Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File:                     3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier:          x9M3eM+9IsW/rGj5KDOaasex5qWeLY+LWSPSNxN0ugg=
Subject key identifier:   B1:0B:1D:30:4F:5F:B6:38:93:47:BF:F3:47:AE:5F:B4:43:87:2C:E4
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer:       /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial:       4472DAE4AF473ABA751A2D02473879B6845B87A7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number:          80
Signing time:             Fri 14 Aug 2026 18:37:45 +0000
Manifest this update:     Fri 14 Aug 2026 18:32:45 +0000
Manifest next update:     Sat 15 Aug 2026 18:50:45 +0000
Files and hashes:         1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: hMnM2CvipdD7LWLsum5oKscTMveztwQ0dSGzvra1cHY=)
                          2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
                          rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 18:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:72:da:e4:af:47:3a:ba:75:1a:2d:02:47:38:79:b6:84:5b:87:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
        Validity
            Not Before: Aug 14 18:32:45 2026 GMT
            Not After : Aug 15 18:50:45 2026 GMT
        Subject: CN=B10B1D304F5FB6389347BFF347AE5FB443872CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:92:76:64:db:c5:f9:60:13:03:ed:d4:d4:d7:
                    8d:9c:19:4e:6c:03:0c:ee:a0:dc:a8:79:d7:43:ca:
                    15:b9:25:3f:3f:17:15:7d:92:50:3b:da:d1:57:3b:
                    bd:5e:77:17:f9:d4:17:96:2b:6c:33:f5:9c:ff:6c:
                    e7:c8:a0:c7:af:a7:f6:17:8d:ed:15:f1:46:ce:e5:
                    d3:3e:b1:9a:18:2b:c7:24:60:fb:20:0e:8c:2d:8d:
                    17:25:a2:92:3d:ac:d7:6b:bd:6c:1d:bd:ff:92:87:
                    a8:93:f6:f2:8f:4d:19:9d:5e:8c:b7:de:bd:4f:85:
                    c5:63:00:4f:28:37:33:18:4d:6c:68:ac:ce:34:f4:
                    93:4a:9b:02:b4:15:39:e6:0c:ec:44:8f:fb:86:0c:
                    83:92:41:9c:aa:6b:28:42:e9:28:ed:70:2c:76:ae:
                    c3:50:63:44:89:66:67:f6:c6:fb:81:39:8f:b0:ac:
                    a4:d1:a0:17:a9:7a:a3:21:5c:67:13:ee:6b:64:da:
                    e0:4b:c4:f9:54:ad:0f:66:3f:98:cd:21:7e:c4:f0:
                    d6:72:f3:6b:e3:41:3b:6f:ed:f6:7b:53:4d:b5:e8:
                    80:21:87:5c:2c:b3:04:f7:88:d7:af:fd:4f:e6:99:
                    51:88:ee:43:ed:d5:7b:4d:b6:0f:28:26:93:e1:a1:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:1D:30:4F:5F:B6:38:93:47:BF:F3:47:AE:5F:B4:43:87:2C:E4
            X509v3 Authority Key Identifier:
                keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:dc:01:1e:11:41:e3:4c:b1:37:cb:c6:3e:46:c3:ef:cf:
         35:32:6a:1c:28:21:b0:ca:61:88:08:5a:53:97:85:80:30:85:
         ab:95:20:df:31:86:08:1a:87:bb:67:01:ca:8b:e4:b9:b5:11:
         ee:d7:37:aa:14:32:15:77:5d:84:a7:bf:c6:95:27:5a:c3:d4:
         e4:c3:4a:30:fb:b0:fa:19:38:a2:0b:e1:a5:2f:aa:2d:30:15:
         18:12:c4:08:e1:de:b3:5a:dd:70:c9:09:af:2f:37:3b:03:34:
         d3:50:e1:73:4f:9c:4d:c4:0e:c5:71:49:75:bd:19:8b:c0:c0:
         5f:97:46:fe:89:6b:d0:e6:ac:ec:2d:9c:97:4e:f4:96:a7:30:
         68:8c:af:32:42:ec:dc:cd:38:c2:4b:a3:f4:8e:50:1b:1b:7a:
         bd:e2:34:c5:28:ab:18:b3:9e:fe:a6:b8:05:80:54:3d:04:8c:
         27:7c:e3:08:91:f7:8c:97:bd:0e:24:96:53:eb:dd:20:e0:17:
         51:e5:92:b1:33:14:f1:c3:24:3b:07:c5:f9:cc:8f:77:71:b4:
         a3:76:5a:b5:a5:f3:52:4e:f8:c4:38:c6:9e:47:cb:49:50:85:
         27:b5:9b:0f:4a:e4:fa:d8:8a:ce:92:7b:cc:56:09:40:fb:cb:
         d1:9b:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:21 2026 by rpki-client