Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
File:                     707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json)
Hash identifier:          SFDdxvkvW+lzjMK9GoeXtPIrUhlCR/mJb3Kdgj/HMP4=
Subject key identifier:   B5:24:29:A5:0E:C2:47:C2:9B:1D:7D:28:5F:5E:25:17:3D:57:B9:62
Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
Certificate issuer:       /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Certificate serial:       61A2C3C3E7A93F8C62B3C1B6627B36B48CC0414B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
Manifest number:          46
Signing time:             Tue 30 Jun 2026 00:12:38 +0000
Manifest this update:     Tue 30 Jun 2026 00:07:38 +0000
Manifest next update:     Wed 01 Jul 2026 02:31:38 +0000
Files and hashes:         1: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=)
                          2: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: h8HWaSwpk18CNK60wDOY/ostTUkfofhySl7D0iojgzo=)
                          3: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=)
                          4: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl
                          rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 02:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:c3:c3:e7:a9:3f:8c:62:b3:c1:b6:62:7b:36:b4:8c:c0:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
        Validity
            Not Before: Jun 30 00:07:38 2026 GMT
            Not After : Jul  1 02:31:38 2026 GMT
        Subject: CN=B52429A50EC247C29B1D7D285F5E25173D57B962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:d5:e1:ec:1d:71:8a:2e:69:d5:69:37:c8:
                    1e:99:0f:7d:2a:a2:4e:d3:fe:1c:89:d4:16:c0:b8:
                    be:da:c3:f8:f0:c9:42:de:78:b9:57:1d:2a:0d:6c:
                    0e:c1:36:0f:af:ed:d6:09:cd:da:56:9b:63:47:ba:
                    f1:76:51:4b:c6:e1:85:c8:b3:6f:dc:ad:f9:1a:ba:
                    76:f0:00:ed:90:e9:91:c4:6f:4f:95:91:f5:b4:f4:
                    e7:c5:44:99:9a:a8:01:71:df:e8:75:34:82:38:52:
                    8c:ee:aa:dd:9b:2a:81:43:18:1a:33:9b:0c:62:df:
                    ed:a4:2e:48:57:7b:6e:f1:2e:29:e1:26:bf:0e:d7:
                    4b:3f:ff:e8:be:b8:90:c0:ea:71:01:94:00:44:8e:
                    33:3a:d7:b3:6a:98:b5:5f:7f:3d:d0:f8:10:7a:03:
                    fc:64:08:5e:d9:00:d6:34:a0:b7:fd:37:27:88:57:
                    7f:22:f7:b8:15:e3:c1:f3:05:a5:07:b0:f6:07:05:
                    a3:88:94:4f:6e:a2:d7:50:2a:f6:d5:c1:a8:c7:c2:
                    54:38:34:72:15:18:77:a4:4c:03:e7:ce:89:4c:ee:
                    c3:b2:8d:3f:85:66:29:05:09:34:d4:4f:89:ee:f7:
                    a8:8f:47:f3:25:cf:63:b7:0b:06:6f:3f:de:0f:7e:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:29:A5:0E:C2:47:C2:9B:1D:7D:28:5F:5E:25:17:3D:57:B9:62
            X509v3 Authority Key Identifier:
                keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:aa:bf:41:6b:fa:6f:bd:d3:23:ab:ba:50:45:c8:25:a6:
         73:c4:70:90:6b:15:15:22:ef:d0:e1:52:51:9a:52:00:1f:a6:
         e5:8f:ad:9b:b5:6e:21:23:0c:26:4e:2c:a4:1b:0b:1f:7d:7f:
         cd:77:53:b7:0a:26:1c:21:08:55:c2:62:a6:94:e8:ed:d5:69:
         3e:eb:47:68:28:00:87:b1:47:22:de:aa:f7:31:2f:ae:37:72:
         e2:7b:b4:ff:3b:0a:14:e4:ce:0f:2d:bd:7a:51:25:42:a7:2c:
         0c:2f:df:36:78:42:e4:a2:80:59:ab:e0:54:9d:3b:48:7e:b9:
         32:39:f1:71:6d:1c:e4:26:91:c1:06:2e:42:a5:4d:8e:90:d5:
         e5:3a:28:e6:c0:c3:8b:a2:86:44:e4:59:45:df:be:58:f5:6c:
         0d:1a:af:f5:e8:1c:1c:69:e7:4c:24:0a:7f:88:2b:56:03:17:
         2d:0e:ba:5a:51:83:50:f2:d3:21:7f:ea:6e:ba:83:67:7a:a0:
         27:03:00:aa:0f:0c:55:b5:d8:b9:b9:88:31:c8:d8:ab:c7:fb:
         40:e7:d3:f0:bb:57:33:89:a8:44:23:a5:a1:9a:65:ba:21:83:
         17:1c:31:9d:41:54:76:f4:04:a3:ec:e2:54:6e:bf:3e:b2:ed:
         3d:ce:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:31 2026 by rpki-client