Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
File:                     3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft (raw, json)
Hash identifier:          Xfj2jvzaf6KulIn16UpOLSDT34RZhwZes+H7EwlphYI=
Subject key identifier:   75:EE:DB:E3:32:A0:97:BC:D9:18:7F:61:BD:4B:EC:CD:73:7E:9F:49
Authority key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
Certificate issuer:       /CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Certificate serial:       6A947691955C9A0E09EAA4F5775049241F0BDCCD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 16:38:14 +0000
Manifest this update:     Thu 23 Jul 2026 16:33:14 +0000
Manifest next update:     Fri 24 Jul 2026 16:51:14 +0000
Files and hashes:         1: 323430303a363365303a3a2f33322d3438203d3e2037343833.roa (hash: rHuxaTKbxFOG3QVLxlmDpVGC4VQ2hgu+8e9CRQbtD+o=)
                          2: 3130332e3138332e3139382e302f32332d3234203d3e2037343833.roa (hash: QxmoSLkHm5UR5jJGq6GVgmM8tmoMrY7IxvQLIUDlgG8=)
                          3: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl (hash: laxY9Z1bbV3BEUALi6HP1f8UErLxL/sz2kUE7UMN5mk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
                          rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:94:76:91:95:5c:9a:0e:09:ea:a4:f5:77:50:49:24:1f:0b:dc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
        Validity
            Not Before: Jul 23 16:33:14 2026 GMT
            Not After : Jul 24 16:51:14 2026 GMT
        Subject: CN=75EEDBE332A097BCD9187F61BD4BECCD737E9F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:14:1d:b1:8f:b6:6c:a3:56:27:8c:0a:af:
                    9b:28:4b:02:05:e2:9c:40:49:9d:06:7b:37:a6:d0:
                    c5:54:ca:34:7c:5b:6d:a0:2b:08:ca:4c:fb:30:e1:
                    9f:c9:23:90:0f:f5:c5:e3:82:aa:95:fc:15:db:85:
                    25:20:a6:85:bf:e5:49:ad:b8:7c:f1:e5:63:ef:ef:
                    07:9b:e1:90:7d:ae:14:c9:b1:a8:e6:f9:75:60:06:
                    ea:8e:f5:5b:12:25:b3:3d:db:bd:46:ce:98:4f:c1:
                    cf:94:7e:9a:ee:fc:91:9e:95:96:bf:34:53:0d:89:
                    55:c9:e0:69:56:41:21:ee:9f:5f:44:da:0c:cb:7b:
                    5f:7b:c4:80:5f:7c:ec:36:63:3c:cd:0a:80:94:19:
                    cd:e3:cd:f0:58:e6:1b:84:5c:12:ae:f4:e2:46:37:
                    9e:d3:03:c8:87:68:a5:71:ca:96:e0:ad:2a:db:00:
                    4f:54:e2:22:87:39:f5:f6:51:71:74:0a:c2:5f:cb:
                    c1:7a:f8:27:5c:72:7e:1e:60:f7:78:c0:e2:a4:6d:
                    4c:6e:23:d3:ba:77:5e:51:ad:d8:b3:d7:a5:7e:c0:
                    42:8f:c6:4a:32:83:fe:55:91:46:b2:bc:c5:c1:ce:
                    cc:7a:dd:58:ce:26:58:34:15:06:d5:e7:30:39:53:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:DB:E3:32:A0:97:BC:D9:18:7F:61:BD:4B:EC:CD:73:7E:9F:49
            X509v3 Authority Key Identifier:
                keyid:3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:0d:b2:0d:ae:9c:74:64:43:d4:03:e8:a3:97:c4:bf:33:
         28:59:64:44:86:e1:48:48:d8:0c:96:61:44:c2:fd:9e:78:9f:
         58:67:f2:d7:62:7d:b2:d7:79:17:6b:2e:f2:50:11:c4:53:36:
         4c:cc:f1:81:fc:a9:3d:b5:2e:97:b0:ae:ac:a2:ba:c5:0c:49:
         0d:70:6c:b4:83:99:68:f6:10:4a:c3:d1:5f:d9:7f:e0:c6:63:
         07:74:4f:92:d5:85:ca:12:cc:01:c1:74:a9:4e:8b:33:cb:86:
         ec:56:17:74:87:b8:08:65:e7:79:a4:6e:ca:85:70:bf:80:20:
         a6:48:54:e3:18:7a:68:d0:fc:21:ba:04:33:4d:50:bb:d1:5f:
         f7:e1:8f:d8:75:3c:8e:a8:15:5d:b8:a4:92:9d:74:5b:2a:53:
         90:db:44:a1:3d:92:a7:92:01:ff:7e:97:1c:0f:09:10:2a:45:
         ed:78:e4:a0:8e:48:bf:4e:7a:0e:ed:1c:48:72:bc:27:b0:e3:
         28:3c:65:40:fe:c0:19:94:7a:62:1e:e2:80:bc:24:f2:37:87:
         f4:38:a2:9a:39:31:48:96:dc:59:25:87:20:5a:1d:e6:2e:56:
         bf:4c:77:f0:91:ef:36:81:79:e2:25:b9:0f:51:dc:d4:5f:4a:
         25:fc:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:08:40 2026 by rpki-client