Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
File:                     CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json)
Hash identifier:          N3gjjUksKUF0XoEeylq71Ikpg6LVZUtS2AFh7X1DC5I=
Subject key identifier:   61:48:E3:DB:42:1F:29:CE:02:A8:E7:D5:E5:6D:99:36:B6:84:21:F1
Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F
Certificate issuer:       /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
Certificate serial:       545C3CA8253EEEC0FCBA71EBB808F237822E2457
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 06:57:29 +0000
Manifest this update:     Wed 13 May 2026 06:52:29 +0000
Manifest next update:     Thu 14 May 2026 09:40:29 +0000
Files and hashes:         1: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: Tf+86Xr9FsQkghd0447wLX0GwyfxAHl1ftvL5RDNanI=)
                          2: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl
                          rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5c:3c:a8:25:3e:ee:c0:fc:ba:71:eb:b8:08:f2:37:82:2e:24:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
        Validity
            Not Before: May 13 06:52:29 2026 GMT
            Not After : May 14 09:40:29 2026 GMT
        Subject: CN=6148E3DB421F29CE02A8E7D5E56D9936B68421F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:bf:ea:93:69:1a:bc:16:c7:c2:10:2b:f2:
                    ed:3f:1a:a8:63:46:40:00:af:f4:dc:2e:20:33:a9:
                    23:00:78:1a:48:1f:fe:0b:eb:66:43:41:1d:1a:8a:
                    6d:b3:05:e6:9f:01:00:9f:92:80:4e:e2:f1:ea:22:
                    80:75:35:71:48:56:0b:bd:5d:e0:0c:66:b2:71:0b:
                    ef:41:21:7e:63:48:26:19:3f:d9:f8:ae:20:1d:48:
                    28:c5:db:07:6b:ea:96:a0:aa:6b:3c:64:06:d3:93:
                    00:60:e4:cc:9e:9b:4b:93:d7:e5:6c:e2:1a:7d:4f:
                    72:c6:99:2d:82:dc:3e:09:6d:30:53:a0:4a:e4:53:
                    8c:99:60:1c:d5:b9:95:2c:0c:4b:9c:f1:30:c5:66:
                    60:34:cc:0f:84:9f:d6:29:17:36:e0:63:6f:c3:4f:
                    86:c8:17:a0:2d:a0:60:12:95:99:71:99:2c:b8:05:
                    0a:f9:76:f4:c4:f9:a8:24:c6:2d:41:c8:64:34:44:
                    91:7b:25:d5:d4:03:6d:60:b8:aa:b9:02:8e:60:aa:
                    39:23:52:37:20:e5:3f:83:f6:8e:7b:3d:66:e7:ea:
                    98:30:e9:15:5b:2a:5e:0d:8e:36:58:2c:57:7d:61:
                    14:ae:f5:6c:04:2f:37:2c:34:f0:09:75:8c:2e:5b:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:E3:DB:42:1F:29:CE:02:A8:E7:D5:E5:6D:99:36:B6:84:21:F1
            X509v3 Authority Key Identifier:
                keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:aa:98:d2:c3:8e:02:6f:5f:97:1c:3c:14:3e:1f:c4:55:
         d6:45:6d:eb:c2:b9:da:fc:e5:2a:43:ca:79:3e:61:f0:bd:28:
         1f:08:91:3b:28:92:8f:c6:c5:b8:be:ef:96:00:37:3a:b8:85:
         e6:07:af:2f:ae:84:f5:a9:58:d3:cc:47:91:1d:7a:37:aa:08:
         78:c4:11:c9:d5:4e:c4:11:c4:80:6d:e6:9b:63:7d:35:9c:99:
         a1:86:b8:fe:55:ef:30:cb:34:7a:28:92:a7:f8:e2:43:e8:6b:
         90:2b:71:29:86:b5:e0:f0:9b:be:1e:a9:7d:6c:fd:73:ff:55:
         62:06:b1:52:e0:7e:14:95:fa:88:e5:d4:5c:02:6b:c6:f7:1c:
         92:ea:16:a7:aa:0d:4b:8a:07:ff:14:a5:f9:df:f7:eb:3c:31:
         9c:69:3b:68:0e:ad:30:70:25:36:f1:90:cc:93:c4:c4:2f:52:
         ee:aa:b3:5d:06:34:8e:05:32:1c:9f:a2:c3:eb:76:f6:a2:f5:
         e2:83:40:ca:f7:c6:5c:83:c5:b6:ad:5f:66:1c:fa:fc:af:20:
         d6:d2:b3:f6:fe:25:ac:6e:c5:cf:c4:e6:4c:1e:f6:19:fc:1d:
         19:0e:76:47:f1:4b:cd:f9:17:60:7b:5e:fd:6f:7b:2f:1e:aa:
         9c:03:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:11 2026 by rpki-client