Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
File:                     AA46113BE991398466FCED33F3517720FBE1924C.mft (raw, json)
Hash identifier:          oxTCP8rQFRnm6mbzDj47ZDfRlYZxq4BuJATEuOpjaag=
Subject key identifier:   3C:67:B9:56:08:0A:B2:C1:F1:9B:07:92:AE:9C:93:78:4D:B9:E6:99
Authority key identifier: AA:46:11:3B:E9:91:39:84:66:FC:ED:33:F3:51:77:20:FB:E1:92:4C
Certificate issuer:       /CN=AA46113BE991398466FCED33F3517720FBE1924C
Certificate serial:       1E83C09AAF9447B4D50DD2FD9E7E9BDB01BEA581
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 06:47:26 +0000
Manifest this update:     Wed 13 May 2026 06:42:26 +0000
Manifest next update:     Thu 14 May 2026 08:55:26 +0000
Files and hashes:         1: AA46113BE991398466FCED33F3517720FBE1924C.crl (hash: 72a2I9K+PLrmEeNO94ozGZ2oDxJ8Pk8zsQ13c/grzy0=)
                          2: 3130332e3132372e3232382e302f32322d3234203d3e20313331363334.roa (hash: WwfRtxyQripWJlrZQW0UE6g9H5pm1iMYpnuZT9H9v2I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.crl
                          rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:83:c0:9a:af:94:47:b4:d5:0d:d2:fd:9e:7e:9b:db:01:be:a5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA46113BE991398466FCED33F3517720FBE1924C
        Validity
            Not Before: May 13 06:42:26 2026 GMT
            Not After : May 14 08:55:26 2026 GMT
        Subject: CN=3C67B956080AB2C1F19B0792AE9C93784DB9E699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:7e:1b:99:33:51:c7:16:de:1a:29:9a:72:
                    9a:c8:f8:00:0d:12:82:e0:ca:04:b0:28:e7:04:19:
                    f1:28:7d:3e:4a:f3:c8:01:5b:f3:bf:c8:2b:37:b4:
                    d9:64:7f:35:40:f5:58:bb:19:7d:28:fd:ac:b0:43:
                    0e:95:12:95:5e:2a:86:3c:77:a5:36:65:cd:7c:bf:
                    9d:24:19:bd:4f:54:ae:e9:bb:49:a0:db:60:d3:f7:
                    2c:8c:e8:12:5b:7a:10:fb:88:10:96:af:84:43:77:
                    03:04:ba:69:7e:68:54:d5:06:07:cc:f5:ac:a8:fc:
                    80:45:dc:2e:8c:19:d9:58:57:d5:fe:8b:10:50:e1:
                    05:72:ee:d5:17:1d:27:ae:21:e1:72:2d:b0:76:f6:
                    ee:58:a3:54:56:73:be:79:63:f5:71:79:91:d2:a5:
                    91:28:74:eb:a7:6a:7d:51:d5:39:cd:b3:2a:a6:a0:
                    1d:84:2a:33:94:73:72:a6:09:6b:2f:ae:75:e4:a0:
                    3e:ad:e9:51:a5:f5:20:d3:58:bb:6b:ef:7c:6b:d4:
                    7a:1a:4f:9c:9a:6c:1b:68:0a:19:7c:3b:f1:6e:2c:
                    0f:5c:d5:c1:0e:45:f1:bb:f2:c5:46:7c:28:3f:b5:
                    3b:a1:f8:b5:89:42:b2:e3:32:64:f8:e0:88:0f:7a:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:67:B9:56:08:0A:B2:C1:F1:9B:07:92:AE:9C:93:78:4D:B9:E6:99
            X509v3 Authority Key Identifier:
