Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File:                     0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier:          u/DZlfI5B/owxWe3GcM3jdjMnqsHV6KKBc82ZTCdLSw=
Subject key identifier:   07:B9:7C:61:CD:D7:0C:4A:5C:8B:85:19:9B:09:09:7F:FE:9C:CF:48
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       510F261A7955B5F3929F583DE8C058C95BD886C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number:          DF
Signing time:             Fri 02 Oct 2026 22:50:15 +0000
Manifest this update:     Fri 02 Oct 2026 22:45:15 +0000
Manifest next update:     Sat 03 Oct 2026 23:31:15 +0000
Files and hashes:         1: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
                          2: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
                          3: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
                          4: 323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa (hash: sWy58u5i0NoASBHPtiUwZGiJ4LEba5OWhQM8D2/JecE=)
                          5: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
                          6: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: cHuJqkt0yy0gqjmJfMVuD3jMLax1QVMMRquAXqKhBKA=)
                          7: 323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa (hash: Za7J1hKjGlPncRTIVGAw4R5lobM168tANOUejMUtTGA=)
                          8: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
                          9: 323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa (hash: /fSzJCSRkXzZoHEWDs9j2FnyyjuMApCOVFREiP2QtKk=)
                          10: 323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa (hash: /ZMYMcRfS4rihkl6K+danfG6J1+aix3g9hU8GRVSTWM=)
                          11: 323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa (hash: S+iU7Frc3x1pLknr/q2r++M9QmfBtQENR4FkrWH2pOA=)
                          12: 323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa (hash: SVU/7dRIRRTqOjWn38YZEpKVNXmqhmDjcJRKxeeNSeU=)
                          13: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
                          14: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
                          15: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: yOQ81rEugef2W5X34ssZgoHH+7NuHAx/mifWNMD85ZE=)
                          16: 323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa (hash: G5ZHFEs/k5egpnslebEEFOvxulbKp3nlVsyJc87M8lQ=)
                          17: 323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa (hash: xfNSKb3eMl5qrx7slTef/RABgMHr3zPmfnyDAG9hy/E=)
                          18: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
                          19: 323430323a343365303a623639323a3a2f34382d3634203d3e20313532363132.roa (hash: wTZJes2+7/Z6pb2e5vAieJNbMKT2YjpUIm68KntoJTM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0f:26:1a:79:55:b5:f3:92:9f:58:3d:e8:c0:58:c9:5b:d8:86:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Oct  2 22:45:15 2026 GMT
            Not After : Oct  3 23:31:15 2026 GMT
        Subject: CN=07B97C61CDD70C4A5C8B85199B09097FFE9CCF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:3a:de:04:a3:60:18:e9:b3:e8:63:92:c4:
                    05:2b:a6:53:5d:d0:d4:60:6d:35:1a:ed:84:c8:71:
                    1d:21:63:67:d9:89:2c:da:9e:8a:76:98:eb:11:a4:
                    d0:46:a8:58:db:71:62:56:ce:97:08:1c:31:a0:3b:
                    fe:58:d1:ef:17:d5:ab:f7:00:c1:89:c5:86:38:01:
                    e8:38:f6:1b:ce:7d:85:c4:b2:6c:6d:7d:4b:b1:06:
                    ed:74:93:7c:63:17:ee:8e:80:7d:89:26:0f:f7:ff:
                    d2:ef:8c:f0:6f:a2:1c:c2:6c:71:7c:43:c9:92:97:
                    a5:3f:d7:c4:18:b8:c0:cb:48:27:63:e5:9a:ca:d6:
                    13:aa:ea:22:72:54:8d:6f:55:39:6d:85:d6:33:49:
                    18:64:ef:39:23:50:bb:f6:de:0c:68:bc:c6:cf:f4:
                    31:e1:13:88:5b:25:b2:bd:ac:05:4d:d5:e2:55:4d:
                    5c:f8:e1:3f:07:9f:f3:a6:b7:1f:2e:eb:ba:dc:9d:
                    5d:e0:6f:6d:3f:ee:b2:db:22:77:a3:df:77:d5:de:
                    9b:c1:fa:65:25:54:f1:88:e3:17:b2:26:b8:55:b7:
                    93:98:3b:88:5f:e0:6c:1e:8a:65:3a:42:ba:24:f4:
                    6d:d6:94:60:bb:01:ae:8d:f4:65:5a:50:f2:71:f2:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:7C:61:CD:D7:0C:4A:5C:8B:85:19:9B:09:09:7F:FE:9C:CF:48
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:1d:b4:e9:84:af:c8:e4:85:9c:a2:13:c0:df:c1:fb:c2:
         f6:8a:f8:08:20:f4:b9:cc:ee:2f:26:71:99:41:83:77:65:c9:
         17:df:21:e9:e1:5a:ce:60:51:e0:c7:c7:7c:3e:5b:f7:0f:b8:
         72:df:b8:be:ec:42:ae:24:39:b6:c0:7a:3a:7d:0b:44:6d:a2:
         2d:74:24:67:8a:4f:db:c1:56:63:ab:bb:67:69:f0:a9:25:54:
         f0:50:a3:91:f3:90:ae:a5:25:ac:4e:88:45:a2:66:97:cd:d8:
         fc:b9:48:76:e9:88:b5:83:5b:11:c3:72:be:cd:75:e7:d5:fc:
         d4:58:d8:d3:1b:74:ad:ea:4f:b2:06:11:39:98:e1:4f:cd:72:
         09:fb:8a:f8:81:05:8c:d6:97:6d:bc:0d:66:62:af:f9:07:37:
         a9:60:76:87:43:f0:6a:79:34:ef:41:46:ba:d4:53:33:98:4f:
         9a:a4:0e:82:7d:69:28:3d:05:ab:34:cc:e9:f1:e2:05:3c:82:
         b7:f3:c7:7f:89:a7:ce:f4:28:1b:87:e5:ac:29:1a:66:7a:22:
         d4:85:46:12:1d:8d:a2:f0:06:99:60:86:f0:ec:b5:ae:1f:4a:
         7d:97:fb:6f:0a:a5:63:bb:1a:c5:8c:05:42:48:53:e2:9a:09:
         83:1f:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:55 2026 by rpki-client