Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File:                     EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier:          G4olt2uOmfCsBqKh6Fya0w+oqFtNwXg/gjsmNma5Y4U=
Subject key identifier:   2B:1E:6D:3F:6E:FD:D5:9F:E5:E6:3D:F5:AE:85:BC:DB:6C:93:29:C8
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer:       /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial:       16898B58C28D09FCCAD4EB9765DF518163CC2662
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number:          03
Signing time:             Tue 12 May 2026 11:40:39 +0000
Manifest this update:     Tue 12 May 2026 11:35:39 +0000
Manifest next update:     Wed 13 May 2026 14:02:39 +0000
Files and hashes:         1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
                          2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: GvMtkAZnU9fX684Js3nQHm/ejx2/5zdpL73orPdElj8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
                          rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:89:8b:58:c2:8d:09:fc:ca:d4:eb:97:65:df:51:81:63:cc:26:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
        Validity
            Not Before: May 12 11:35:39 2026 GMT
            Not After : May 13 14:02:39 2026 GMT
        Subject: CN=2B1E6D3F6EFDD59FE5E63DF5AE85BCDB6C9329C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:75:5e:0c:bb:9b:9e:06:ed:9b:e2:33:9f:
                    aa:7b:30:8e:b1:cb:a6:b2:2a:48:7e:38:91:4e:ee:
                    e5:ab:5b:32:01:2d:7d:3b:74:e6:30:03:9d:01:eb:
                    7f:15:df:90:20:f8:4e:f2:cd:77:d9:a4:01:48:0a:
                    b4:8b:b4:42:9e:d0:b1:15:6d:f7:97:2f:af:7e:8d:
                    94:66:e5:c0:0a:42:11:90:fa:93:04:6e:db:b1:69:
                    5c:2e:71:5f:27:09:66:1b:ce:6a:ab:bd:59:c5:67:
                    30:a8:bc:12:57:e7:c1:80:09:fe:6b:39:90:56:2a:
                    ad:e8:fe:54:31:a1:17:89:f4:55:df:78:74:14:67:
                    84:ac:10:cf:94:03:af:93:fd:51:ac:43:00:94:98:
                    91:a1:0d:b2:9f:a3:41:7e:43:f2:e2:0b:1b:c6:32:
                    7c:58:0d:45:60:8f:d9:b6:0c:3e:b3:5b:78:54:9b:
                    4b:98:05:5c:98:62:08:ab:15:92:c2:04:f7:2b:7e:
                    b2:ff:c2:30:90:a6:d2:47:9c:fc:ac:19:d8:41:01:
                    59:70:65:3f:b5:2b:00:c5:1a:22:d0:bc:3a:09:d5:
                    04:12:f1:51:99:d0:93:19:a3:53:24:ed:99:38:3b:
                    16:ba:ec:7f:9b:ae:51:4f:6d:89:9f:b2:61:fa:21:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:6D:3F:6E:FD:D5:9F:E5:E6:3D:F5:AE:85:BC:DB:6C:93:29:C8
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:4e:cb:80:99:b6:a1:d7:ad:af:80:43:24:80:1a:94:92:
         8e:54:a6:b3:92:9c:05:f1:22:3b:a5:ce:96:45:b6:59:41:c1:
         0a:2d:28:77:75:dd:89:16:2b:96:68:44:2b:b5:8b:9e:97:11:
         49:3c:39:c8:c8:4e:a3:cf:06:f8:52:e1:4a:e5:72:e5:b8:4c:
         ef:f1:fa:7d:eb:27:10:c6:73:88:92:e0:7e:1b:75:cd:21:a4:
         fc:e4:2a:53:d6:49:36:c7:e7:2d:b0:6c:28:dd:46:6f:af:2c:
         d8:64:8a:b8:f5:44:a5:79:5c:b6:1a:27:4b:ef:6d:d5:44:1c:
         e4:3e:66:2e:54:30:85:6b:0e:f3:a5:b3:fd:23:0f:a7:78:a6:
         96:04:83:21:07:21:e4:61:0c:ab:36:fc:90:d6:cd:b8:0e:58:
         4d:ac:79:e5:2f:b7:9c:d1:8a:b2:cf:38:31:ca:f2:72:10:0a:
         2c:c2:3d:39:39:19:51:21:cd:76:88:23:69:a7:87:c1:c5:be:
         18:96:99:32:91:83:1e:01:dd:c2:0e:92:48:f5:56:8f:0e:41:
         90:e0:44:7f:87:ca:e9:7e:9d:66:01:02:40:23:c8:86:6b:3f:
         cc:e7:9f:39:64:ba:a3:4a:d1:f4:42:1b:7b:9f:d9:31:32:75:
         1a:0d:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:57 2026 by rpki-client