Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          Aolnq9GGEDg9vWJ3Zx24DbOy22rb9r08tVkV82UNNV8=
Subject key identifier:   8D:AB:15:69:DE:58:F7:4F:B5:08:37:04:78:E7:63:A1:50:D5:6B:CB
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       425072C70A32D43276FAE5F177AA8006EC885CB6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          51
Signing time:             Tue 30 Jun 2026 09:48:37 +0000
Manifest this update:     Tue 30 Jun 2026 09:43:37 +0000
Manifest next update:     Wed 01 Jul 2026 10:50:37 +0000
Files and hashes:         1: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          2: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          3: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          4: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          5: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=)
                          6: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          7: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          8: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=)
                          9: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          10: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: ap1gceMS+HR240pMIcRnjmTzP4jO07oPgrazXsMEmJc=)
                          11: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 10:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:72:c7:0a:32:d4:32:76:fa:e5:f1:77:aa:80:06:ec:88:5c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Jun 30 09:43:37 2026 GMT
            Not After : Jul  1 10:50:37 2026 GMT
        Subject: CN=8DAB1569DE58F74FB508370478E763A150D56BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:7b:cf:19:17:2b:1e:ca:39:0f:7a:64:a4:
                    79:37:95:c0:9b:d2:2e:75:e0:1f:f9:a2:c2:64:21:
                    51:7b:65:de:12:f2:73:3a:c6:a6:1f:78:de:c3:54:
                    cc:67:8f:a9:af:27:c8:f5:50:c0:6d:72:29:ef:a7:
                    3a:97:b7:5b:02:4f:f1:ae:65:43:6a:fe:61:4c:9e:
                    27:8b:b1:50:97:e4:1b:20:75:c2:4f:c5:d0:0d:9e:
                    75:f2:14:25:5a:ad:13:bf:8f:ed:6d:c0:a9:11:f5:
                    c1:2d:8f:f2:b8:ae:71:74:a2:08:40:b8:cd:d3:3d:
                    b4:64:6d:f0:bb:ec:43:10:78:11:06:30:e7:fa:96:
                    90:72:78:f1:b0:cb:a4:11:39:3f:a4:e2:2b:85:bd:
                    d6:a7:16:9d:b1:82:e2:71:27:e6:ea:c6:8a:20:3d:
                    e8:2e:f2:e7:62:08:b5:6a:ce:73:21:07:9c:9e:ea:
                    48:ef:0d:c6:a4:12:c4:16:c0:df:0d:ef:8e:e8:92:
                    97:ed:b2:5e:f6:16:4f:5b:f9:74:2b:e6:40:2b:ed:
                    a7:3d:d6:69:b1:b5:57:f6:13:af:70:3b:94:ae:62:
                    28:8a:6b:c8:bc:d4:ae:bc:3e:a2:9f:0b:57:4e:6e:
                    63:86:85:37:b6:b1:81:2c:47:36:55:a1:e7:40:07:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:15:69:DE:58:F7:4F:B5:08:37:04:78:E7:63:A1:50:D5:6B:CB
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:22:95:e2:6c:7f:7e:ff:83:ce:11:a3:a1:50:31:08:2a:
         d0:dd:62:1b:de:71:86:79:b3:e3:fb:bf:9c:ee:74:b4:e8:59:
         af:b1:1f:25:50:f8:b0:35:56:bb:11:ea:a9:ca:8b:a9:45:1c:
         81:9e:8a:38:ac:f1:c1:f4:f7:a9:45:f8:53:cc:47:89:d7:ae:
         3a:7e:7b:16:d7:46:a6:16:70:61:01:71:7f:36:47:6a:1d:cb:
         da:a4:81:cc:8f:93:e8:1b:e4:76:9c:10:fb:23:16:bc:0d:08:
         a9:c4:31:41:8f:7a:ee:ef:d7:22:31:b9:20:d7:a8:f8:a7:17:
         1b:b3:36:c4:98:23:a3:18:e0:d4:c2:68:46:36:b9:42:1f:bd:
         3f:79:db:fa:9a:3a:6d:39:e1:e9:81:f4:5a:b0:92:5c:03:3c:
         58:ad:18:13:0c:73:f2:f4:9e:c6:a2:b0:e4:a2:44:0a:a6:a4:
         2a:12:96:23:24:e3:8f:92:32:a6:7f:10:10:be:be:3c:aa:fe:
         71:27:20:a2:f5:20:6f:09:bd:70:df:db:c5:4a:8b:67:5f:db:
         98:44:e6:4c:0d:ad:e1:03:03:8d:a5:81:00:99:69:48:e4:6e:
         c2:62:2c:d4:a4:87:9b:32:86:fb:53:52:16:21:2f:24:fc:b8:
         12:e1:96:04
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUQlByxwoy1DJ2+uXxd6qABuyIXLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx
NjZDM0U3ODAeFw0yNjA2MzAwOTQzMzdaFw0yNjA3MDExMDUwMzdaMDMxMTAvBgNV
BAMTKDhEQUIxNTY5REU1OEY3NEZCNTA4MzcwNDc4RTc2M0ExNTBENTZCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMCHvPGRcrHso5D3pkpHk3lcCb
0i514B/5osJkIVF7Zd4S8nM6xqYfeN7DVMxnj6mvJ8j1UMBtcinvpzqXt1sCT/Gu
ZUNq/mFMnieLsVCX5BsgdcJPxdANnnXyFCVarRO/j+1twKkR9cEtj/K4rnF0oghA
uM3TPbRkbfC77EMQeBEGMOf6lpByePGwy6QROT+k4iuFvdanFp2xguJxJ+bqxoog
Pegu8udiCLVqznMhB5ye6kjvDcakEsQWwN8N747okpftsl72Fk9b+XQr5kAr7ac9
1mmxtVf2E69wO5SuYiiKa8i81K68PqKfC1dObmOGhTe2sYEsRzZVoedAB4d5AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUjasVad5Y90+1CDcEeOdjoVDVa8swHwYDVR0j
BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO
RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG
QTBCREJDMTY2QzNFNzguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8wLzBGNkIzNDI3
Q0Q0MDNERTcwRDk3Q0REQ0FGQTBCREJDMTY2QzNFNzgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL/yKV
4mx/fv+DzhGjoVAxCCrQ3WIb3nGGebPj+7+c7nS06FmvsR8lUPiwNVa7Eeqpyoup
RRyBnoo4rPHB9PepRfhTzEeJ1646fnsW10amFnBhAXF/NkdqHcvapIHMj5PoG+R2
nBD7Ixa8DQipxDFBj3ru79ciMbkg16j4pxcbszbEmCOjGODUwmhGNrlCH70/edv6
mjptOeHpgfRasJJcAzxYrRgTDHPy9J7GorDkokQKpqQqEpYjJOOPkjKmfxAQvr48
qv5xJyCi9SBvCb1w39vFSotnX9uYROZMDa3hAwONpYEAmWlI5G7CYizUpIebMob7
U1IWIS8k/LgS4ZYE
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:33 2026 by rpki-client