Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File:                     3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier:          ANTfMuYaKthhYriccSJCiVwR6AV1IvEBYZ3mxPT7GsE=
Subject key identifier:   FE:B5:01:AB:99:A8:14:83:20:B0:02:4F:8C:91:D1:F2:EC:A4:71:63
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer:       /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial:       6AA2718D4ACD65E8C9F94B10C451159844F08650
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 22:31:51 +0000
Manifest this update:     Thu 23 Jul 2026 22:26:51 +0000
Manifest next update:     Sat 25 Jul 2026 01:43:51 +0000
Files and hashes:         1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: H8q/xspmH5f5agWvM6x7+rhopbIKJc0Koahn71n3hx0=)
                          2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
                          rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:71:8d:4a:cd:65:e8:c9:f9:4b:10:c4:51:15:98:44:f0:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
        Validity
            Not Before: Jul 23 22:26:51 2026 GMT
            Not After : Jul 25 01:43:51 2026 GMT
        Subject: CN=FEB501AB99A8148320B0024F8C91D1F2ECA47163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:e5:5a:a8:1f:ad:22:b1:2b:22:a0:a7:0a:
                    9e:a0:ff:2e:19:11:a9:87:c8:16:ee:97:19:fb:9d:
                    31:9b:91:15:50:18:5c:85:88:09:5a:ed:c9:10:52:
                    ec:0f:11:24:78:c0:93:51:9d:56:56:18:f7:ba:f8:
                    30:3c:18:73:94:3a:4b:f5:01:26:7e:a4:9d:93:c2:
                    44:a1:6a:1f:13:d5:a0:7c:d4:3e:19:ee:7f:f2:a9:
                    36:8a:6f:3c:cb:8c:98:d0:a1:f1:2a:73:ae:e4:7a:
                    97:29:16:48:f8:90:d9:ac:6e:ac:74:12:5c:b8:93:
                    f9:77:49:64:e7:e0:aa:7c:fb:59:49:02:14:c4:7a:
                    06:2d:6a:bd:dc:64:19:39:c4:5a:f8:0d:9b:84:76:
                    e8:e9:79:ba:cb:41:81:c2:a4:9b:94:be:f4:6c:bf:
                    a4:fe:0b:a1:dc:3b:b7:22:00:f7:c0:48:4d:69:05:
                    61:ce:77:8e:66:02:c1:9d:83:3e:a9:51:56:52:a0:
                    b6:8a:2b:b3:d9:2d:f2:a6:c7:2c:36:aa:b7:b5:85:
                    2a:90:d8:6b:b3:d3:d1:ca:e2:8c:8e:eb:80:cc:2c:
                    86:99:6c:58:17:85:77:59:4e:d1:9b:b1:0d:8a:f6:
                    e0:2e:05:21:95:6d:3f:46:47:2f:7e:ce:e0:ba:c0:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:01:AB:99:A8:14:83:20:B0:02:4F:8C:91:D1:F2:EC:A4:71:63
            X509v3 Authority Key Identifier:
                keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:1a:65:a8:00:2a:0b:4d:41:ea:e4:7b:0d:52:30:af:9c:
         10:7e:8d:f7:38:e8:f0:13:3e:72:48:e6:d5:13:2c:b3:1b:3a:
         d5:e7:ad:c5:8f:71:b7:44:fc:20:0b:57:bf:4f:0a:ae:e7:25:
         cb:1f:9b:5a:4f:38:f2:de:79:53:ac:72:bb:bc:c3:8c:b1:4a:
         a2:e5:65:5c:93:b7:3f:ed:76:40:4e:62:eb:8a:4c:c5:9b:15:
         55:52:dc:77:a9:9f:67:54:b2:4c:b2:38:1d:65:71:fd:3e:72:
         3a:bf:cf:28:6a:8d:19:91:71:68:e8:52:e9:bb:89:7c:aa:f1:
         cc:aa:33:ac:7d:aa:8e:af:65:cb:3c:3b:b9:f9:c6:4d:6f:86:
         e4:f4:3c:de:c9:ab:b1:56:c9:4a:12:ac:7f:a5:0d:be:e5:21:
         c1:76:d9:80:ce:a8:67:cb:f1:95:8b:0f:ef:a3:2f:df:82:a0:
         d5:21:1a:40:01:f3:0b:79:4e:8f:bd:7c:5c:f4:72:2c:a3:fe:
         9a:c4:93:f7:54:89:f2:24:db:40:1d:ae:b3:83:58:d1:cf:ce:
         9e:fd:49:f6:8d:e6:86:8a:91:12:64:ea:b6:71:93:72:e0:e3:
         4d:d7:8c:68:50:4f:35:c8:f9:77:c6:d8:f2:f4:18:cb:65:47:
         41:21:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:12 2026 by rpki-client