Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
File:                     71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json)
Hash identifier:          IfH2Faxfj5/rRfoY9Lofc1T5cqGTxv6rlqj42Sjwt1c=
Subject key identifier:   D6:F0:14:86:C7:6C:7C:42:BA:8A:0C:11:05:E3:99:04:92:BF:55:BF
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Certificate issuer:       /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial:       743B49D4F0B65CB7A5B5DDCCECF310D8F0E1C951
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
Manifest number:          0122
Signing time:             Fri 24 Jul 2026 01:12:12 +0000
Manifest this update:     Fri 24 Jul 2026 01:07:12 +0000
Manifest next update:     Sat 25 Jul 2026 03:09:12 +0000
Files and hashes:         1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: Y6wD1opnWVk3ouUiMReNemyTSaAZb1eUHweyaPt+btU=)
                          2: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
                          rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:49:d4:f0:b6:5c:b7:a5:b5:dd:cc:ec:f3:10:d8:f0:e1:c9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
        Validity
            Not Before: Jul 24 01:07:12 2026 GMT
            Not After : Jul 25 03:09:12 2026 GMT
        Subject: CN=D6F01486C76C7C42BA8A0C1105E3990492BF55BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:89:82:9a:77:b9:92:7b:06:63:28:99:f3:
                    20:8f:24:13:8c:57:39:57:f1:eb:5d:dd:b9:41:8d:
                    1d:ca:66:fe:18:80:be:07:28:79:b6:d9:00:8c:80:
                    ab:c5:dd:6e:9e:cc:aa:7e:0f:84:b5:d6:ca:0c:a6:
                    1e:c6:8a:92:7e:67:4d:33:e1:2b:69:c4:45:79:4c:
                    ef:9e:52:38:93:66:fb:76:c5:0d:08:58:0f:19:e9:
                    7d:d4:83:89:ad:77:c1:62:8b:4e:93:a1:55:2c:e6:
                    7c:b0:0a:7e:c9:5e:d1:27:3f:b0:0e:8c:e0:73:49:
                    ad:45:15:8a:a2:36:82:02:7c:b9:9b:cb:82:2d:fb:
                    f3:5c:16:9d:37:d1:ef:3c:a5:5c:e0:fc:76:65:f1:
                    1e:4b:54:4a:53:fa:40:46:57:fb:90:2e:cb:fc:74:
                    ad:8a:3f:6b:f0:6a:4e:63:aa:56:19:c6:ba:b6:26:
                    77:66:20:75:f8:5a:61:22:5d:3e:d2:8e:3a:2a:1a:
                    72:bf:02:62:48:24:60:b1:c2:1a:94:46:3e:aa:d2:
                    ae:2e:cb:2c:a6:88:9f:f4:64:ee:f2:7b:55:ee:56:
                    81:9c:13:5a:c5:ce:be:37:54:b9:16:51:85:03:d5:
                    3f:4c:8d:95:0c:2b:8c:d7:a6:8c:03:98:9b:8f:ab:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:14:86:C7:6C:7C:42:BA:8A:0C:11:05:E3:99:04:92:BF:55:BF
            X509v3 Authority Key Identifier:
                keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:9f:30:29:56:3a:28:c8:b3:5f:72:7b:b5:69:d8:bc:af:
         1a:58:79:5f:f4:1e:68:b7:1b:92:9c:b2:ac:7a:43:8d:6a:07:
         62:b3:34:ec:7e:dc:d6:71:13:49:18:1f:c2:ca:b5:88:1b:1f:
         5a:94:fe:4f:95:3e:2b:38:e6:b1:4d:96:ec:d1:51:7a:6d:86:
         a0:0d:4c:1a:1c:41:4e:26:70:49:9b:8c:8f:66:9c:02:4d:85:
         53:cf:da:23:e1:e6:f8:38:35:19:b9:74:8e:c5:c9:d2:35:f0:
         9a:ab:af:61:ac:9b:55:88:af:c4:71:dc:f8:9c:a1:e5:f2:88:
         12:ee:35:29:ea:23:2d:a2:67:ac:68:50:19:23:3b:2a:72:6a:
         f9:f0:4f:1e:c0:14:c5:d7:5c:87:7b:ae:9e:5b:7f:8f:22:f6:
         44:50:da:8d:89:dd:b8:07:58:54:49:59:53:28:b8:de:2d:f0:
         e5:cb:7f:e8:41:cf:49:2d:dc:49:c5:e1:c8:56:c5:fd:0a:fd:
         b4:9b:ab:50:93:66:b6:46:6f:75:5f:8e:e7:c1:11:2b:b3:81:
         d0:17:b9:a9:d1:9b:c1:d1:a6:a4:03:bb:e9:82:52:00:7d:60:
         df:5e:b3:57:70:ce:90:4f:f9:3a:e0:e3:fb:eb:c9:ff:cc:ba:
         2e:6d:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:06 2026 by rpki-client