Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
File:                     CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json)
Hash identifier:          t2ccIgZaqKgxU83gbPvw3I7qi22tvacc8WCJ6uAPnzI=
Subject key identifier:   AE:EB:35:BB:B6:5C:AF:7B:9F:24:17:70:5E:DD:A4:5D:65:F2:FD:FD
Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F
Certificate issuer:       /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
Certificate serial:       0CB68838AB12DA360FAEBA6C8A85E4CD91ACB660
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 19:46:37 +0000
Manifest this update:     Thu 23 Jul 2026 19:41:37 +0000
Manifest next update:     Fri 24 Jul 2026 22:45:37 +0000
Files and hashes:         1: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=)
                          2: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: LA1Jv4k0Bw3Vp1xgLZgy8lMQP/d68caoB2wowRttLi4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl
                          rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b6:88:38:ab:12:da:36:0f:ae:ba:6c:8a:85:e4:cd:91:ac:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
        Validity
            Not Before: Jul 23 19:41:37 2026 GMT
            Not After : Jul 24 22:45:37 2026 GMT
        Subject: CN=AEEB35BBB65CAF7B9F2417705EDDA45D65F2FDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:fe:be:bb:bf:c7:c3:f3:c2:10:06:64:68:
                    72:cc:e9:47:2c:ef:03:88:3a:3e:ed:eb:3a:4d:3b:
                    e5:ab:e9:8d:3a:89:c2:cb:89:15:eb:66:47:4a:78:
                    c4:34:1f:5f:57:e9:d6:26:c7:4a:9e:93:36:80:9f:
                    57:67:69:bb:48:3f:5b:37:5f:15:8c:70:aa:bd:68:
                    5a:63:88:87:da:b1:97:ff:87:20:83:7f:45:2a:1c:
                    c0:5a:3d:2d:93:22:14:52:f0:19:d2:57:4a:36:27:
                    08:02:48:54:27:83:29:42:5a:b5:7e:ff:1a:c6:69:
                    82:03:f5:25:ab:a5:2d:48:47:20:bd:68:60:bd:cd:
                    e1:ec:7e:b3:8c:38:4b:c7:f9:90:e3:73:52:37:1f:
                    38:19:cf:77:64:55:d5:99:56:7e:e4:b3:a5:b0:fb:
                    7a:b3:20:a3:ee:55:08:f7:4f:2a:4e:7a:7d:0d:0f:
                    ef:98:74:59:b2:df:76:e7:a5:34:17:78:8d:3e:ad:
                    dc:00:60:bd:d7:f4:e1:be:88:85:e5:2f:df:18:6b:
                    42:fa:9f:42:6f:37:b7:50:a5:2b:55:e2:88:47:b3:
                    c3:53:e3:8e:67:70:f0:48:1c:3e:81:33:68:6b:cd:
                    81:bd:9e:d3:7b:e5:10:2a:1d:c6:67:aa:3d:47:ff:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EB:35:BB:B6:5C:AF:7B:9F:24:17:70:5E:DD:A4:5D:65:F2:FD:FD
            X509v3 Authority Key Identifier:
                keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:14:de:8a:73:99:b1:9e:43:f9:f4:2a:94:80:ec:99:73:
         5f:ee:36:5d:51:d0:20:dd:62:36:8e:77:a9:39:a7:64:20:80:
         9a:e3:53:0d:f4:6f:0f:c7:9b:54:c0:37:dd:1c:eb:87:eb:36:
         e4:89:5e:99:07:f4:ee:7d:43:78:dc:3d:29:84:ee:34:53:0c:
         ad:ca:43:b5:e4:b9:31:ed:30:b3:03:ee:cf:39:4a:1b:ba:9f:
         26:27:e2:de:42:f3:5d:d2:5e:fa:8c:dd:7c:dd:31:1f:fd:62:
         1b:14:4c:f6:d8:b2:12:34:e1:55:db:ff:2c:61:36:0e:17:f6:
         78:ca:a5:7a:20:bb:f8:46:7a:98:90:f1:b0:10:52:4f:21:36:
         ab:f0:6b:fe:e2:58:98:68:4e:2d:22:fa:52:41:c3:42:9c:1f:
         6c:30:f5:14:e2:53:3b:30:0c:c8:3a:3d:2b:37:b3:67:cf:99:
         1e:cc:c6:32:15:36:f4:25:be:57:8e:58:5f:1c:b5:06:14:46:
         81:3c:f8:22:f0:ef:4f:4a:c3:af:99:56:66:01:d0:ff:6d:98:
         4c:c5:f5:2c:e5:31:02:ef:94:4e:43:08:53:2f:40:7e:37:78:
         65:3a:01:74:a6:ce:4c:2d:5d:d9:b6:72:c1:18:ea:35:e6:f7:
         be:b3:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:49 2026 by rpki-client