Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
File:                     71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json)
Hash identifier:          p6+RkUDvO+mV1NDyLBJ8wQFMEEGWv8DXfivEGCrG2es=
Subject key identifier:   C3:30:6A:4E:B1:40:F8:03:2B:82:8A:FA:89:21:1B:65:A4:8D:49:29
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Certificate issuer:       /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial:       017937A1E97D04CA2DD47633E46EE7E87DA31959
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
Manifest number:          014E
Signing time:             Wed 26 Aug 2026 11:23:14 +0000
Manifest this update:     Wed 26 Aug 2026 11:18:14 +0000
Manifest next update:     Thu 27 Aug 2026 12:15:14 +0000
Files and hashes:         1: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=)
                          2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: P6ZVbddqGIWOWKT/39h8wJ8SmpR9sBX6MOuq3hU9tN8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
                          rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 12:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:37:a1:e9:7d:04:ca:2d:d4:76:33:e4:6e:e7:e8:7d:a3:19:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
        Validity
            Not Before: Aug 26 11:18:14 2026 GMT
            Not After : Aug 27 12:15:14 2026 GMT
        Subject: CN=C3306A4EB140F8032B828AFA89211B65A48D4929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:e1:b5:4b:d0:70:1b:46:08:29:63:41:92:
                    48:ad:0a:73:af:49:4b:ea:1e:f5:87:08:08:b7:f1:
                    5e:d3:39:e7:48:3d:dd:4f:f5:c5:c4:99:c5:b0:b0:
                    aa:84:5b:78:1f:36:dd:f9:aa:e3:62:47:78:77:4e:
                    c6:b8:79:06:67:ed:97:38:e7:6c:12:74:1a:de:b4:
                    e6:49:a5:00:28:59:d2:e5:d8:88:61:65:ab:13:d5:
                    56:49:1f:76:41:10:0f:b0:f2:b9:91:c9:d5:7f:32:
                    74:b2:b7:66:43:af:9b:06:2f:d3:1f:f6:50:35:0e:
                    9d:99:4f:db:ff:69:f0:4f:b9:13:40:9c:58:ab:af:
                    f3:b6:73:33:92:c4:81:83:a0:8d:9e:db:1a:f3:c4:
                    42:bf:72:d4:9c:52:8f:ff:a2:08:3b:4d:31:d8:c9:
                    ee:82:f2:f1:43:83:9f:a3:03:75:7b:0b:79:40:9e:
                    20:24:5d:e2:46:3a:04:bf:ce:b0:4e:e6:b7:58:86:
                    fe:94:61:0c:4a:ca:65:9d:53:fe:e6:1e:3b:7d:27:
                    ce:38:2b:23:ce:fc:a7:0b:62:5d:17:96:89:b6:a4:
                    e0:b5:f4:f8:c0:c6:37:92:13:e3:0e:53:32:15:e6:
                    4c:6b:f2:e6:62:c9:7a:f4:a7:2b:cc:0c:98:0a:f3:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:6A:4E:B1:40:F8:03:2B:82:8A:FA:89:21:1B:65:A4:8D:49:29
            X509v3 Authority Key Identifier:
                keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:5c:00:07:fa:65:f8:4d:f5:ed:77:a2:99:1e:0d:e8:f0:
         43:c7:df:84:f9:e8:ee:ab:75:96:55:e7:26:60:27:26:20:66:
         20:5f:cd:d9:2a:db:8a:44:3d:f5:3a:1c:1a:2e:c5:cc:65:39:
         63:75:bd:8c:6a:0e:69:73:fb:64:f9:f0:bd:78:4d:ff:77:c6:
         43:3b:43:96:58:18:11:34:1a:b9:4c:ce:47:d4:0d:a1:1d:70:
         5d:45:18:0e:4f:22:be:33:69:24:cb:06:d5:2d:45:63:a6:09:
         14:4b:88:c2:88:b6:ff:88:c5:4e:a8:60:53:ea:60:6b:d8:8e:
         64:9a:aa:af:49:bd:8c:3a:97:e9:36:59:fb:58:5a:ed:9d:b5:
         cc:b1:ed:cc:97:cc:21:8a:47:91:42:db:fb:b1:06:7b:58:2a:
         65:87:e1:31:92:b2:fa:ed:ea:9f:f9:4c:29:58:ec:da:c2:27:
         de:35:b3:9b:df:23:77:f0:c1:04:c5:56:22:79:93:89:3f:a6:
         41:bf:13:ee:6c:0d:79:0d:94:e2:2e:b0:19:fb:17:5a:ab:bb:
         33:cf:38:a6:f7:5f:cd:af:81:07:55:64:39:0c:79:2d:75:33:
         cc:52:d9:b0:87:63:2b:36:ed:61:0a:da:ee:da:7a:44:01:29:
         34:26:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:27 2026 by rpki-client