Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File:                     034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier:          +vUJYYpO6Zc3TFH2GG2ReLRtwj3CachtxOdW5IFiMQk=
Subject key identifier:   6D:EF:7A:46:FD:69:0D:21:89:35:B6:C7:01:FB:C6:56:27:DB:59:D0
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer:       /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial:       7175570E6B70E5DB877118BBDA77FD2F0790C12C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number:          80
Signing time:             Fri 14 Aug 2026 12:31:48 +0000
Manifest this update:     Fri 14 Aug 2026 12:26:48 +0000
Manifest next update:     Sat 15 Aug 2026 14:46:48 +0000
Files and hashes:         1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: sOt4mPqCmqFiYLt1pZ5q7c1uOTXjdyvTzqem1TrUC7k=)
                          2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
                          rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 14:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:75:57:0e:6b:70:e5:db:87:71:18:bb:da:77:fd:2f:07:90:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
        Validity
            Not Before: Aug 14 12:26:48 2026 GMT
            Not After : Aug 15 14:46:48 2026 GMT
        Subject: CN=6DEF7A46FD690D218935B6C701FBC65627DB59D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:c0:4b:fb:bd:eb:74:18:30:89:f5:42:ab:
                    98:4f:c4:f4:61:b9:a3:0b:bd:f5:fa:84:d7:3a:e5:
                    c1:f3:d5:81:d9:30:0d:78:5a:9f:13:5a:3a:63:bb:
                    d7:0b:e7:89:ba:85:9d:7a:1c:72:03:f3:70:f0:92:
                    0e:ed:81:2d:ce:b5:8c:c7:1a:56:82:00:16:7f:36:
                    b8:5b:74:39:47:c3:68:04:c0:ed:40:45:39:77:10:
                    6d:9d:e6:34:7a:f7:6d:66:bd:e6:95:f7:d3:b5:ff:
                    c8:cf:22:26:29:87:99:c9:c4:87:ea:50:61:e1:e8:
                    9b:a9:6f:88:56:bb:51:a9:18:0b:df:a4:6d:db:be:
                    5b:c8:ac:79:71:3a:03:06:ca:e5:55:66:b1:b3:9e:
                    52:c9:2e:49:b6:35:a6:ce:4d:79:32:f9:12:ae:a5:
                    67:21:20:f2:89:3f:bb:bb:64:47:3b:ce:6d:30:33:
                    a9:84:c7:db:00:15:d3:af:37:d3:67:a0:40:b0:cb:
                    69:e2:6c:3f:4f:c1:d0:c8:b2:a9:89:d1:09:58:a4:
                    cd:1e:78:7d:eb:9e:21:c8:bd:ab:c3:f4:01:70:e3:
                    16:f0:64:85:30:ca:e9:de:7c:a2:90:cc:18:e9:9f:
                    22:af:44:c6:a3:16:f9:fb:71:c6:87:86:9a:aa:8d:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:7A:46:FD:69:0D:21:89:35:B6:C7:01:FB:C6:56:27:DB:59:D0
            X509v3 Authority Key Identifier:
                keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:00:ae:9f:b5:d3:e2:5c:52:82:08:22:08:96:ff:57:fd:42:
         4c:e0:22:48:25:19:27:3f:70:e4:e0:12:5a:e9:6c:39:7e:9c:
         91:2a:38:03:90:24:16:f7:32:32:28:ec:e2:2b:bf:0d:92:34:
         b9:12:8e:5e:bc:ed:ba:cb:87:09:1a:35:0f:7d:75:2e:c8:46:
         26:64:33:af:bf:c5:4b:ae:22:70:9b:55:98:7c:1a:29:92:e6:
         8d:2d:40:8f:7e:9b:4a:16:b4:b7:9d:c1:60:65:a2:83:e2:e6:
         a4:74:d3:c3:1f:82:65:80:27:90:9c:80:24:bd:7f:7e:96:86:
         5f:83:c9:08:85:1c:ad:43:5f:03:12:bb:33:52:8f:1d:cb:b2:
         72:bd:68:86:54:af:dd:65:17:4c:1e:04:a8:2c:32:a4:fb:b8:
         47:70:82:c3:4a:f9:67:c1:46:46:ba:29:af:04:75:c7:8f:c0:
         e5:aa:02:69:32:a6:d7:24:ad:69:0c:0b:8d:15:5d:2a:3f:77:
         2e:01:9f:bf:77:ce:c3:8e:c4:e4:59:46:3d:5b:cf:1f:c6:fa:
         63:aa:e7:c1:26:b9:0d:40:67:64:70:8a:89:0d:56:59:7b:75:
         12:be:13:8a:89:1e:e0:c2:0d:10:e2:66:fe:ad:01:3f:b3:08:
         f1:2a:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:51 2026 by rpki-client