Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
File:                     7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft (raw, json)
Hash identifier:          bimLjcWDVvF7AzD51gRW5kw/0XufI72aX0GOpRFvxuk=
Subject key identifier:   B6:E9:B8:71:25:6E:C6:CE:0F:2B:7A:70:28:67:2A:A7:2F:57:5C:50
Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B
Certificate issuer:       /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
Certificate serial:       701D1157DBBBAF9C593593B8627055868EDA4039
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 07:53:22 +0000
Manifest this update:     Tue 30 Jun 2026 07:48:22 +0000
Manifest next update:     Wed 01 Jul 2026 10:11:22 +0000
Files and hashes:         1: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (hash: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ=)
                          2: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl (hash: Oq1IRWtVfZ7duzfz6Sc2mL1JCA9bH/jP37KMsvAJ7SA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl
                          rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 10:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:11:57:db:bb:af:9c:59:35:93:b8:62:70:55:86:8e:da:40:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B
        Validity
            Not Before: Jun 30 07:48:22 2026 GMT
            Not After : Jul  1 10:11:22 2026 GMT
        Subject: CN=B6E9B871256EC6CE0F2B7A7028672AA72F575C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:5e:51:49:97:5c:62:fb:7d:99:dd:24:41:
                    11:1d:46:33:02:11:11:98:44:02:4e:46:06:fa:39:
                    6e:5a:44:d4:19:5e:37:6a:52:d7:8a:70:f2:31:f3:
                    37:83:e0:f1:6f:15:2c:76:65:1b:b2:92:14:6a:7e:
                    18:3d:7b:42:b0:34:27:b5:61:04:5b:ef:c9:27:5f:
                    1e:fb:c8:fc:08:af:52:38:5e:be:1f:0d:45:dc:5d:
                    fd:16:92:b2:42:f0:8d:bd:23:da:ff:12:1e:12:37:
                    03:f8:4f:2c:24:ba:f5:dc:6f:f9:c3:00:e2:a9:d0:
                    cb:cb:d0:f1:34:01:92:0d:a6:ec:76:16:fc:f8:d5:
                    a0:bf:67:f3:c5:4c:e8:6f:04:6b:ab:38:a8:3a:da:
                    83:ab:6a:4a:cb:5a:72:de:fc:d4:41:0c:66:6e:fb:
                    c8:91:c9:e5:ad:5c:85:2e:60:73:e6:ef:2b:35:1b:
                    6d:6c:3b:9c:3f:f4:13:5f:4e:49:e3:92:74:05:9f:
                    90:9c:bd:9d:5f:8b:f1:a3:19:ac:88:5c:12:65:a3:
                    47:05:01:81:27:eb:d7:5f:63:b5:20:fd:7c:d6:e8:
                    3a:bf:3f:64:8e:0e:b6:d8:a1:7f:85:6b:7f:89:79:
                    88:98:9f:a5:29:08:7c:10:ce:51:7d:28:cd:4e:38:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E9:B8:71:25:6E:C6:CE:0F:2B:7A:70:28:67:2A:A7:2F:57:5C:50
            X509v3 Authority Key Identifier:
                keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:93:cd:97:68:a9:83:fa:73:4a:41:82:51:b0:62:86:a8:f0:
         02:7b:dd:2d:15:df:dc:ea:44:98:79:01:57:aa:e7:2f:35:43:
         b6:c1:51:8c:22:61:ba:ea:d9:a2:08:97:22:f0:1d:d9:18:e5:
         b2:bf:a4:0a:ad:08:34:31:e3:62:17:ba:66:c9:8c:9f:5b:ba:
         f4:d0:b6:ca:09:f3:1f:05:8f:84:3c:21:b0:22:a0:68:59:9c:
         be:bb:3c:23:13:55:55:f9:f7:e5:9e:a9:d3:38:85:29:af:cf:
         16:c2:f8:59:04:52:96:dd:7d:6c:f9:00:5a:69:72:1e:e5:68:
         c4:37:7c:12:39:2b:49:05:19:00:12:53:75:3d:69:8f:ff:dd:
         85:bd:72:b4:a3:c4:ea:e7:2e:0d:73:7a:c6:b7:e9:18:fd:70:
         f4:75:2c:4f:20:8c:5a:a3:60:ba:b1:af:45:03:72:57:2e:22:
         8b:79:78:a2:69:81:30:01:46:cc:db:fc:aa:3a:c5:54:a2:70:
         96:58:eb:13:34:45:5c:71:98:f7:46:05:36:4f:ee:4e:39:55:
         1e:6e:2b:2e:cb:c6:99:e8:0b:e7:bc:46:c0:e0:05:a2:2f:6f:
         e9:06:2c:fe:25:10:9c:f5:15:f6:f9:67:9e:2a:9c:7a:3e:2e:
         97:77:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:46 2026 by rpki-client