Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          DJ02qkENzI+Bvfi0SHYHb5LJr1KypM188ga52GnC+qs=
Subject key identifier:   A9:89:32:26:AF:2B:5B:A2:96:33:F9:42:49:E6:97:AC:5C:45:B7:3A
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       3AF6EFD4A5224E30D0D5C5E0F31AA78818A420D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          53
Signing time:             Tue 30 Jun 2026 08:53:27 +0000
Manifest this update:     Tue 30 Jun 2026 08:48:27 +0000
Manifest next update:     Wed 01 Jul 2026 11:59:27 +0000
Files and hashes:         1: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          2: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          3: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          4: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          5: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          6: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          7: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          8: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          9: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          10: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          11: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          12: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          13: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: hMSCb7zEjrKBJO04OT5UYwbSOOuz285RkwSPx/dIp9Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 11:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f6:ef:d4:a5:22:4e:30:d0:d5:c5:e0:f3:1a:a7:88:18:a4:20:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Jun 30 08:48:27 2026 GMT
            Not After : Jul  1 11:59:27 2026 GMT
        Subject: CN=A9893226AF2B5BA29633F94249E697AC5C45B73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:ed:c6:66:4a:c9:36:45:9f:c3:a5:8f:73:
                    1c:ef:e3:35:a9:1f:87:58:cf:1c:7e:df:a2:9c:52:
                    48:be:9f:aa:bd:44:87:67:d3:50:91:00:42:5c:6c:
                    59:35:ef:4c:01:7e:af:82:be:79:03:4c:4f:dd:60:
                    5c:f5:01:bc:d4:1e:99:51:2b:d2:c9:92:71:ba:75:
                    2d:7c:32:10:d7:6c:44:76:91:00:25:c6:fe:b6:7c:
                    c2:8b:6b:20:4c:ce:c5:6a:73:40:77:49:a8:73:f5:
                    93:4a:18:1b:dc:0c:a4:4a:f7:d1:e4:04:12:b6:fa:
                    a3:34:d2:43:b8:55:fa:fa:fe:d8:f6:fc:23:ff:ab:
                    0d:ed:79:27:af:b9:3d:c5:85:a5:70:50:f2:69:5d:
                    43:1d:ad:07:5c:7c:5a:e0:17:8f:98:c5:a3:a8:c1:
                    14:24:5e:2b:13:e6:01:a5:46:f0:a1:0a:17:a7:bf:
                    63:b0:c4:a8:e1:d2:9f:3b:7e:fb:85:43:db:89:b7:
                    65:a9:0f:14:e3:83:96:72:2a:0d:9c:a0:2f:e2:64:
                    f4:f2:81:60:25:49:cc:12:43:3b:50:3d:fc:80:c0:
                    de:1f:0b:b9:b5:ee:db:6a:6e:3a:38:6d:47:77:8e:
                    e7:6f:c5:b0:93:c7:99:1b:6c:b5:c3:77:0c:d9:92:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:89:32:26:AF:2B:5B:A2:96:33:F9:42:49:E6:97:AC:5C:45:B7:3A
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:72:ac:b8:8d:47:94:cd:13:c0:af:01:ec:82:d4:29:87:
         50:27:42:40:25:26:25:0c:f6:97:1b:ef:1c:e2:e6:15:31:43:
         2b:bc:5b:64:47:ca:80:38:08:94:89:72:fd:f4:b6:4b:cf:23:
         87:a3:e2:06:96:14:1a:9a:38:a3:fb:97:d2:fa:36:3f:a3:28:
         f5:e4:b5:75:a8:71:8a:e3:0a:7b:db:c7:d4:09:7e:a8:1a:73:
         d5:96:e3:3f:9b:30:92:c9:73:45:ad:93:68:fe:7d:f0:84:57:
         17:ab:e7:0b:db:b4:5b:30:72:49:71:e3:9d:2b:5b:a8:4e:9a:
         7d:8f:b4:15:9d:cb:42:4f:34:e0:29:fb:cc:14:07:e3:85:1c:
         96:a6:88:8f:94:f0:ee:60:73:54:cf:37:7c:4c:6f:5c:48:52:
         bb:a9:23:d1:be:dd:a9:fa:d7:4d:a0:78:ee:3f:2a:be:1c:5b:
         7d:a9:29:46:bd:79:51:be:4e:58:17:2c:44:ba:72:7f:f6:e2:
         9e:88:a7:51:62:6d:ea:ec:82:02:c8:d6:c2:c3:b2:1e:3b:10:
         f4:59:36:0d:72:8c:70:9f:41:75:b9:15:0f:21:61:01:c1:29:
         f0:8b:7d:2f:d7:08:da:f9:71:a0:7d:f6:c8:dd:72:6a:c3:56:
         64:2b:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:11 2026 by rpki-client