Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File:                     65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier:          RNK1uMWqh7OXWB1tvEaAxkglb0GHLO0vy8Lu9b4IxEI=
Subject key identifier:   3B:1C:85:C2:35:63:3F:1A:07:0D:84:8D:CF:A8:C8:4C:21:6B:14:86
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer:       /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial:       78D3E420B538BF73483ED781DE382E52D5037109
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number:          14
Signing time:             Fri 15 May 2026 10:46:46 +0000
Manifest this update:     Fri 15 May 2026 10:41:46 +0000
Manifest next update:     Sat 16 May 2026 13:48:46 +0000
Files and hashes:         1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
                          2: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: Dec2u+36XqN/eKxCEPS13sHm5z0V8Y1kgBx2KsgW+dY=)
                          3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 13:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d3:e4:20:b5:38:bf:73:48:3e:d7:81:de:38:2e:52:d5:03:71:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
        Validity
            Not Before: May 15 10:41:46 2026 GMT
            Not After : May 16 13:48:46 2026 GMT
        Subject: CN=3B1C85C235633F1A070D848DCFA8C84C216B1486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:2b:4b:ea:02:18:62:a9:ef:54:4d:cf:e2:
                    11:b0:d5:9c:6f:ef:c5:c3:f1:5a:66:35:43:3b:0b:
                    a7:4e:82:6d:36:1c:7f:19:ff:35:33:a8:22:bc:52:
                    87:96:00:0c:35:47:42:57:11:85:dc:ad:14:d7:c6:
                    39:2b:f2:92:18:eb:c4:0a:bc:ca:4d:44:44:01:15:
                    66:81:c3:ee:49:97:85:8c:41:d4:0d:6b:ba:ed:e9:
                    bf:ab:e6:c3:72:79:4b:e2:ac:15:81:9a:0a:40:aa:
                    1f:6b:93:fa:eb:de:46:c1:98:34:02:6d:e6:2a:2e:
                    32:20:41:f2:c4:ae:cd:8c:55:1e:8f:a5:b3:9b:50:
                    5d:a8:91:1a:e9:57:a0:29:da:e5:50:4f:6a:03:1b:
                    6c:b0:f2:3f:14:0e:97:83:1d:43:54:31:ff:cf:2d:
                    97:4a:68:60:d7:3a:ca:2e:24:99:f1:3a:93:27:fb:
                    32:ff:a7:06:8a:2c:14:fd:81:4e:1e:42:06:c2:66:
                    5f:6f:77:ab:a1:f3:49:f2:8c:94:f2:4b:c0:b9:fe:
                    fc:f5:ab:d0:09:96:e3:9a:df:de:bd:a1:be:16:5a:
                    ff:27:a9:7b:3e:b9:94:88:a6:1b:6b:e4:55:fa:c2:
                    d2:73:5e:ff:79:0e:01:aa:9e:5b:a9:cc:70:c7:a8:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1C:85:C2:35:63:3F:1A:07:0D:84:8D:CF:A8:C8:4C:21:6B:14:86
            X509v3 Authority Key Identifier:
                keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1b:6b:96:ae:63:1a:ce:33:44:db:16:09:2e:21:64:b5:eb:
         b2:a7:19:a0:90:b6:99:6c:8d:fa:c0:d2:8a:60:c7:3b:f6:dc:
         9e:3e:87:ce:42:0c:b6:7e:bb:68:80:28:fb:21:13:4e:8f:ed:
         09:f9:32:dc:73:e7:1f:58:e9:06:a5:65:c2:19:e8:4f:80:06:
         d8:0a:de:8e:b6:53:02:b3:c2:11:1e:c2:b6:8a:45:1b:d2:65:
         15:f2:0d:04:a5:a5:92:b5:50:24:bc:8c:8f:69:6a:c9:ea:bb:
         2a:80:e6:b3:e2:28:71:75:fc:4f:31:83:72:4d:8f:53:ea:44:
         ac:a7:1a:b9:96:ea:0c:1c:0e:b8:27:e9:15:30:fa:30:af:0b:
         bc:54:13:fa:1c:68:25:20:b0:d9:55:24:5d:c2:f1:e8:dc:56:
         16:d6:8b:f7:26:97:c1:a3:e7:1b:78:df:00:52:cc:2f:1b:08:
         37:b8:ce:2b:51:31:e7:6e:83:d9:bf:e6:e3:ab:15:62:1c:67:
         fc:04:e5:e3:c2:13:13:e0:b2:60:c8:f0:3d:b0:91:79:8f:11:
         86:6d:b3:58:66:4c:46:5b:7d:6d:09:37:93:93:71:71:f9:5b:
         8a:12:18:cc:6c:94:d9:da:43:59:15:9b:69:72:b7:95:32:1d:
         db:04:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:50:12 2026 by rpki-client