Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
File:                     A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json)
Hash identifier:          iHOIp/sfvDM5FfixdQNUO3Jn2cSMeXsYhwul1K2MaUo=
Subject key identifier:   D9:4F:F8:FC:38:AF:EE:EF:63:7B:79:E5:83:08:A4:8B:09:39:17:58
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Certificate issuer:       /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial:       554E70E5F1EA8D8ECC99684A705FEAC83FFF6F91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 08:48:26 +0000
Manifest this update:     Tue 30 Jun 2026 08:43:26 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:26 +0000
Files and hashes:         1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=)
                          2: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: H6rGymtcYbXfGuXdD29wPZDB6ha+t+3L6vH6kymSsgc=)
                          3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
                          rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4e:70:e5:f1:ea:8d:8e:cc:99:68:4a:70:5f:ea:c8:3f:ff:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
        Validity
            Not Before: Jun 30 08:43:26 2026 GMT
            Not After : Jul  1 10:01:26 2026 GMT
        Subject: CN=D94FF8FC38AFEEEF637B79E58308A48B09391758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:e6:d6:22:27:03:c8:31:69:71:25:6e:1f:
                    d1:d0:ad:f0:57:13:e6:1a:ad:04:f2:5a:75:41:e5:
                    98:06:51:96:e2:1c:20:4e:d2:32:9d:2a:7b:93:7e:
                    d4:17:0e:c5:85:5f:1c:45:99:8c:eb:d1:ab:15:40:
                    31:b9:e3:01:3b:bb:57:20:bf:b1:f1:ce:0f:10:11:
                    c0:d0:2c:1d:d0:47:a8:4b:53:51:92:75:4a:75:77:
                    30:55:9e:0c:f4:73:56:9b:ca:30:ae:06:24:e2:78:
                    b2:f5:28:71:17:b4:8c:e8:88:04:7a:13:6d:ca:17:
                    1b:92:a2:51:dd:84:e5:f7:f0:4b:d4:90:37:bb:63:
                    dd:e6:61:4e:6a:b7:99:e2:b5:56:f9:45:d9:69:e4:
                    7c:5e:6d:1b:16:87:a1:9a:10:4c:b4:76:2a:2c:64:
                    6a:43:3a:92:2d:d2:a9:71:ad:b3:f4:cc:e5:7e:4b:
                    35:f6:b6:fd:80:d3:71:7c:5e:c4:7c:8f:ba:5f:34:
                    24:9e:a1:a5:95:4c:e3:de:aa:01:70:e1:85:98:34:
                    6e:4b:c5:ba:44:6f:5a:fa:a3:05:83:87:01:80:d4:
                    33:ab:cf:91:e0:03:0c:d1:db:a9:ed:bc:f3:54:5e:
                    9c:19:5d:fc:8b:84:e9:5e:fb:6b:4e:f0:b9:f8:cc:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:F8:FC:38:AF:EE:EF:63:7B:79:E5:83:08:A4:8B:09:39:17:58
            X509v3 Authority Key Identifier:
                keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:1b:fa:c1:6b:38:ed:f6:d6:42:93:b4:c9:c9:b0:d0:89:
         23:8d:5f:2e:9a:1b:79:ec:82:c6:e8:72:94:9b:e5:ca:ec:9b:
         cc:f3:6e:aa:d3:63:b4:68:a5:dd:c3:65:a8:27:36:99:23:9f:
         84:f6:6e:dc:4d:e0:83:54:f4:84:8e:ad:36:95:8b:a0:73:d7:
         cd:3e:bf:15:a9:f5:3b:c9:f9:75:65:50:20:ba:ea:ed:f8:1a:
         ce:63:2c:66:b1:94:c9:25:4e:b9:d1:1b:59:9a:17:c7:55:a5:
         da:db:64:05:8c:fe:43:f2:8b:eb:47:7d:9e:2d:28:1e:c9:79:
         7d:d0:31:ca:08:57:0f:a0:a6:f9:6c:dc:9e:50:d2:75:89:72:
         25:b9:ec:80:d3:62:35:e1:e1:21:d6:1f:14:6c:15:a4:9c:a9:
         ea:95:f5:f3:d9:4d:65:91:13:5e:35:69:81:49:5e:e3:d6:78:
         cd:04:e7:ef:85:a3:90:34:e9:6d:0f:a8:64:87:b6:98:23:90:
         ee:1c:61:5f:cd:e1:86:64:b0:b7:1f:51:84:af:4c:4f:7b:3a:
         7b:26:e6:0e:77:67:a9:85:80:a7:8c:fb:2a:68:9e:d4:55:b5:
         66:b0:13:bb:e7:88:db:3c:62:da:93:bc:04:cc:59:46:61:54:
         b9:4b:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:01 2026 by rpki-client