Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File:                     D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier:          bnNPG8q/Vs/Lb+soGJ5A184K5Uk9bUIe8XgXnyyJFtw=
Subject key identifier:   6B:5E:7A:04:AB:BB:A1:D7:3C:52:69:0D:55:14:F3:BC:70:AA:C4:24
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer:       /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial:       3B9CEFD14925A212C057BF4700CB99FC89041484
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 05:33:12 +0000
Manifest this update:     Tue 30 Jun 2026 05:28:12 +0000
Manifest next update:     Wed 01 Jul 2026 06:46:12 +0000
Files and hashes:         1: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
                          2: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: o7TKsqbN4wMlNH6effkj3T6nglLAzJZJ3ZidNQYVkn4=)
                          3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
                          rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 06:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9c:ef:d1:49:25:a2:12:c0:57:bf:47:00:cb:99:fc:89:04:14:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
        Validity
            Not Before: Jun 30 05:28:12 2026 GMT
            Not After : Jul  1 06:46:12 2026 GMT
        Subject: CN=6B5E7A04ABBBA1D73C52690D5514F3BC70AAC424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:4c:68:7f:ce:6a:b8:c7:56:83:7b:ab:f1:
                    64:22:5f:00:00:34:83:d8:3d:97:81:65:52:1e:8e:
                    2d:65:98:1b:c1:cb:f7:8a:fb:29:97:3f:77:20:16:
                    27:df:a2:ad:ec:c3:0c:0e:d8:10:1a:1c:d5:fb:8a:
                    67:02:98:85:66:92:48:27:06:8e:e4:91:ee:01:b2:
                    20:5f:e7:f6:7c:04:e2:67:76:6c:14:0e:1b:55:ea:
                    e6:d1:9d:ab:05:97:5b:8c:6b:81:8c:52:cd:ea:58:
                    b0:f2:46:a9:20:dd:77:d8:b8:32:5b:bc:d5:7c:ed:
                    b4:26:42:01:11:a5:0d:61:88:bb:c2:8d:4e:57:63:
                    19:0c:a1:58:aa:e4:94:63:9a:eb:e3:00:b6:5d:cf:
                    42:ff:3a:3c:96:28:79:da:91:95:79:64:f0:d3:03:
                    31:0f:f5:99:a7:b8:3e:cf:1e:68:a7:59:f0:1e:41:
                    f4:ae:d2:96:09:40:a4:5c:0d:93:05:dc:e3:49:55:
                    41:9e:cb:27:78:5b:71:3c:7a:6d:4a:b0:c1:bc:8a:
                    4f:bd:9b:72:ff:b9:00:b9:e8:64:f9:78:b4:c6:b6:
                    0a:21:4b:8e:d9:3e:2d:fa:7f:83:fc:46:c9:1a:5b:
                    22:02:37:e6:54:da:ce:d6:7f:cd:36:92:af:9b:e0:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5E:7A:04:AB:BB:A1:D7:3C:52:69:0D:55:14:F3:BC:70:AA:C4:24
            X509v3 Authority Key Identifier:
                keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:af:2f:dc:5e:8f:3e:53:fe:ab:92:a2:70:45:f5:f2:1a:c7:
         7c:94:f6:7b:78:ec:c2:87:7d:16:03:89:0f:a1:4c:b6:16:7a:
         2f:6e:c0:99:b3:4b:b6:da:bc:66:9c:d1:f3:48:97:41:c5:69:
         fe:67:fe:7c:a3:12:f1:fe:79:38:72:b1:29:f1:27:40:51:67:
         ad:7d:3d:de:9d:b6:5f:0a:09:ca:be:e6:e6:3b:15:66:ad:cb:
         cb:a5:ed:82:9c:f7:7e:fd:f3:3f:dc:f2:cf:ef:a7:9d:13:35:
         65:07:60:9a:81:43:29:a2:49:49:11:8f:41:ca:60:cc:85:e3:
         af:68:c4:c4:f1:b0:0a:cd:d9:f1:36:94:70:5f:32:4e:30:b4:
         b4:05:37:d0:e8:e6:56:c2:62:56:50:74:32:02:57:91:a5:9c:
         a8:73:54:f1:11:d2:cf:bb:d5:ef:59:13:f7:7e:fe:04:3e:66:
         8b:4b:cb:f2:3f:0b:d2:0a:2b:55:46:26:80:70:0f:21:66:80:
         b0:16:c0:50:74:ef:88:94:5f:9d:81:e5:9b:e4:69:48:8f:ef:
         b2:17:00:7d:71:3d:4f:18:48:43:e9:b0:22:f8:68:25:72:e5:
         62:26:c1:55:c2:28:3d:e4:c3:7e:c1:9c:f2:5a:cc:4d:9b:b3:
         c8:27:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:15 2026 by rpki-client