Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft
File:                     A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft (raw, json)
Hash identifier:          dYfBzxgx9s8xqI64qW7TOymj+N/Yixx7lp4YVSOCLoI=
Subject key identifier:   70:45:CC:07:E9:01:B1:FF:6C:68:52:4D:E3:7C:6E:F6:8E:46:93:EB
Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB
Certificate issuer:       /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB
Certificate serial:       68D2D6936A09A98258ADB00BFB2301274FE4FF65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft
Manifest number:          7F
Signing time:             Fri 14 Aug 2026 13:31:57 +0000
Manifest this update:     Fri 14 Aug 2026 13:26:57 +0000
Manifest next update:     Sat 15 Aug 2026 15:33:57 +0000
Files and hashes:         1: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl (hash: 8AZt+WmCbVyYtd44SRKxxewdjGIgEbNiTHkdE2cV77I=)
                          2: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (hash: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl
                          rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d2:d6:93:6a:09:a9:82:58:ad:b0:0b:fb:23:01:27:4f:e4:ff:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB
        Validity
            Not Before: Aug 14 13:26:57 2026 GMT
            Not After : Aug 15 15:33:57 2026 GMT
        Subject: CN=7045CC07E901B1FF6C68524DE37C6EF68E4693EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:ee:65:25:ad:36:6e:12:b1:96:6f:07:bf:
                    ec:23:6d:3c:8e:e1:27:38:63:d4:fd:d5:cd:8a:34:
                    2e:8b:e8:d5:ea:8b:80:e4:59:a2:6a:26:79:66:e3:
                    8d:3b:6d:23:3e:d6:a6:9f:e4:51:5d:d7:fa:20:a4:
                    5f:ab:82:0c:2b:4d:55:5f:10:70:91:9b:7f:f0:70:
                    d7:87:3c:c1:38:e1:8a:2d:34:19:03:08:e0:08:85:
                    3a:89:ab:7d:fc:0b:71:8a:fd:2e:6d:bd:ac:77:16:
                    ac:b8:ea:67:dd:9a:e0:04:f4:db:c3:05:d0:be:a1:
                    ad:22:0f:f3:8e:b9:d5:ab:40:c6:35:4c:c4:ce:32:
                    a1:b1:f0:e9:cb:51:da:e9:7f:7d:0c:65:bb:15:78:
                    c6:d0:2f:81:59:ff:3f:b9:da:71:52:48:54:a7:eb:
                    d4:d0:e8:40:08:7c:31:32:44:ea:65:46:d3:e4:b4:
                    b5:76:97:f2:e0:ee:ea:6d:80:4d:4c:df:b3:90:97:
                    b5:66:d7:03:a7:53:e0:0d:98:2c:08:98:32:8f:a2:
                    f6:5f:74:80:88:4e:e4:86:46:b8:65:5c:09:27:79:
                    b4:8e:fe:1f:98:af:8e:39:0f:ca:14:e6:c2:8a:6f:
                    c6:66:d8:7b:dd:23:48:37:68:63:9e:54:a3:6a:26:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:45:CC:07:E9:01:B1:FF:6C:68:52:4D:E3:7C:6E:F6:8E:46:93:EB
            X509v3 Authority Key Identifier:
                keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:f9:fc:ac:b6:44:9d:24:01:3d:66:e8:9f:b2:3f:e7:bc:
         95:d8:99:9d:a5:46:22:f4:b2:40:9b:e9:45:16:ec:8c:0b:c0:
         eb:84:54:9b:12:6b:a4:ff:a5:35:7f:75:c9:c6:f2:29:a5:36:
         c1:8f:99:77:99:ec:ec:20:ee:19:fc:bf:bd:65:d3:f2:b2:32:
         71:0b:49:9f:cb:9e:cc:e1:23:59:43:77:da:7b:ca:3e:2f:67:
         fc:13:ee:7f:14:2e:58:27:69:b9:52:65:b1:55:b9:31:eb:9e:
         ea:41:1b:bd:73:48:29:c0:1c:a4:88:61:a2:c1:d2:71:a8:2e:
         d3:c7:51:6c:4b:07:38:ed:84:fe:0b:ac:0a:c9:bf:54:23:97:
         4c:29:21:df:ee:90:14:dd:da:31:a1:2e:3f:e7:02:68:31:e1:
         b6:81:1e:59:de:45:b3:98:e9:58:57:85:63:d4:91:4e:05:8b:
         f2:04:e8:27:26:54:ba:12:a1:0b:ff:ed:f5:57:07:2d:d9:78:
         27:8e:59:23:de:73:6a:63:85:7a:8d:14:8d:af:05:db:84:5f:
         c0:1e:81:bc:8b:45:62:eb:e8:b4:7a:20:d0:80:58:48:a1:04:
         ca:b1:8c:06:57:cd:a2:87:97:1e:57:04:fa:ae:c6:7e:42:2b:
         18:1e:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:27:25 2026 by rpki-client