                keyid:AA:46:11:3B:E9:91:39:84:66:FC:ED:33:F3:51:77:20:FB:E1:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AA46113BE991398466FCED33F3517720FBE1924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MOBATW/0/AA46113BE991398466FCED33F3517720FBE1924C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:b7:c7:0b:32:c6:e1:8a:c2:b4:0a:51:21:73:9b:bf:0f:
         40:9d:9f:df:0d:80:7f:e7:46:46:6a:0e:d1:8d:26:41:4b:17:
         1a:98:10:d3:74:19:6b:23:a4:2b:07:93:5c:11:69:07:da:87:
         70:1d:40:fa:33:91:5d:6f:bb:d2:5c:1b:e1:17:53:b0:cf:fb:
         e6:6d:1b:e1:3e:72:f0:71:6e:98:5e:1a:e6:12:4f:ad:90:14:
         aa:34:6e:96:cc:4f:e8:70:db:ac:e6:e1:38:3f:bc:05:95:c4:
         33:4e:10:97:f2:c8:88:97:eb:e2:81:78:91:a9:39:16:ae:5e:
         29:60:15:ab:c5:11:ec:f8:6b:d7:9c:a8:cc:c7:52:d8:29:19:
         ad:43:4c:9c:67:17:6f:3a:ec:64:30:5a:e1:a8:f6:62:74:8c:
         69:43:b1:87:05:e1:02:8f:b0:f7:55:a5:32:8d:45:a3:2a:f1:
         16:5b:d5:8a:25:e4:86:27:7a:fc:12:fd:e7:e4:7b:bf:dc:90:
         a4:71:d7:bb:e4:76:fd:29:fa:68:89:00:37:8f:62:65:7e:55:
         f4:19:55:5e:e3:70:f2:4b:d4:a5:14:c4:e4:2e:5f:01:01:52:
         40:9f:ee:73:29:71:91:5f:19:11:e9:f1:22:a7:43:23:73:09:
         b4:e3:6f:36
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUHoPAmq+UR7TVDdL9nn6b2wG+pYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0NjExM0JFOTkxMzk4NDY2RkNFRDMzRjM1MTc3MjBG
QkUxOTI0QzAeFw0yNjA1MTMwNjQyMjZaFw0yNjA1MTQwODU1MjZaMDMxMTAvBgNV
BAMTKDNDNjdCOTU2MDgwQUIyQzFGMTlCMDc5MkFFOUM5Mzc4NERCOUU2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQH4bmTNRxxbeGimacprI+AAN
EoLgygSwKOcEGfEofT5K88gBW/O/yCs3tNlkfzVA9Vi7GX0o/aywQw6VEpVeKoY8
d6U2Zc18v50kGb1PVK7pu0mg22DT9yyM6BJbehD7iBCWr4RDdwMEuml+aFTVBgfM
9ayo/IBF3C6MGdlYV9X+ixBQ4QVy7tUXHSeuIeFyLbB29u5Yo1RWc755Y/VxeZHS
pZEodOunan1R1TnNsyqmoB2EKjOUc3KmCWsvrnXkoD6t6VGl9SDTWLtr73xr1Hoa
T5yabBtoChl8O/FuLA9c1cEORfG78sVGfCg/tTuh+LWJQrLjMmT44IgPevCHAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUPGe5VggKssHxmweSrpyTeE255pkwHwYDVR0j
BBgwFoAUqkYRO+mROYRm/O0z81F3IPvhkkwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9CQVRX
LzAvQUE0NjExM0JFOTkxMzk4NDY2RkNFRDMzRjM1MTc3MjBGQkUxOTI0Qy5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9BQTQ2MTEzQkU5OTEzOTg0NjZGQ0VEMzNGMzUx
NzcyMEZCRTE5MjRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9CQVRXLzAvQUE0NjExM0JFOTkx
Mzk4NDY2RkNFRDMzRjM1MTc3MjBGQkUxOTI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABySt8cLMsbh
isK0ClEhc5u/D0Cdn98NgH/nRkZqDtGNJkFLFxqYENN0GWsjpCsHk1wRaQfah3Ad
QPozkV1vu9JcG+EXU7DP++ZtG+E+cvBxbpheGuYST62QFKo0bpbMT+hw26zm4Tg/
vAWVxDNOEJfyyIiX6+KBeJGpORauXilgFavFEez4a9ecqMzHUtgpGa1DTJxnF286
7GQwWuGo9mJ0jGlDsYcF4QKPsPdVpTKNRaMq8RZb1Yol5IYnevwS/efke7/ckKRx
17vkdv0p+miJADePYmV+VfQZVV7jcPJL1KUUxOQuXwEBUkCf7nMpcZFfGRHp8SKn
QyNzCbTjbzY=
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:37 2026 by rpki-client