Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
File:                     E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft (raw, json)
Hash identifier:          MO2gM8cxulT49KfNFOXhM96IkIjmmVIa37Tyi2USNV0=
Subject key identifier:   6A:E4:B6:8C:35:A1:47:1B:B3:FE:A5:BC:8B:0F:FB:A9:4C:65:C8:DC
Authority key identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8
Certificate issuer:       /CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
Certificate serial:       714326710120A5C8C373FDEDF4B09D95321F8648
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 03:56:39 +0000
Manifest this update:     Wed 13 May 2026 03:51:39 +0000
Manifest next update:     Thu 14 May 2026 04:49:39 +0000
Files and hashes:         1: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl (hash: PR3hpzpeX9a2465rrEWlpp2rK8ZTUM3bKqUfIc5y6zY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl
                          rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:43:26:71:01:20:a5:c8:c3:73:fd:ed:f4:b0:9d:95:32:1f:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
        Validity
            Not Before: May 13 03:51:39 2026 GMT
            Not After : May 14 04:49:39 2026 GMT
        Subject: CN=6AE4B68C35A1471BB3FEA5BC8B0FFBA94C65C8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:84:af:09:5c:af:07:4e:5e:b7:cd:b1:1b:
                    94:70:3d:a1:ff:e9:f3:1a:26:bf:d5:57:df:78:16:
                    7e:05:ac:23:55:56:98:ac:78:20:77:f0:60:44:d1:
                    82:5e:0f:83:24:00:05:93:cc:88:79:9d:88:35:b6:
                    2e:3e:1d:3b:0e:d4:d9:1a:13:de:51:4a:ce:e9:30:
                    54:11:6e:ba:d6:49:69:67:92:d8:3f:b7:cb:43:bd:
                    a9:1e:9c:e5:86:9b:ac:3b:d6:f9:11:e3:b3:23:55:
                    3e:55:7d:d2:76:b0:2c:6b:74:31:e8:7a:c0:55:8e:
                    5c:9a:18:34:84:f7:05:7e:4e:91:eb:13:6e:e8:87:
                    f9:94:68:f1:37:19:21:92:d3:10:23:f6:6d:39:66:
                    f6:c2:17:af:5c:5d:4f:61:a1:7e:2f:dc:cd:ae:ed:
                    84:a5:36:fb:10:1f:e5:b2:cd:d5:19:d3:ae:d8:29:
                    86:9c:09:fe:18:d5:fa:c3:25:1e:41:c7:20:f3:87:
                    f1:13:44:16:2d:a4:7a:96:80:2c:48:34:7b:6b:a0:
                    b4:ba:7f:fb:54:3f:78:e1:56:39:26:8f:5c:03:2b:
                    cd:49:b1:a4:51:e2:f5:b2:e1:b0:3e:bf:c2:35:3f:
                    3f:75:05:a6:b5:49:ad:d6:fa:c1:69:72:aa:d4:e7:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:B6:8C:35:A1:47:1B:B3:FE:A5:BC:8B:0F:FB:A9:4C:65:C8:DC
            X509v3 Authority Key Identifier:
                keyid:E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:54:7b:c5:94:16:90:8f:1e:e6:4a:3a:0f:4e:10:e5:4f:
         76:7b:fd:39:05:9c:8f:ca:fa:93:45:ae:69:7b:7f:ce:74:16:
         db:03:81:be:7f:2b:8b:a9:e2:91:f0:fb:13:dc:d1:c3:b4:1e:
         37:ae:88:7c:78:57:5d:fe:0f:65:6f:aa:22:66:f7:09:db:af:
         c3:c2:eb:3a:23:a9:0c:3f:ef:00:e4:99:42:29:7f:64:11:e6:
         a3:12:9b:45:82:3b:91:2e:08:fd:4c:ea:cd:1d:12:7e:31:70:
         63:2c:1f:a1:68:ee:de:40:fb:02:b1:38:9c:fc:ac:57:8d:eb:
         a8:a5:ed:81:bf:d6:9b:1f:a4:a7:ff:c5:89:3a:42:16:1a:57:
         06:5d:24:f3:dc:44:d9:a4:06:11:1e:f0:a0:12:ff:83:a7:12:
         5f:12:6f:cc:a4:c7:b4:a9:a2:67:e8:f9:ad:9d:e6:95:cf:37:
         d2:3e:aa:97:22:b1:a1:8b:c6:07:61:2e:be:65:c0:f1:d0:22:
         87:12:f4:77:99:02:14:d7:c1:c2:cd:84:7d:32:d4:ca:c4:0c:
         0d:fa:e2:52:74:b0:16:5d:39:53:b8:ee:6d:71:87:df:50:09:
         67:fb:43:92:d1:7e:7f:47:2b:35:6f:a0:bc:87:1a:32:93:5a:
         c9:9a:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:37 2026 by rpki-client