Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft
File:                     AE6BAF44145B748B247B352467ADFF5B9D076559.mft (raw, json)
Hash identifier:          RsXHY2vhGNBZBijqtziuU6TXUiOSuB3FuP+iuPxIKQc=
Subject key identifier:   68:C1:95:6A:12:D9:21:4D:48:73:7B:6A:E9:A1:22:8D:D7:E9:D6:B0
Authority key identifier: AE:6B:AF:44:14:5B:74:8B:24:7B:35:24:67:AD:FF:5B:9D:07:65:59
Certificate issuer:       /CN=AE6BAF44145B748B247B352467ADFF5B9D076559
Certificate serial:       5EF21674DDCFDC76A9B5324448601AD85EAC1234
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AE6BAF44145B748B247B352467ADFF5B9D076559.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft
Manifest number:          C3
Signing time:             Fri 02 Oct 2026 04:35:07 +0000
Manifest this update:     Fri 02 Oct 2026 04:30:07 +0000
Manifest next update:     Sat 03 Oct 2026 07:13:07 +0000
Files and hashes:         1: AE6BAF44145B748B247B352467ADFF5B9D076559.crl (hash: QQLLGowKW4cIwZzEh7XP5GVmMUZLLiKHJ6u0u7HwLF0=)
                          2: 323430373a396134303a3a2f33322d3332203d3e203338383533.roa (hash: ERDqezCNr45nwvyDz+Y8lRLlwPRBETgUWycHuIYfWTY=)
                          3: 3130332e3136392e34362e302f32332d3234203d3e203338383533.roa (hash: Vz7whBG6x0VP8qkXF26i/nwVlfT/wi3Xy5TlgkeXDiY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.crl
                          rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AE6BAF44145B748B247B352467ADFF5B9D076559.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 16:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f2:16:74:dd:cf:dc:76:a9:b5:32:44:48:60:1a:d8:5e:ac:12:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE6BAF44145B748B247B352467ADFF5B9D076559
        Validity
            Not Before: Oct  2 04:30:07 2026 GMT
            Not After : Oct  3 07:13:07 2026 GMT
        Subject: CN=68C1956A12D9214D48737B6AE9A1228DD7E9D6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:4d:a7:25:a0:43:ee:5f:12:02:00:c7:e6:
                    e0:f6:66:7a:72:77:77:8e:f8:df:ff:f4:ff:0d:ad:
                    a0:b0:f5:f3:cd:a3:74:a8:c4:38:d2:db:3b:16:23:
                    b3:96:d7:15:32:79:6a:ae:c9:48:e8:65:ad:78:7b:
                    1a:af:ce:41:bd:86:7f:d4:1c:83:c1:b2:03:48:b6:
                    7c:4a:80:a8:d4:15:4e:5e:a1:c7:55:44:b9:4d:8c:
                    24:4f:bd:31:cb:ab:27:5f:d7:c2:c3:2d:b5:84:82:
                    07:a2:b5:8e:a5:c6:fc:00:8f:70:af:e2:80:d1:52:
                    89:55:b1:eb:9b:bb:fb:6b:2f:7d:f4:f9:89:22:15:
                    24:21:a3:98:e1:21:e1:34:b9:7b:c0:d0:be:0f:2a:
                    28:f9:e6:a4:bd:da:91:ef:be:0b:c5:46:0c:8b:89:
                    63:3a:3a:8d:2f:51:d7:94:42:90:4a:b2:37:45:c8:
                    62:97:f0:6c:18:55:7f:04:d2:ad:42:bb:f2:c1:e6:
                    24:eb:7d:fa:39:87:fe:73:c2:6f:eb:dd:5b:b5:ac:
                    6b:cc:9f:dd:fc:e4:cc:4d:90:d8:b7:5e:27:ce:06:
                    6b:de:6b:2f:af:a3:a9:a3:90:db:54:80:b1:34:cc:
                    1e:f6:96:9b:30:56:93:0a:4e:a9:cd:df:58:79:2b:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C1:95:6A:12:D9:21:4D:48:73:7B:6A:E9:A1:22:8D:D7:E9:D6:B0
            X509v3 Authority Key Identifier:
                keyid:AE:6B:AF:44:14:5B:74:8B:24:7B:35:24:67:AD:FF:5B:9D:07:65:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AE6BAF44145B748B247B352467ADFF5B9D076559.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:f0:db:d9:3a:24:21:02:8b:7f:74:e0:f0:b0:93:82:0b:
         4b:00:ea:6d:55:8e:16:a7:24:ae:ec:e2:12:e7:3e:47:c5:15:
         fd:a6:3f:f9:c1:8d:45:c6:66:20:2c:c1:d2:c4:cd:95:7c:c2:
         45:67:05:bd:91:35:17:5a:b9:8e:fa:12:ff:3c:4a:71:a5:74:
         fc:41:e3:2e:f4:06:5a:e2:64:e7:a8:d3:95:4b:f8:ba:c5:b5:
         c7:62:53:cd:d1:ed:61:fc:e2:47:87:1a:69:92:a7:a7:b2:e9:
         a9:35:3f:39:cf:a7:da:87:fb:13:b5:32:8a:21:98:76:16:7b:
         b8:7c:7d:ef:41:f7:f6:71:23:3d:1b:60:5d:bb:77:fc:09:3e:
         87:39:5e:3e:75:21:0c:7f:e4:6d:db:34:dd:f1:2f:ee:80:3d:
         42:a9:4a:cf:04:a8:f0:9e:7e:f3:0b:81:0f:1d:b5:a8:d9:fb:
         7e:ad:0f:b3:10:eb:d0:b0:66:8d:b1:5a:51:4c:a9:70:1b:f5:
         be:00:4a:0f:b6:f4:16:f6:31:bc:d1:5a:29:e2:47:d5:8f:54:
         0d:3d:e4:65:ba:39:0b:23:16:1d:3f:4c:2b:b8:75:03:a4:92:
         e5:e6:f7:c0:fc:30:28:86:66:3a:3a:28:d0:d7:a2:3b:eb:00:
         4f:0c:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 09:52:23 2026 by rpki-client