Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
File:                     6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft (raw, json)
Hash identifier:          Mh8qu5iRkBDGeSeC96uIClyS/inKtaTEIhRPUG7eCi4=
Subject key identifier:   2F:CD:74:1B:51:4A:09:D4:12:30:8F:86:0F:42:9D:EF:9A:EF:00:FB
Authority key identifier: 6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4
Certificate issuer:       /CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4
Certificate serial:       616BFE91E75072CF8B4442F9A29747FF0E5168C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
Manifest number:          BA
Signing time:             Fri 25 Sep 2026 23:49:42 +0000
Manifest this update:     Fri 25 Sep 2026 23:44:42 +0000
Manifest next update:     Sun 27 Sep 2026 01:27:42 +0000
Files and hashes:         1: 323430313a646165303a3a2f33322d3438203d3e203137343133.roa (hash: b68bWoGxHLV5+EX7YP+9x4UhUEcmWXOG9HkIeVaSI1M=)
                          2: 6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl (hash: y4BGA891CkUHeBz824oq/9Wi6kPpemL42xBVn6hSnwo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 01:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6b:fe:91:e7:50:72:cf:8b:44:42:f9:a2:97:47:ff:0e:51:68:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4
        Validity
            Not Before: Sep 25 23:44:42 2026 GMT
            Not After : Sep 27 01:27:42 2026 GMT
        Subject: CN=2FCD741B514A09D412308F860F429DEF9AEF00FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:7e:8b:00:af:ad:9c:60:f5:4c:6e:bd:33:
                    93:c6:51:3d:21:9e:25:af:07:e8:04:75:43:13:f4:
                    a5:75:b0:55:cc:b2:d9:22:be:ab:ff:0f:44:1c:c0:
                    8a:ca:60:24:1a:74:eb:9b:ca:c5:d8:e7:d7:11:41:
                    c2:16:9f:20:f1:c1:e8:32:20:6c:5b:17:53:d3:ac:
                    f3:1a:a3:4b:4f:09:0d:6f:e1:c3:67:81:84:29:7a:
                    03:e0:29:cd:e3:6e:32:f7:8a:13:7f:1d:58:e7:ae:
                    33:13:9f:c4:1a:c3:0d:46:ed:68:62:8c:7b:e4:90:
                    ab:21:50:fb:cc:e2:be:d8:01:11:cd:e2:db:fb:96:
                    e6:bc:82:a1:89:b6:89:0b:d5:f3:35:b4:df:e4:14:
                    39:92:0d:37:fe:64:26:07:79:21:bf:08:2b:56:ff:
                    ec:ea:0f:09:86:8b:d3:e7:cb:5a:f6:47:2c:b0:e6:
                    1f:97:32:72:07:cd:1b:c0:e7:18:1b:1b:8c:d9:ce:
                    c5:8a:b4:89:76:a0:95:db:71:c8:d4:20:0e:0b:8d:
                    85:44:f3:ea:44:49:57:7e:5e:1a:31:d7:bb:c5:62:
                    82:ff:d6:bd:f6:1e:dd:c2:e4:98:29:5a:f7:5f:15:
                    0e:a2:9c:b7:e0:55:2a:c5:30:e7:18:cd:7c:ce:d9:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CD:74:1B:51:4A:09:D4:12:30:8F:86:0F:42:9D:EF:9A:EF:00:FB
            X509v3 Authority Key Identifier:
                keyid:6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:78:56:20:e4:08:98:24:ed:3c:d9:ad:27:ec:13:32:de:
         a3:aa:8c:10:f2:ed:13:e3:de:79:d0:eb:94:a5:a0:97:21:d9:
         38:b1:06:45:01:b1:cf:6c:e8:81:6a:44:ec:fb:41:4a:f9:46:
         a0:1b:6c:96:5c:4e:88:d5:c0:67:b6:8e:16:d7:95:4b:fd:08:
         8a:95:ae:1f:fc:c0:0c:71:55:75:f7:78:03:3d:e4:98:52:60:
         06:7f:9b:9f:60:17:25:4d:cf:d2:eb:12:83:38:b2:41:6b:6d:
         5a:5d:a9:f3:39:11:d1:be:4d:52:ac:e2:8f:83:7c:03:3e:51:
         91:9c:58:e7:e5:78:42:cd:f6:3d:4e:40:73:c4:40:0c:28:c6:
         2a:df:0d:6f:d0:f6:e0:8e:63:b5:43:67:e3:13:b1:d8:05:26:
         70:c1:25:e5:9a:8d:9b:3c:10:68:6d:0b:a0:b1:1a:41:a2:43:
         59:af:55:05:d4:67:03:7d:c4:c5:44:f1:23:77:37:ae:d1:6f:
         0b:c4:da:37:d7:c2:f9:05:48:cd:26:bf:cd:d7:36:63:ce:a6:
         0c:63:dc:00:94:be:fe:88:92:45:34:cd:37:5b:a1:46:29:8b:
         a0:5e:4a:4a:29:56:da:6d:78:68:bd:7f:8d:db:b5:3a:6f:eb:
         18:16:66:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:13 2026 by rpki-client