Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
File:                     AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json)
Hash identifier:          Q3QyaI5Dp5wkO5PSlgvv1aJVENMFK9P1hAOvcSqTmwk=
Subject key identifier:   6D:58:70:8A:3E:4B:D6:94:F7:20:59:D1:F3:27:1A:83:D8:E3:BA:2F
Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
Certificate issuer:       /CN=AAED3548B647C9B95804411BAB19736F229C5A54
Certificate serial:       5B12FD5920CC09DC0A389DBADF3F496B83A0678D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
Manifest number:          82
Signing time:             Sat 15 Aug 2026 03:14:10 +0000
Manifest this update:     Sat 15 Aug 2026 03:09:10 +0000
Manifest next update:     Sun 16 Aug 2026 05:31:10 +0000
Files and hashes:         1: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=)
                          2: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=)
                          3: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: M76AiK/wvx6T1QLAd6TchyklmXbf559swZ3tI8dDOyw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
                          rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:12:fd:59:20:cc:09:dc:0a:38:9d:ba:df:3f:49:6b:83:a0:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54
        Validity
            Not Before: Aug 15 03:09:10 2026 GMT
            Not After : Aug 16 05:31:10 2026 GMT
        Subject: CN=6D58708A3E4BD694F72059D1F3271A83D8E3BA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:5f:e2:c9:02:eb:d3:44:6b:3c:7f:40:2e:
                    d0:0b:53:08:61:c3:4b:cc:90:5e:03:09:2d:57:e2:
                    40:53:43:a0:7f:6c:26:fd:c5:69:0c:67:55:5f:e4:
                    b1:72:df:6c:4a:73:78:38:94:7b:9d:9b:31:4b:1c:
                    01:f6:1c:b8:dc:5a:d1:80:92:e2:4b:e3:fe:7d:2a:
                    09:7b:95:69:15:42:9d:72:27:ab:a0:63:7b:39:73:
                    57:85:f6:23:6a:71:a6:db:59:03:44:04:9b:b5:09:
                    85:be:70:b7:4a:ee:fe:69:cb:10:b0:1a:5b:61:6e:
                    39:08:17:b3:ff:02:34:71:bf:3a:fa:d0:dd:11:72:
                    c4:35:2e:82:b0:e7:5d:fd:ba:c7:45:fe:1f:c8:b5:
                    e6:72:df:92:f1:02:94:59:20:19:53:4a:67:c6:d5:
                    61:1b:77:74:53:27:b0:40:24:a3:15:02:1a:cf:89:
                    fc:aa:ef:3d:52:c8:dd:fa:68:60:09:83:a4:b5:83:
                    e9:a7:fc:42:7e:d4:bb:d4:b4:b1:60:1f:63:fd:da:
                    2a:18:99:42:ce:30:3c:6e:06:3f:c5:2d:be:97:63:
                    13:a9:a7:8b:95:ce:d0:52:0c:c9:cc:ba:97:90:bd:
                    47:0b:0c:21:ce:d2:8a:19:6e:0f:b9:e1:4f:50:99:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:58:70:8A:3E:4B:D6:94:F7:20:59:D1:F3:27:1A:83:D8:E3:BA:2F
            X509v3 Authority Key Identifier:
                keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:7f:a0:ff:76:06:49:1b:75:19:ae:0d:6d:4f:2c:16:89:
         9e:09:b2:d7:23:9a:43:ad:54:aa:81:cb:bb:d7:22:10:45:04:
         cd:4a:9f:ee:a3:24:6b:b8:37:70:d5:26:68:76:51:7b:49:61:
         2c:07:1b:94:58:44:eb:e6:36:54:b3:ed:5c:00:57:44:e1:6a:
         69:f7:7e:0e:cd:e4:d0:c1:4a:6d:02:a3:46:2a:b5:71:66:c1:
         4f:7c:cf:8e:27:8e:eb:1b:3c:67:2b:95:90:06:9a:de:4d:d1:
         06:74:61:79:04:64:42:51:85:f7:2e:72:64:c4:7d:25:f3:90:
         c0:68:27:fc:fd:4b:67:24:6f:90:92:52:b2:35:49:d7:ce:1c:
         ac:7b:9d:f1:8d:7b:ea:22:0b:86:33:ba:ee:b6:30:9a:ea:16:
         a6:ee:e8:23:66:7f:af:bf:06:ac:26:01:88:f0:4a:fd:6f:10:
         f9:f9:2d:43:9b:3c:48:0c:27:36:23:11:36:2f:3d:f5:9a:25:
         b4:c2:8a:6e:30:b2:c8:8d:08:d2:95:eb:dd:82:1a:41:4a:d2:
         1a:c0:52:af:3f:db:6a:5e:26:e1:e4:da:d2:45:0f:c6:1d:25:
         3b:4a:d1:f4:d0:f5:55:7f:3e:a3:fc:26:10:24:eb:4a:de:eb:
         06:1e:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:43 2026 by rpki-client