Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
File:                     061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json)
Hash identifier:          RNgOaaFRKbPv6OMKs7sMkw0jdUJXR0AJKOG9fHnsPqA=
Subject key identifier:   5B:C1:A8:F3:1A:C8:60:F0:1E:EC:F8:AF:C6:5A:A1:F6:80:EB:C7:E6
Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
Certificate issuer:       /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Certificate serial:       5C121EBF68C1F8E2045F9EC3164BD7AA2416FE6D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
Manifest number:          FD
Signing time:             Sat 14 Nov 2026 20:46:23 +0000
Manifest this update:     Sat 14 Nov 2026 20:41:23 +0000
Manifest next update:     Sun 15 Nov 2026 23:59:23 +0000
Files and hashes:         1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=)
                          2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: vL6p7xj4fn43suDlh8t57UNIHMRLRQIN2brduezIfw4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 20:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:12:1e:bf:68:c1:f8:e2:04:5f:9e:c3:16:4b:d7:aa:24:16:fe:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
        Validity
            Not Before: Nov 14 20:41:23 2026 GMT
            Not After : Nov 15 23:59:23 2026 GMT
        Subject: CN=5BC1A8F31AC860F01EECF8AFC65AA1F680EBC7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:4f:2e:72:d3:5d:de:48:1e:f6:73:f3:d3:
                    93:ed:ad:91:18:ca:62:16:25:2f:70:40:b6:33:91:
                    5b:c3:2d:75:46:e9:c5:b0:e0:6e:ba:89:1f:8c:ee:
                    28:f4:ca:85:7e:de:ba:1f:65:b4:04:81:73:38:fb:
                    8b:69:58:6e:2a:7d:cd:01:b2:df:d3:4d:3e:b9:88:
                    fa:9e:cd:8b:b8:6e:ba:0c:4b:c7:d8:27:0e:2b:8e:
                    8e:ee:dd:0e:df:ed:54:4c:a7:41:35:33:c8:58:6b:
                    85:54:38:aa:cf:06:e6:ea:52:ad:56:25:09:9e:e3:
                    0b:78:7c:0d:9d:37:dc:a3:81:de:27:da:d8:1b:21:
                    97:04:f9:43:b5:13:18:79:2c:12:44:20:70:7b:55:
                    0c:70:f4:25:10:71:50:ec:54:77:b6:a3:79:6d:a3:
                    ab:93:80:31:45:e7:0d:5d:01:f6:a8:fe:f3:ad:40:
                    7e:5c:d6:73:3d:4d:fe:ad:b8:9a:83:62:6d:8e:95:
                    1a:b9:8f:36:6e:5f:ab:58:cd:ff:34:65:09:38:68:
                    b6:21:d9:9e:3c:c1:e0:7f:ff:94:48:db:2c:ad:26:
                    c4:65:9f:6e:e9:09:c6:1c:58:e7:d3:79:c5:08:6b:
                    df:d0:fd:68:9f:6e:de:0b:03:5e:d0:74:ad:80:04:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:A8:F3:1A:C8:60:F0:1E:EC:F8:AF:C6:5A:A1:F6:80:EB:C7:E6
            X509v3 Authority Key Identifier:
                keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:a6:79:81:78:de:be:77:8b:24:0f:65:ca:91:15:ac:50:
         2a:60:f6:cc:db:dd:87:f6:d1:8e:6e:a6:fc:39:ad:98:4f:cc:
         4e:cb:a2:ef:92:14:f2:25:58:ea:7b:53:35:a9:36:b5:78:7e:
         2d:df:fd:37:1b:75:38:e7:8d:55:4e:63:70:17:10:54:a7:4c:
         39:65:13:33:b7:f5:eb:95:08:08:3e:01:4a:c2:8d:5d:f5:d3:
         14:33:47:15:35:52:15:82:59:bd:ef:e8:65:30:5e:86:33:ac:
         0a:10:7e:a2:ec:80:d1:c1:da:b3:17:1c:f6:31:00:be:f8:1c:
         bf:4f:0a:1c:cb:d2:69:18:06:12:34:a8:46:4f:67:ae:d3:86:
         97:d8:10:86:1d:48:41:af:54:aa:7f:c4:4f:cd:1f:eb:87:f6:
         51:c4:a8:d5:d9:ab:8b:06:9c:60:47:13:b2:e8:32:c7:a2:4f:
         99:8d:52:c4:72:b0:95:22:4a:4a:89:4f:c5:56:57:d7:d8:70:
         4c:a5:44:ef:fa:6a:0d:1a:a4:f9:91:bd:40:f2:fe:74:8e:17:
         4e:88:0e:e2:e9:f1:9e:c3:29:c1:b3:e9:fd:c4:bd:1c:a8:ab:
         9b:cf:9b:56:6a:4d:33:02:52:5e:a0:38:bc:19:6b:00:82:1a:
         fa:4b:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:52:13 2026 by rpki-client