Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File:                     E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier:          vuTS5F/PzA72ITWu+6fExvYp730LIvTPtYo0xJjLg38=
Subject key identifier:   CD:15:46:8C:0E:4E:49:93:7D:53:84:A1:E7:4F:F6:B8:5D:B9:23:E3
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       31D74E419DA24F906297F221E9657871619A53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 03:16:29 +0000
Manifest this update:     Wed 13 May 2026 03:11:29 +0000
Manifest next update:     Thu 14 May 2026 04:47:29 +0000
Files and hashes:         1: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
                          2: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: 7EyiENZnPrAOkhKCeFZXJ/JhtDgR7WZl2o9sLLOOIqc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:4e:41:9d:a2:4f:90:62:97:f2:21:e9:65:78:71:61:9a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: May 13 03:11:29 2026 GMT
            Not After : May 14 04:47:29 2026 GMT
        Subject: CN=CD15468C0E4E49937D5384A1E74FF6B85DB923E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:53:53:4d:70:08:0c:c7:15:a6:96:9b:e0:
                    79:15:e8:b7:e5:61:4b:6d:81:16:0a:8e:54:bb:89:
                    2e:2b:7b:22:4b:01:af:55:05:23:2d:11:b4:34:6c:
                    0e:62:c6:5f:ab:bb:44:25:8e:af:1c:03:e6:58:f6:
                    d8:1e:b5:39:fa:18:50:6b:97:9f:e6:d8:e8:37:0e:
                    05:e0:e2:94:b0:cf:84:df:8e:4b:9e:f2:56:94:db:
                    45:ae:49:5b:f2:9f:25:9c:33:29:9f:c6:2a:dd:c1:
                    28:0c:c0:60:4f:d7:2c:65:0a:2d:8d:8c:86:54:29:
                    16:84:d1:a4:f3:5d:56:e5:9f:24:fc:c4:25:a2:fd:
                    ee:c9:29:fd:9a:36:90:7c:bf:9d:55:ef:07:64:2d:
                    8d:6c:94:71:b8:23:e9:e8:0a:b5:8c:25:ff:20:f1:
                    46:eb:c8:af:76:ea:4e:05:02:67:a9:26:38:3d:af:
                    09:eb:e6:bb:c5:9e:c8:0f:c8:a1:0a:88:a0:a2:9f:
                    30:41:31:42:ae:24:88:72:42:e9:cd:59:64:28:15:
                    38:ec:7e:3c:85:f4:34:08:e7:63:b7:20:19:c7:37:
                    4e:9c:03:d9:87:3e:e1:8f:42:0c:f4:27:25:7b:e9:
                    d6:2a:53:18:7f:cb:92:fc:ca:8a:f9:44:fc:49:5e:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:46:8C:0E:4E:49:93:7D:53:84:A1:E7:4F:F6:B8:5D:B9:23:E3
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:35:96:49:46:90:54:72:0e:44:f9:fb:0c:77:26:5a:44:3d:
         f1:18:d6:8b:a8:43:fb:47:65:ea:ed:32:ca:db:20:79:2a:bc:
         de:00:c8:4f:fd:6c:89:76:e4:02:5d:ec:9c:b7:e6:9d:ba:50:
         03:6a:4a:2e:fe:ca:c0:c9:45:65:9c:dc:fd:fb:92:8a:26:3c:
         1a:de:fc:9d:11:b0:d5:7d:49:17:2a:d8:33:02:9c:e0:fe:ac:
         9c:f3:b8:41:48:57:52:d7:ee:27:f3:48:57:5b:f4:bd:cb:73:
         2d:30:5e:0c:4f:34:aa:7e:16:f1:2a:76:ea:0d:e3:46:27:4d:
         6b:e0:36:dd:a1:63:45:64:91:f9:78:c7:b8:dd:e8:96:6f:3f:
         0a:c5:d9:1d:72:f2:bf:33:42:dc:c6:47:94:15:12:35:7d:5c:
         74:8c:c5:ed:af:de:d2:2f:be:90:d6:f0:29:5a:a3:95:38:0a:
         4a:3a:4b:6a:48:d5:ee:fa:f5:54:07:25:51:19:84:18:c4:8b:
         4d:15:a5:02:54:55:a3:d3:92:fd:f5:79:58:8e:96:8c:a5:d4:
         f8:01:67:63:ea:52:48:f1:b1:5e:f8:6b:62:76:dc:e9:db:c5:
         8e:ce:88:13:d6:05:7a:af:60:f2:61:13:da:cf:bd:ec:52:fd:
         d0:ac:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:41 2026 by rpki-client