Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
File:                     D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json)
Hash identifier:          BAmpZZBSuPw4KtEtmPxhu/+xQjzmMkYz35WWDLW6UBs=
Subject key identifier:   A0:E1:47:54:7A:B5:96:C2:06:98:0A:6E:D3:62:A0:6F:78:7B:0C:6E
Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
Certificate issuer:       /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Certificate serial:       387B97945F8807BB9A07563B08AD7C411D0457F1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 05:43:12 +0000
Manifest this update:     Tue 30 Jun 2026 05:38:12 +0000
Manifest next update:     Wed 01 Jul 2026 08:30:12 +0000
Files and hashes:         1: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=)
                          2: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: sl5mF3UhXNQ2wLzjfMJbcTNMkMe7cAmAGxJ7sLVXvD0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
                          rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 08:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:97:94:5f:88:07:bb:9a:07:56:3b:08:ad:7c:41:1d:04:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
        Validity
            Not Before: Jun 30 05:38:12 2026 GMT
            Not After : Jul  1 08:30:12 2026 GMT
        Subject: CN=A0E147547AB596C206980A6ED362A06F787B0C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:b3:2a:ad:67:56:14:5d:e3:dd:0f:12:4e:
                    e5:de:72:51:3b:6b:de:5f:a6:10:5b:66:5b:82:cc:
                    3c:12:4a:12:e2:f5:40:1b:58:20:36:96:09:90:81:
                    15:28:4d:f4:e1:ef:14:c2:35:32:7f:5d:98:29:76:
                    76:9a:72:04:ac:b9:cf:c8:3a:eb:e7:91:4a:af:24:
                    6e:73:95:07:18:6d:45:be:8e:06:e7:de:56:12:2f:
                    2c:c7:c3:b5:3e:ed:ab:96:9f:39:8d:cd:9c:d9:34:
                    76:72:80:d3:69:49:b7:03:81:92:f5:a9:ff:31:3c:
                    58:74:e8:a6:88:41:0e:bb:0a:e8:79:5f:91:d8:2e:
                    93:99:65:5a:59:3d:cf:6a:4f:88:dc:88:d8:08:c0:
                    6e:66:14:93:9a:48:01:d8:cd:c2:d7:5d:8e:3a:7a:
                    b4:53:3a:8f:c7:53:d7:36:eb:14:0d:28:7b:35:83:
                    e8:8f:f1:56:b6:00:8f:45:6e:77:30:95:2f:48:6c:
                    dd:06:9c:f2:d3:cc:59:e3:cf:e2:2e:5f:ba:e8:4c:
                    73:fe:58:87:c7:c9:ae:16:59:00:7c:f0:0c:24:45:
                    bb:18:e8:02:d4:42:bb:4e:04:60:e9:1d:18:61:7f:
                    53:6d:de:dc:9e:36:a7:67:9d:10:a6:16:d5:de:e3:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E1:47:54:7A:B5:96:C2:06:98:0A:6E:D3:62:A0:6F:78:7B:0C:6E
            X509v3 Authority Key Identifier:
                keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ea:88:36:e3:59:17:25:3e:36:9a:04:d3:3c:b2:2e:b6:d4:
         48:70:10:19:d4:c1:b4:6f:88:d7:bc:86:13:cc:b6:40:28:89:
         6a:74:68:35:bf:13:1c:44:be:14:9c:c2:d8:a0:23:18:e0:d8:
         0e:10:f5:b8:9d:0a:a8:58:85:32:6b:0f:7d:ca:34:60:6c:1d:
         b9:a9:d5:be:c9:18:ba:fc:ee:32:57:18:41:0f:43:17:ee:4c:
         15:d9:75:8b:45:37:96:e0:a8:9c:0a:3e:2d:3a:20:f3:cc:38:
         2b:c3:89:a1:45:06:2d:98:ad:cc:18:67:c5:6b:a7:9d:f3:f1:
         e1:ca:2a:68:cf:d9:dc:55:68:4b:65:00:67:e5:62:83:9d:86:
         1a:73:ba:c4:31:98:71:0a:4d:34:27:f9:80:55:fb:72:3c:72:
         83:f1:a4:3c:21:8c:67:2f:e7:c2:94:26:58:a4:d7:b3:af:ab:
         5b:5c:e8:0a:8f:dd:2a:8b:6e:0e:e1:d6:83:a6:7a:50:32:3f:
         ee:70:00:fd:b6:19:4d:88:4c:78:e4:54:ac:92:05:e5:7d:ac:
         f1:c4:05:d2:e6:19:22:ab:51:9d:db:05:28:62:47:4a:85:fc:
         ed:e7:8c:bc:7c:d2:ca:33:77:3c:26:ee:ed:4e:21:a6:ca:47:
         3c:f1:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:46 2026 by rpki-client