Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File:                     0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier:          paN3y+LATbkhjyhmIcVayDxR4N1b+UTacSmNbgu6QTY=
Subject key identifier:   B5:DA:23:F3:D3:CE:FB:8E:50:F4:E5:8A:A7:71:10:62:49:DE:5A:46
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer:       /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial:       1933009BCA94A5B65456E46FED0EE1BC02E04D0B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 09:18:31 +0000
Manifest this update:     Tue 30 Jun 2026 09:13:31 +0000
Manifest next update:     Wed 01 Jul 2026 09:55:31 +0000
Files and hashes:         1: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
                          2: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: 8joLgyJqjpfZ418U8GcPGQK/UMPF0On1ZEmLWUxtwUQ=)
                          3: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
                          rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:33:00:9b:ca:94:a5:b6:54:56:e4:6f:ed:0e:e1:bc:02:e0:4d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
        Validity
            Not Before: Jun 30 09:13:31 2026 GMT
            Not After : Jul  1 09:55:31 2026 GMT
        Subject: CN=B5DA23F3D3CEFB8E50F4E58AA771106249DE5A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:18:94:4d:90:4b:be:bf:55:c0:65:6f:a6:
                    3d:8a:27:6c:7f:fc:2f:74:38:c4:b4:75:5f:35:7d:
                    af:b5:75:dd:02:46:d9:98:65:8e:3c:c8:48:e4:3a:
                    2b:9e:22:2e:11:0f:33:51:ff:cf:17:25:8e:13:f2:
                    77:f3:a7:cc:22:07:91:4a:bc:ed:64:ce:0e:4c:82:
                    c5:65:32:8c:c2:72:64:79:42:9d:a9:23:ec:a9:b7:
                    0a:72:a1:22:02:ee:fe:a6:cc:7e:92:f3:8c:85:eb:
                    88:c2:7c:30:58:f6:6a:34:26:98:b5:04:d7:28:35:
                    55:1f:78:68:d8:87:16:f3:23:a2:61:5b:fe:bf:15:
                    3b:c1:45:43:80:af:a2:dc:61:9b:aa:9d:14:a2:d5:
                    17:a4:61:10:60:62:00:0f:b5:05:1b:20:8c:d3:11:
                    b3:d3:0a:b0:75:a2:6e:3c:fd:e7:ad:2a:07:5e:e2:
                    d7:a2:48:8b:da:5e:19:a5:a9:b6:65:63:f3:31:d0:
                    4c:e2:d0:8b:91:db:54:28:0d:17:9c:aa:62:c8:e1:
                    54:aa:18:64:1c:c7:24:e4:08:61:4a:f3:ab:31:9e:
                    d4:a3:81:0f:5b:8e:73:7d:b8:54:ea:e0:95:99:16:
                    32:25:3f:ea:36:68:84:c4:30:72:ba:f6:bd:14:c6:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:23:F3:D3:CE:FB:8E:50:F4:E5:8A:A7:71:10:62:49:DE:5A:46
            X509v3 Authority Key Identifier:
                keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:91:7b:9f:2b:c3:70:b3:06:88:8c:0b:5e:8e:5d:f6:18:6e:
         33:cd:d5:b0:77:bf:9b:d0:0f:16:d8:a8:a1:b5:7f:dd:bf:7b:
         da:51:82:7b:34:3d:f5:9a:ed:9c:19:5f:dc:30:89:a9:d1:3b:
         00:3c:ab:ce:05:7b:26:34:a5:c8:91:af:ff:d3:db:64:a7:6d:
         3f:05:27:18:cd:62:56:e2:07:3e:b3:41:e3:42:70:4c:17:ff:
         de:fc:50:ec:d1:ff:2b:c4:d4:0d:b7:45:5e:92:7b:2f:eb:46:
         fe:77:96:87:e2:82:c7:4e:0c:5b:66:3a:f1:8a:f2:32:39:04:
         7e:0d:c9:6f:c6:2f:05:ce:f6:a5:43:d8:bc:65:99:e5:d9:63:
         15:09:ec:5f:f9:96:cc:21:be:b9:50:86:a5:c5:c0:29:75:99:
         bc:42:4d:d8:75:d9:1f:7d:8f:75:ea:c0:02:12:84:c2:43:53:
         88:89:64:b2:5b:77:40:e0:57:2c:bd:8d:12:17:63:11:75:14:
         9e:c6:08:84:69:50:ba:cb:7c:99:1b:2a:01:8b:d6:d3:7b:d8:
         cc:42:6b:81:ba:0a:cc:e5:70:d5:8d:12:f6:7e:8a:df:97:c5:
         1c:e2:bd:17:0f:41:e0:91:c1:14:79:84:20:45:2e:06:2a:98:
         6e:f5:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:53 2026 by rpki-client