Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
File:                     7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft (raw, json)
Hash identifier:          YkkqPC1//rjluw1YzDxjWYojZGf3oQQzbVBg/rxEruc=
Subject key identifier:   F1:D7:F2:C2:59:78:43:BB:2B:88:9D:26:5E:04:B5:0C:F3:AB:7E:FD
Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B
Certificate issuer:       /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
Certificate serial:       65FDBE267AF28FFF205461E4713C105BC8702D17
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
Manifest number:          B6
Signing time:             Wed 23 Sep 2026 13:02:53 +0000
Manifest this update:     Wed 23 Sep 2026 12:57:53 +0000
Manifest next update:     Thu 24 Sep 2026 16:45:53 +0000
Files and hashes:         1: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl (hash: njpxJXjevb0TM6URKQTbEY71f0tybKNi18yBqSR47iE=)
                          2: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (hash: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 16:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fd:be:26:7a:f2:8f:ff:20:54:61:e4:71:3c:10:5b:c8:70:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
        Validity
            Not Before: Sep 23 12:57:53 2026 GMT
            Not After : Sep 24 16:45:53 2026 GMT
        Subject: CN=F1D7F2C2597843BB2B889D265E04B50CF3AB7EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:d2:24:cf:de:1d:3f:5c:ce:49:b0:b7:19:
                    e0:e3:a4:16:09:e0:d6:e1:1a:ff:b1:ac:ef:ba:48:
                    7b:f3:dc:e0:e9:ff:11:6c:fc:dc:65:9d:4a:d6:8e:
                    72:1b:5d:34:3d:c7:8a:fd:5f:af:f4:32:7b:4b:55:
                    ab:66:97:46:5b:1c:4c:21:06:fa:b9:3e:8e:4a:60:
                    ab:3b:62:c1:87:71:c4:d4:13:bf:5c:a2:14:6f:c5:
                    a8:df:25:35:9f:aa:fb:e3:15:eb:44:35:b3:2c:37:
                    3d:79:16:4d:e5:7b:88:fd:91:c8:28:45:dd:83:a5:
                    9b:a0:c7:7d:06:a5:7d:98:e1:03:99:f8:84:5e:91:
                    c6:76:cf:ad:df:e9:57:0c:fb:25:64:09:39:12:94:
                    29:bc:b6:d3:5d:b4:a4:b3:f5:91:1f:bc:0f:23:66:
                    b6:ca:db:bd:69:76:d7:d0:ee:b8:64:11:e1:d9:38:
                    5e:d2:74:e0:ae:07:7e:51:bc:d1:9b:a8:78:5b:52:
                    32:40:75:f4:ed:c7:9e:88:b4:39:c1:d2:eb:96:9c:
                    b6:b9:ab:63:a6:24:e2:22:3a:45:a6:d6:4c:e8:72:
                    a7:51:03:cb:3a:88:8c:d7:4f:20:a1:97:65:97:96:
                    bd:19:b7:58:fc:7b:0c:15:ee:38:5d:2c:d6:af:d4:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:F2:C2:59:78:43:BB:2B:88:9D:26:5E:04:B5:0C:F3:AB:7E:FD
            X509v3 Authority Key Identifier:
                keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:46:35:50:d3:fe:08:cf:1f:cb:d1:65:c6:f6:1b:45:5f:51:
         19:a8:90:d7:5a:ae:6a:8b:47:08:0e:40:f7:4d:c8:f7:09:23:
         3a:2c:62:f1:16:51:74:10:8d:13:63:ec:d0:ed:3d:5d:13:c6:
         d4:d3:70:c3:82:5d:57:a0:d5:b5:e5:27:89:6b:f6:59:3b:78:
         d0:e9:dd:cf:4c:c9:5d:c1:15:da:4f:ea:82:6f:bd:78:7d:3b:
         7b:a8:eb:42:36:93:5e:32:03:17:53:10:01:b7:d9:13:80:96:
         72:bc:c3:91:02:18:23:5b:e7:51:4b:b2:20:a3:33:f9:b0:27:
         d5:5b:e7:90:9a:72:22:ac:cc:81:b7:c9:f6:0c:49:6b:ba:a5:
         0a:25:6d:f9:c4:e9:a3:e6:71:20:ca:93:9e:4f:67:1e:13:96:
         2a:05:44:45:3f:28:ac:a9:f7:10:cb:7b:18:5f:44:1e:95:08:
         1d:25:a5:12:42:25:e9:75:4f:18:c8:e8:fe:f9:da:df:dc:7d:
         75:86:83:61:de:3b:a3:0b:76:f9:ef:05:6d:da:76:90:e5:7d:
         7b:4f:7d:4c:17:f1:b3:43:e8:1f:4a:15:fb:a7:3f:e1:27:81:
         34:51:79:b8:b8:67:4f:7e:cc:bb:11:67:cd:44:9a:29:fb:22:
         2b:b7:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:09 2026 by rpki-client