Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
File:                     0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft (raw, json)
Hash identifier:          9tLkBI9Mn3FdlH3TA8+I3TmHi5cuJN1K4MK/SGVMUKk=
Subject key identifier:   92:5C:DC:EB:9D:21:EC:6E:71:23:3A:63:54:33:60:48:D8:BF:C3:0D
Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
Certificate issuer:       /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Certificate serial:       6A9DFB93B7B2676316C4BD6897DD3864D70B7420
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
Manifest number:          08
Signing time:             Fri 15 May 2026 14:17:29 +0000
Manifest this update:     Fri 15 May 2026 14:12:29 +0000
Manifest next update:     Sat 16 May 2026 14:25:29 +0000
Files and hashes:         1: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl (hash: La63s6LrJjtW7CSXFvMCuO2+TYDT9AaKDogQ9ACw/UY=)
                          2: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (hash: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
                          rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 14:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9d:fb:93:b7:b2:67:63:16:c4:bd:68:97:dd:38:64:d7:0b:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
        Validity
            Not Before: May 15 14:12:29 2026 GMT
            Not After : May 16 14:25:29 2026 GMT
        Subject: CN=925CDCEB9D21EC6E71233A6354336048D8BFC30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:ab:a9:b3:35:74:07:c4:98:ed:16:a2:dc:
                    65:d5:41:d0:54:66:7f:56:4a:18:8c:72:4d:43:25:
                    57:8b:0d:87:6a:8f:e9:cb:0c:0d:fa:9b:f7:dc:c2:
                    56:84:d1:31:ec:29:bd:31:24:e4:e5:95:fe:8d:83:
                    c3:fe:c3:f5:a9:34:a0:68:95:62:b4:71:54:d6:f2:
                    1d:d5:30:18:df:37:79:83:8c:38:0f:89:84:d3:29:
                    70:4f:38:45:59:bd:9f:80:54:67:9b:28:8e:dd:5c:
                    17:86:82:72:8d:bc:0c:53:72:fb:29:9d:45:41:5c:
                    b0:7b:96:59:59:3f:65:98:7f:26:7d:25:e7:73:f1:
                    db:95:18:e4:da:2d:fd:62:77:b4:14:1d:ac:15:5a:
                    cb:92:d2:b1:fc:92:0a:b9:c0:59:21:75:a6:18:38:
                    98:64:9e:09:5f:c2:9a:a5:c5:90:28:b4:0d:54:88:
                    71:95:6a:67:95:3a:a7:6e:06:58:db:4f:a9:ce:84:
                    6a:a3:b2:b2:ee:f5:d4:70:97:6c:7a:54:68:1d:d5:
                    e7:a7:fe:89:9b:62:df:f4:3d:d1:ea:6d:ea:46:b1:
                    3c:34:df:ae:6c:99:76:1d:8d:b2:12:37:d8:e0:44:
                    de:52:13:e3:c2:c1:dd:d8:37:fb:c0:1c:9d:21:0b:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:DC:EB:9D:21:EC:6E:71:23:3A:63:54:33:60:48:D8:BF:C3:0D
            X509v3 Authority Key Identifier:
                keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:d9:43:80:c5:68:68:01:17:39:15:f7:a6:4f:99:4e:0d:
         54:18:ff:b0:bc:7d:70:56:30:1b:5b:b5:d7:ca:6c:64:a0:78:
         d9:2d:bf:d9:05:e6:61:11:c3:6a:09:c7:62:22:5b:8d:35:20:
         8a:f7:7a:82:fb:44:99:58:a6:05:4d:83:70:86:53:ec:6f:f1:
         ca:39:05:f6:89:d1:4e:cc:45:a4:91:9e:58:cb:2a:e5:30:98:
         95:1f:62:26:b8:d6:2c:32:16:79:47:44:48:32:09:ed:9f:81:
         ed:7a:8f:0e:5c:ea:f9:89:b3:b5:ef:b2:01:fb:c5:0f:84:d7:
         2c:f1:72:ec:78:c2:a6:42:60:bb:a1:8f:79:84:ba:e3:3c:24:
         7b:60:76:45:3b:84:e9:52:88:02:6f:49:f7:84:ed:1b:fb:3c:
         e2:fc:bd:77:a5:bb:d3:79:bf:15:49:48:c0:df:4b:48:0f:10:
         0a:b8:27:32:22:57:fa:cc:f7:1c:d8:69:fa:b6:45:f7:b4:ec:
         b8:55:c3:bd:b2:79:95:d6:06:a7:83:89:3f:ca:38:98:9c:f4:
         4b:64:9a:51:f8:39:11:3f:8d:77:73:48:f4:13:d4:d0:a1:6f:
         a1:47:ef:37:58:37:b4:b7:33:cf:98:e8:fc:50:ed:da:df:23:
         7a:d1:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:50:19 2026 by rpki-client