Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          IlEIaipRylNxcskPBe1DaVJRJ2Yo6dScGfrELKW/mGc=
Subject key identifier:   83:B4:84:BC:55:9B:8B:EF:C3:84:83:E2:20:16:58:77:46:FD:57:1F
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       5AAD02BBBE67E41A699224557145E2D29DDCA878
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          11
Signing time:             Wed 13 May 2026 05:07:01 +0000
Manifest this update:     Wed 13 May 2026 05:02:01 +0000
Manifest next update:     Thu 14 May 2026 07:08:01 +0000
Files and hashes:         1: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          2: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
                          3: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          4: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          5: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          6: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          7: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          8: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
                          9: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
                          10: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: HgjwwuW6+Hw51qsg+w8TJZMuqz1s+AVUBK+xE+R43/I=)
                          11: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
                          12: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          13: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          14: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          15: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:02:bb:be:67:e4:1a:69:92:24:55:71:45:e2:d2:9d:dc:a8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: May 13 05:02:01 2026 GMT
            Not After : May 14 07:08:01 2026 GMT
        Subject: CN=83B484BC559B8BEFC38483E22016587746FD571F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:4a:cd:25:22:82:f0:44:de:14:62:c8:7e:
                    1f:d4:37:03:cf:71:b9:2c:0a:1a:33:a6:61:c5:75:
                    64:22:46:43:3c:b7:d6:00:49:03:0e:4c:8e:95:00:
                    fa:29:25:d8:63:68:01:fc:8f:8c:09:e7:a9:60:5e:
                    85:85:56:d2:e9:92:6a:8f:be:a4:52:94:92:e9:0b:
                    a5:2d:dd:ce:be:06:5e:8e:77:a4:f4:6a:0b:eb:06:
                    75:ab:e0:60:70:7b:e3:42:5d:34:4c:57:08:b0:a3:
                    38:48:6d:8f:f8:fb:5b:52:2a:30:ea:51:aa:25:27:
                    5b:95:b8:e0:f0:42:33:bd:c7:ac:d0:46:70:c3:85:
                    1d:cf:9c:23:d7:2f:09:15:e8:9d:1f:ba:94:09:b5:
                    d0:44:5a:fb:f6:53:9d:86:ad:76:f3:f5:e2:6e:2a:
                    71:4d:d7:9f:a0:f2:ee:5d:4c:aa:8c:e9:04:f6:0e:
                    ae:c0:b5:bf:64:f2:b8:a6:05:bf:27:4d:f7:60:c6:
                    ba:1b:57:4e:41:3a:82:73:2a:aa:d5:97:f0:48:93:
                    2b:74:c1:94:c6:e0:2f:be:89:ed:3e:3d:b2:fb:e0:
                    a3:29:33:9c:ce:ee:e6:8c:bd:70:1c:f9:b9:b4:5b:
                    e2:a5:46:d3:61:97:a7:11:d9:76:8c:21:e9:8b:66:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B4:84:BC:55:9B:8B:EF:C3:84:83:E2:20:16:58:77:46:FD:57:1F
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:5c:d6:63:f4:58:a3:96:4f:13:3e:73:eb:3c:8b:15:68:
         8b:db:d0:48:32:8c:56:ad:e8:f4:67:77:9e:f0:7a:b4:1f:1e:
         49:f2:b5:03:a4:d2:2c:15:ee:ac:ac:63:42:6a:16:6d:ba:e6:
         7e:bb:61:e7:07:99:49:f1:7c:d4:2e:87:3e:f5:a5:e7:0c:d7:
         b4:53:94:4a:16:a0:06:8c:4e:15:4c:d3:ab:ec:9f:5e:dd:83:
         5d:f1:a1:74:c6:b1:0d:aa:02:17:81:87:0e:57:e9:5b:88:7f:
         0f:fb:aa:51:74:9a:d5:51:6c:6f:b4:aa:02:e8:ef:2f:44:b6:
         2f:55:a5:32:ba:ed:bd:38:c0:2f:e4:02:33:d8:7e:cc:09:8e:
         2c:85:a9:d8:1b:6e:2f:3b:fd:74:4e:5b:e5:ab:8e:75:28:f5:
         04:24:06:e5:f1:80:35:77:41:a0:a3:08:cb:af:ca:6f:82:c7:
         33:d1:ec:8b:2d:ef:7d:51:5e:85:60:cf:4c:31:26:62:dd:cc:
         b6:6d:cd:fb:90:37:4b:06:29:00:c6:20:ca:06:42:6e:b8:69:
         1b:2e:1e:25:22:6d:b2:84:89:e4:2a:0b:58:62:fb:0d:05:2a:
         90:09:62:02:ac:2a:77:65:61:87:38:51:08:22:a8:2b:c5:69:
         47:4e:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:38 2026 by rpki-client