Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
File:                     37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json)
Hash identifier:          UPwFF3WHsQq5b+y1xHCNL/5ritzUyMaZqaEvxgrldwc=
Subject key identifier:   EA:45:6C:03:61:0E:9E:4A:7B:67:FD:31:F4:3A:A5:C5:6D:AE:58:77
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Certificate issuer:       /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial:       3D3F12D0BD9CFB29356DF822EF87516737CFD327
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
Manifest number:          48
Signing time:             Tue 30 Jun 2026 14:29:09 +0000
Manifest this update:     Tue 30 Jun 2026 14:24:09 +0000
Manifest next update:     Wed 01 Jul 2026 16:53:09 +0000
Files and hashes:         1: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=)
                          2: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=)
                          3: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=)
                          4: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=)
                          5: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: dd3i8wY2/LIygVU9ESN+JIr4qqhY2ajzVjCMNmRAKyU=)
                          6: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
                          rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3f:12:d0:bd:9c:fb:29:35:6d:f8:22:ef:87:51:67:37:cf:d3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
        Validity
            Not Before: Jun 30 14:24:09 2026 GMT
            Not After : Jul  1 16:53:09 2026 GMT
        Subject: CN=EA456C03610E9E4A7B67FD31F43AA5C56DAE5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:fe:af:5b:b9:82:b3:0d:08:b0:b1:db:5e:
                    1e:59:96:28:9f:7d:10:14:33:50:77:18:0e:5b:0e:
                    3d:70:40:ab:c0:74:c6:96:ec:70:18:29:16:b2:f2:
                    a0:20:fb:0b:88:b4:ce:37:8c:55:12:b8:52:5f:1d:
                    ff:58:ba:b0:11:d1:31:9a:00:a1:9c:01:bc:fa:c7:
                    14:b5:85:eb:a8:71:94:83:b3:ed:53:b0:2b:51:86:
                    05:7b:24:56:b7:9a:34:e3:30:c4:40:df:40:d7:ff:
                    7d:3e:08:e7:d4:ba:01:3c:d7:bf:9b:8a:43:a1:b2:
                    de:c0:60:fd:91:e3:30:e4:3d:42:03:1f:62:3b:72:
                    de:10:c0:62:02:ed:54:59:bc:ca:f0:10:bf:3c:f4:
                    4b:48:0c:ae:aa:e9:83:74:50:c3:4a:c0:33:41:88:
                    30:5e:81:32:a6:eb:b9:6a:76:85:ae:f8:c7:f8:6b:
                    86:7d:7f:33:8e:8e:32:33:f5:30:6a:61:70:e9:0e:
                    00:44:04:c8:d3:62:5a:94:49:36:ec:ef:19:51:37:
                    6e:29:27:86:66:5e:32:8f:92:7d:6e:fa:1d:ca:ab:
                    09:59:cf:d8:35:e9:29:b5:6f:89:bc:ea:a9:f0:40:
                    44:ae:12:62:05:20:c9:1c:52:62:3f:07:d0:80:cd:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:45:6C:03:61:0E:9E:4A:7B:67:FD:31:F4:3A:A5:C5:6D:AE:58:77
            X509v3 Authority Key Identifier:
                keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:83:cc:59:03:69:66:83:70:c3:94:81:b6:02:c5:9f:b6:
         38:ad:68:f9:df:8f:34:31:78:e9:43:f2:a8:f8:b5:a0:85:f0:
         08:92:6b:8e:08:8e:16:0f:f8:be:2d:93:a5:b3:fd:7c:09:76:
         91:06:d5:6a:13:1d:b5:1b:bc:1f:8d:54:4c:0a:8e:44:b2:b3:
         09:d3:2d:b2:d3:c0:bf:ea:bd:43:15:48:db:a4:14:ad:ff:4d:
         d2:7a:ba:ae:14:2e:e2:56:80:a6:8d:2e:96:39:6d:64:91:d5:
         32:47:8f:b4:ad:c7:02:03:3c:25:37:d8:67:b7:bc:95:e1:d3:
         13:06:72:ba:88:81:49:85:e7:ca:cd:ea:a7:f3:c7:72:19:d5:
         1e:31:98:23:0c:c4:c0:19:e9:fd:da:4f:89:67:05:c1:54:83:
         82:e7:2e:b8:1e:b0:ff:e7:5b:8b:02:fb:18:22:43:e3:d5:c9:
         f6:aa:b8:a7:7a:9f:66:f5:54:ed:a2:5d:e2:4e:b3:96:64:a1:
         b4:bc:48:70:03:ad:48:24:4b:a8:c0:3e:62:88:a2:4d:cd:21:
         34:10:df:c1:e8:9d:82:ff:7b:09:96:c5:b3:4c:fc:71:1f:2b:
         c3:82:38:28:93:c5:fe:af:07:10:53:0e:cf:05:bb:c7:d2:b5:
         bf:1c:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:59 2026 by rpki-client