2f:b7:07:24:f3:f9:ff:b2:51:94:3c:46:31:c6:3c:c6:cd:c3:
         e9:b4:68:8e:60:9a:5a:a3:da:c9:5b:19:da:d0:2d:99:9d:f6:
         f8:d6:b0:33:e5:79:bc:fc:87:2b:fb:73:35:3e:02:63:09:68:
         4c:29:d0:ab:4e:95:5d:85:10:be:d8:db:bb:f2:e5:2f:fd:4c:
         99:10:04:dc
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIULbDEFkPa586EY9jOiGhCcVsex0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx
NjZDM0U3ODAeFw0yNjA1MTIwMzU1MDBaFw0yNjA1MTMwNzU4MDBaMDMxMTAvBgNV
BAMTKDUwOUVFQTEyMDRCNkZFNzBDREQzM0EzNjFEMDkyNTA3NDVDOEQ5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rFRF4M8GRXY3IDx1HaJocWYC
P3ruHA64G73X6WqUZMPnHSOJULoTZGyYPHRvYGhhmzmRfFYpaj4KZ78RkQdW6Fhv
T2pdP4HdWJWJyeKbVIAP+TBUt8FjLQ4w2pGgcld3tx0DjB89zRJ5cl3OY6mslgiE
5MMCjjpvU47rWdPIiFQWvSIG9U1qlDK+1q/ARQKh+SSBIj+DHVuGS/bnbjmGvcB1
Akwn+ksTmMotLydr7CLg+0QrNn/Ok1MfkZ5RLzabaHJKBwIfXGo6mlac2UKH+sW1
brDYXkJatSo/wmU69h2JUtiWWx5r2h49BPgi/yFlaBgvaMYbmV1FGmk2fh8RAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUUJ7qEgS2/nDN0zo2HQklB0XI2f4wHwYDVR0j
BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO
RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG
QTBCREJDMTY2QzNFNzguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8wLzBGNkIzNDI3
Q0Q0MDNERTcwRDk3Q0REQ0FGQTBCREJDMTY2QzNFNzgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC374mp
h5MT0kU5HkGQWnWMFaPYBy0BhpJFquuUrSP1D+RHqV1hT7EENswO+IgY1Cl4j+DQ
DQ8ircPqi5M+tPTihC+bd6HRG8NsfWsKaJo6N/JaLPamsrOoq9SeZxzn4vPnQPGZ
4f5s1aZ+VkODploBGWlDndUmFSMrSs4kCkptyKUpznIfJuSoU27lygL3CbPopQPn
LNkmXvAME6SSdGiMMEq1GFIHjeaci0iZTDRP7FSXR98vtwck8/n/slGUPEYxxjzG
zcPptGiOYJpao9rJWxna0C2Znfb41rAz5Xm8/Icr+3M1PgJjCWhMKdCrTpVdhRC+
2Nu78uUv/UyZEATc
-----END CERTIFICATE-----
Generated at Tue May 12 22:45:37 2026 by rpki-client