Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File:                     809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier:          X3cy4XQPuG/3zm+T810uHm0B0t5jeJXwZaxKxP8t1dk=
Subject key identifier:   3C:81:87:00:77:DB:33:6F:74:CA:46:8C:E0:9C:B1:00:C6:8B:C1:E4
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer:       /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial:       3718C5912A0FE894C6620DFF798A9CC957836BA7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number:          44
Signing time:             Mon 29 Jun 2026 22:32:31 +0000
Manifest this update:     Mon 29 Jun 2026 22:27:31 +0000
Manifest next update:     Wed 01 Jul 2026 00:54:31 +0000
Files and hashes:         1: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: EENUyzv7fpIOOZUDg8vJ1QeOdybDw6KffrbOwRGv0f8=)
                          2: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
                          3: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 19:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:c5:91:2a:0f:e8:94:c6:62:0d:ff:79:8a:9c:c9:57:83:6b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
        Validity
            Not Before: Jun 29 22:27:31 2026 GMT
            Not After : Jul  1 00:54:31 2026 GMT
        Subject: CN=3C81870077DB336F74CA468CE09CB100C68BC1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:8b:e1:04:a6:1e:88:fe:1c:2b:73:28:61:
                    f6:5e:36:bd:8e:2f:a6:3d:60:97:a1:1f:1d:ab:c7:
                    01:8c:1b:ff:63:9a:69:f0:40:de:08:56:0e:bf:c7:
                    82:8f:77:18:75:4c:87:4f:d6:f5:65:ef:8b:ff:49:
                    85:e5:3c:38:6c:13:23:38:71:9f:b7:b9:cb:33:d1:
                    12:9b:0b:3b:33:65:9d:1e:15:53:58:2c:32:76:6e:
                    c6:65:b1:98:67:2c:dc:7a:4f:46:a7:fc:63:72:36:
                    b6:50:4c:5c:78:27:07:a5:45:04:14:55:24:82:3b:
                    c4:5e:0a:46:21:70:e2:68:4c:6f:76:be:01:03:bb:
                    a9:1b:e0:7b:01:0e:37:79:d2:46:41:a5:65:85:d6:
                    6a:63:29:b3:30:78:d1:d3:15:b0:a7:87:68:c6:5e:
                    68:6b:d5:b0:a7:a4:91:a4:e6:65:f2:f8:bb:e9:b2:
                    5b:37:22:08:9e:6d:71:9a:ab:c0:39:04:9d:a2:04:
                    cd:87:76:14:08:97:a0:b4:76:ca:77:7a:6c:36:c5:
                    f7:ea:e7:e4:8c:80:01:5c:91:99:07:8d:bf:fe:ca:
                    93:42:f4:b6:2a:b1:0c:4c:61:3f:77:46:16:10:8c:
                    26:27:44:e4:a8:9b:ed:3f:c6:fa:b2:0f:b3:6a:2f:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:87:00:77:DB:33:6F:74:CA:46:8C:E0:9C:B1:00:C6:8B:C1:E4
            X509v3 Authority Key Identifier:
                keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:14:90:06:22:11:88:ce:ef:e9:31:51:5d:8a:a3:11:1e:48:
         dd:e6:52:ec:49:79:85:0d:b1:22:f2:26:7f:b6:a9:32:6f:18:
         5b:b8:95:11:a6:bb:13:ef:4d:49:70:70:1d:68:64:91:b7:46:
         50:36:70:79:f2:40:b2:b1:02:51:94:be:21:2f:0b:eb:8f:b5:
         74:21:6f:aa:1f:8a:e0:f6:e9:68:ac:7f:ed:44:14:a5:88:8c:
         6d:ba:a0:6e:64:f6:73:da:94:2d:4c:d2:a6:66:a2:15:31:77:
         d2:a5:af:bb:80:fb:4d:66:0c:ef:2f:dd:fc:0e:1c:60:cf:39:
         d7:87:e7:e4:9b:28:41:35:95:ab:65:25:06:2f:74:47:39:3c:
         1d:c5:1b:7f:4f:43:3c:5d:42:d3:d7:31:df:b9:f9:f0:1d:f7:
         92:0b:6b:50:1f:ea:d3:3d:f4:2e:3e:3d:9f:fd:9b:3f:45:2e:
         d0:f3:5f:c6:68:c6:df:16:b3:bb:b4:46:71:21:30:1e:2d:4d:
         45:62:8a:72:7f:87:94:7d:6b:8b:9b:a1:c6:9c:c8:96:1c:24:
         9a:f2:41:2e:d6:cf:16:4c:d3:a8:1d:e0:28:49:14:35:ef:87:
         d5:5e:85:96:79:55:5f:87:47:e0:7d:d7:8a:47:63:29:4d:82:
         db:5e:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:09:06 2026 by rpki-client