Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
File:                     71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json)
Hash identifier:          PU/Co0fhGR1mwspffOZRyYUJTi2yTYsPPPYG2GG++Sc=
Subject key identifier:   4C:E5:5F:51:0A:09:7E:CC:2B:18:B5:D8:E7:0A:21:ED:AA:0D:F3:9C
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Certificate issuer:       /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial:       14F0FB15D0F370AC4985A24DA2154662993191F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
Manifest number:          D6
Signing time:             Wed 27 May 2026 14:07:56 +0000
Manifest this update:     Wed 27 May 2026 14:02:56 +0000
Manifest next update:     Thu 28 May 2026 14:44:56 +0000
Files and hashes:         1: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=)
                          2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: fa4kZPWAfty19ZXb4jFjcBt8lG69JWUMvAP4RFPcoCY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
                          rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 12:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f0:fb:15:d0:f3:70:ac:49:85:a2:4d:a2:15:46:62:99:31:91:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
        Validity
            Not Before: May 27 14:02:56 2026 GMT
            Not After : May 28 14:44:56 2026 GMT
        Subject: CN=4CE55F510A097ECC2B18B5D8E70A21EDAA0DF39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:0a:03:2a:d8:cd:05:ae:f7:c2:25:d2:fb:
                    24:bf:94:bf:8b:0a:88:b9:67:8a:1f:a6:12:84:13:
                    26:df:95:de:70:06:5f:84:29:e2:3d:9a:01:d1:99:
                    4b:85:fe:69:f6:2b:92:16:70:8a:60:9d:53:d6:eb:
                    40:48:4d:0c:d3:cd:ac:dd:e7:5b:a3:e3:64:b5:e6:
                    ca:f6:5e:a6:d8:0b:a9:90:0e:f0:41:e6:f2:9f:42:
                    1a:63:0c:02:a9:11:ba:93:42:b6:1c:d2:d1:0e:47:
                    b6:8b:b0:46:0a:0e:02:b6:74:a3:bb:c9:57:f9:57:
                    0c:70:d4:73:6e:61:86:24:d3:39:68:e1:ed:1d:a6:
                    69:9e:5b:67:a4:a6:4c:16:88:67:e3:f5:31:0e:10:
                    71:73:29:29:51:f8:0f:e9:e8:ae:8d:32:53:f7:5e:
                    1f:33:9e:53:86:3d:78:0d:63:af:ad:15:7f:e0:34:
                    34:d0:f7:00:1a:cc:d0:11:76:1d:b0:45:fa:23:da:
                    65:4a:a9:af:e5:43:80:c5:a5:e8:b1:fb:6e:94:7b:
                    2c:14:50:16:91:13:12:ac:da:c0:98:81:7d:b1:ad:
                    f9:4f:cb:6c:79:34:f6:e2:77:90:25:40:64:0c:d4:
                    a3:be:a5:57:73:38:64:b9:41:79:12:fa:96:32:89:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:5F:51:0A:09:7E:CC:2B:18:B5:D8:E7:0A:21:ED:AA:0D:F3:9C
            X509v3 Authority Key Identifier:
                keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:b7:ec:e7:80:90:01:61:43:43:8f:c7:14:5b:a2:d0:0b:
         b1:4d:cc:0f:61:cf:ac:3b:f2:2c:33:5e:f5:fb:0f:85:08:5a:
         0e:51:a7:a6:1a:05:e2:3a:6a:3b:92:17:73:d0:8c:12:b8:4f:
         57:13:22:97:c0:c5:b3:f7:30:7d:0b:65:23:c9:26:00:58:70:
         a4:96:9e:6f:ec:2e:dc:ac:0e:8d:e1:c1:65:c4:0c:e1:0d:d7:
         49:84:59:57:a5:30:7a:72:f9:a1:93:3d:33:75:8e:c3:b8:5a:
         cb:eb:0b:f2:16:1b:2e:7b:15:20:32:89:f2:78:a4:12:aa:ec:
         91:db:42:6c:3a:ad:5d:db:99:e5:57:22:4b:fa:55:b1:6b:b9:
         67:d6:70:08:33:f6:dd:40:3d:51:68:0a:46:a5:e6:42:9c:4d:
         3c:f0:7b:50:1c:cc:27:e6:59:44:89:15:30:f1:5e:05:94:e0:
         dd:16:73:57:3c:7b:62:ba:66:98:21:93:f9:a8:55:94:c5:f8:
         02:cf:04:d6:1b:9b:8a:e1:6f:37:2a:4c:d5:f8:5f:5c:f9:29:
         fe:52:91:f8:20:d0:73:34:53:b4:31:23:79:6e:52:24:d0:bd:
         3d:ca:5a:eb:03:f7:1e:6a:fe:46:86:39:d9:84:65:63:86:01:
         25:1d:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 07:16:49 2026 by rpki-client