Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
File:                     2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft (raw, json)
Hash identifier:          ygiZmrwKJ7Wef2jxfE5Eus+UF/UvUDtVrJmKcfb/W4Y=
Subject key identifier:   85:B1:E9:89:4F:14:33:3E:DD:D0:5D:43:05:D2:CB:8B:2A:2A:0A:99
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       4C98C245BAFBECF190DE703756EBC5FA5C3E43DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
Manifest number:          4A
Signing time:             Tue 30 Jun 2026 12:28:51 +0000
Manifest this update:     Tue 30 Jun 2026 12:23:51 +0000
Manifest next update:     Wed 01 Jul 2026 13:23:51 +0000
Files and hashes:         1: 3130332e3132352e3232362e302f32342d3234203d3e203136353039.roa (hash: 5Tf8/6KeNcrgy6JUvG6HFw++mwSYoU/UPstq8SkHoNA=)
                          2: 3130332e3132352e3232352e302f32342d3234203d3e203136353039.roa (hash: FmHmQMwwJ/NNx1Ea23G9M1I2l9BOeklXW28LFaNMNeA=)
                          3: 3130332e3132352e3232372e302f32342d3234203d3e203136353039.roa (hash: KGP6KIcV9P6yWvdW9RIZNoookZNci1EPcCE5EkDPzQg=)
                          4: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl (hash: zAR2j65OO3jQDgYvQmC7PSESD5pgMSagZThQ52aGMPU=)
                          5: 3231312e37392e3130372e302f32342d3234203d3e203136353039.roa (hash: CjGMLe+Z4zl3oKhMgAnUNX5Qzo2hJu6hNiBeWrjbWr8=)
                          6: 3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa (hash: Uem5Q3NCsbS+pBiksFlyOVkJAZV5kyuPM0+iiLLcI/A=)
                          7: 3231312e37392e3130362e302f32342d3234203d3e203136353039.roa (hash: ChYOUadKkOPkyOsEvqDqF4mp00sueJFLaUXSsLjiDAw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 13:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:98:c2:45:ba:fb:ec:f1:90:de:70:37:56:eb:c5:fa:5c:3e:43:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Jun 30 12:23:51 2026 GMT
            Not After : Jul  1 13:23:51 2026 GMT
        Subject: CN=85B1E9894F14333EDDD05D4305D2CB8B2A2A0A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:e3:00:8d:09:de:12:5c:a0:f9:50:91:4d:
                    33:23:36:70:3d:bf:e6:88:36:fd:18:14:12:7a:d1:
                    cd:d1:6f:69:c9:e5:eb:cf:d3:73:da:c7:78:30:a9:
                    5b:a1:c1:b4:1a:86:ca:70:1c:a3:0d:a8:b5:82:b6:
                    50:29:51:c0:c4:e1:8d:34:84:66:a6:bf:23:1f:39:
                    e3:71:f7:06:90:d6:df:87:a6:f2:c0:07:b3:ab:a2:
                    e2:e1:d7:d6:7e:50:00:d0:e5:69:3e:2a:b2:39:91:
                    7e:a9:d6:33:25:48:1a:b1:fb:13:82:27:06:8f:90:
                    cb:62:8a:28:88:bf:52:1d:f2:b2:13:b4:74:6c:ad:
                    2d:82:c5:30:23:f4:13:a0:b4:8a:1d:cb:be:9c:73:
                    1a:14:a6:a4:57:b8:25:7e:e9:68:73:76:19:1c:84:
                    9e:5c:3e:6b:74:f2:1e:7e:cf:29:ba:6d:dc:15:6a:
                    13:9f:d9:a5:dc:cc:44:0e:cb:df:f9:a3:5c:be:3d:
                    4d:3e:b8:19:99:60:15:92:15:98:97:cb:fb:b2:56:
                    03:3b:ae:a4:00:d4:31:d3:93:ac:20:1c:50:0c:7c:
                    ef:d4:0f:80:fc:de:47:f2:bc:ac:d3:3a:ad:08:c2:
                    0f:24:68:a0:73:c8:67:c4:73:f8:4b:b3:9f:f8:42:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:E9:89:4F:14:33:3E:DD:D0:5D:43:05:D2:CB:8B:2A:2A:0A:99
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:22:cb:68:31:74:cc:f0:51:c4:01:5c:1e:42:c5:6e:3f:
         9b:f6:ec:99:1c:89:fc:d6:37:76:0d:a8:f4:56:f9:8a:5f:e9:
         99:ea:45:52:cf:0d:54:b6:7c:e3:1c:f3:38:a4:00:9b:f8:80:
         59:53:b4:eb:88:d6:ae:03:ca:18:49:ba:50:1d:00:72:58:4a:
         fe:25:5c:21:75:90:43:7d:c2:af:f4:03:a7:cd:37:15:95:7a:
         ea:6d:ff:52:ab:27:f5:29:d4:52:e0:d1:99:cc:4c:6c:37:09:
         c8:59:bf:f6:74:99:b0:3f:80:79:f3:b5:a8:21:3d:fe:d8:96:
         c4:45:fa:66:5f:d9:33:b3:5a:2f:9e:e9:97:b7:f7:33:af:e3:
         bc:28:e1:c5:f9:f2:c4:09:b2:8d:43:83:fc:ed:67:63:d9:c4:
         98:db:84:e3:88:8f:a3:93:15:a8:ae:91:b5:9e:4a:10:d8:ed:
         d4:51:b1:ff:71:30:ef:01:02:0d:df:a4:a2:56:07:56:cc:13:
         3a:74:48:af:cb:ce:b5:d6:4e:9c:95:86:8e:d0:94:1c:e2:8c:
         dc:82:4a:b8:bc:e7:77:6a:41:23:0b:df:cb:9c:43:86:23:c4:
         f5:86:32:3b:93:62:26:d0:3e:5a:c0:da:77:3f:a8:76:16:4a:
         72:ea:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:28 2026 by rpki-client