Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File:                     EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier:          tY9tZdkZ+V3uenrByDxoH5fIGGnnYY2AUX1KiLi4XyQ=
Subject key identifier:   35:09:9D:B7:6E:EB:43:56:32:84:23:B3:EC:80:76:E0:C3:F8:41:35
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer:       /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial:       68C364DD18495D49E284D8FA6BD926D6A74E1FB7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 06:07:13 +0000
Manifest this update:     Wed 13 May 2026 06:02:13 +0000
Manifest next update:     Thu 14 May 2026 06:47:13 +0000
Files and hashes:         1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
                          2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: 1WC5DKTmz6AtYWfs+4WOA98kCuyTTlw1M5DK41q0tAg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
                          rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:64:dd:18:49:5d:49:e2:84:d8:fa:6b:d9:26:d6:a7:4e:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
        Validity
            Not Before: May 13 06:02:13 2026 GMT
            Not After : May 14 06:47:13 2026 GMT
        Subject: CN=35099DB76EEB4356328423B3EC8076E0C3F84135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:d6:d1:c5:49:bb:d2:c9:89:b9:92:d3:b5:
                    a5:d0:b4:16:d8:fa:f4:7f:66:3d:fe:e1:5f:70:6d:
                    f7:5c:86:3a:51:29:4b:e2:ca:a2:53:a0:2b:02:34:
                    e7:83:8f:7e:e0:b3:2d:6b:05:3b:bc:5a:61:40:12:
                    b1:b6:e7:2c:5d:59:72:22:73:4b:fd:1f:9c:de:b1:
                    95:d9:93:6b:a8:72:1a:ad:32:a2:39:89:e0:1c:05:
                    f1:4a:aa:58:45:4b:f5:55:99:9a:b2:bd:e5:26:c1:
                    22:00:ad:fb:16:03:85:08:b6:ba:2a:70:62:bd:12:
                    84:a1:52:40:08:45:2b:2f:1b:0c:f7:d6:2e:d6:21:
                    a8:60:9f:f9:53:0c:0e:44:94:f8:72:05:e8:20:c3:
                    6f:5f:bc:c7:0c:cc:a6:20:4e:02:c9:99:82:16:41:
                    49:b3:58:9d:93:e9:5a:a0:21:5c:eb:1c:73:ba:c9:
                    42:49:25:e1:29:37:fa:aa:1a:48:02:70:d7:b0:a1:
                    b3:d9:cc:c2:4d:6e:db:34:e2:04:cf:01:dd:d2:29:
                    bf:87:ad:dd:39:46:08:b5:90:73:53:20:25:f8:be:
                    0b:43:10:6a:e4:6d:f8:d0:07:26:6c:81:43:98:64:
                    55:22:a1:2d:df:88:c0:12:c4:89:12:da:25:5e:8d:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:09:9D:B7:6E:EB:43:56:32:84:23:B3:EC:80:76:E0:C3:F8:41:35
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:45:3b:ac:27:22:b5:64:8e:9b:15:70:53:b7:82:d6:6d:
         32:36:4d:51:54:48:ba:45:95:b3:65:55:64:e0:c2:ed:f2:9d:
         15:29:18:5c:97:78:a2:9e:a4:84:23:46:c9:4a:41:25:a1:b4:
         8e:25:19:ab:c8:85:89:f2:c0:bb:9d:f1:42:e2:3c:cd:bd:55:
         15:68:db:94:21:95:81:aa:04:70:f1:a2:0f:2e:35:a5:2b:61:
         3c:a5:f1:0a:03:f1:f0:3a:79:c1:6f:ad:7a:07:e3:47:c8:fb:
         9d:89:dc:82:05:7c:89:d1:6d:02:a8:25:28:4b:c6:42:5f:58:
         5e:6d:c2:ed:6f:b4:a8:45:bd:9a:91:b1:34:c3:cd:3c:6a:1d:
         e1:b2:30:08:6c:6a:0b:df:29:cd:df:06:15:d8:52:0b:9a:13:
         69:c5:eb:90:d9:88:3c:47:3d:9e:5f:fd:0e:12:69:cc:bf:26:
         43:cf:c7:df:58:a2:72:0b:9a:70:bd:e9:7f:6b:27:14:7a:5f:
         14:a6:dc:ea:06:91:8e:47:aa:42:f6:16:d5:de:f6:7e:78:cc:
         b7:1c:4c:92:cd:21:d1:35:5d:81:73:43:e3:cf:65:57:3c:5d:
         3e:99:c4:41:d0:34:04:bf:30:39:92:19:c6:8f:1c:cf:5c:e5:
         d0:c3:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:31 2026 by rpki-client