Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
File:                     DF363D7461650156F76A26CBA12EB3420DB3D849.mft (raw, json)
Hash identifier:          f245fgAggFcXF5IqwJK/UNOtaewwZmhpwN+BjzbBN0U=
Subject key identifier:   9A:7F:65:0E:1C:DD:96:CD:18:19:63:E7:FB:EF:67:42:E2:4C:ED:A5
Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49
Certificate issuer:       /CN=DF363D7461650156F76A26CBA12EB3420DB3D849
Certificate serial:       15FED9AF2ECD18ED811A096261B9211E26DE69D8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 03:41:36 +0000
Manifest this update:     Wed 13 May 2026 03:36:36 +0000
Manifest next update:     Thu 14 May 2026 04:12:36 +0000
Files and hashes:         1: 3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (hash: ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=)
                          2: DF363D7461650156F76A26CBA12EB3420DB3D849.crl (hash: D1Dbc8Z9zY7s4Rln9F9wojvl+SgKJ1qQGDi4kJiNK64=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl
                          rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fe:d9:af:2e:cd:18:ed:81:1a:09:62:61:b9:21:1e:26:de:69:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849
        Validity
            Not Before: May 13 03:36:36 2026 GMT
            Not After : May 14 04:12:36 2026 GMT
        Subject: CN=9A7F650E1CDD96CD181963E7FBEF6742E24CEDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:f1:c6:49:d1:dc:59:36:51:59:11:a2:c1:
                    31:8a:e8:7b:cc:1a:2f:7d:18:bb:64:c5:3e:3f:8c:
                    9e:15:b2:12:c8:89:a0:41:b0:82:20:72:8a:8d:b1:
                    ad:41:79:46:b3:8f:a8:24:15:e1:78:7b:41:0e:a4:
                    c9:cd:85:6b:66:f1:db:5f:ad:a4:37:86:20:ab:af:
                    ff:c7:8b:b4:28:ba:b8:e8:68:21:17:02:bc:af:b5:
                    7c:73:35:1d:f6:4f:f2:b8:60:c4:4f:4e:0b:37:1b:
                    c8:56:9e:36:94:e5:96:66:22:ca:29:e3:62:7d:5e:
                    c1:95:7a:aa:30:d5:8e:8e:6b:39:c0:9d:8d:a7:bf:
                    ff:32:3b:35:ca:93:b2:eb:82:b8:85:14:74:61:26:
                    16:c5:60:d6:d8:e3:a3:e9:31:27:73:9c:83:2a:dc:
                    6c:44:2f:4f:70:e9:08:d2:a8:da:e4:0a:56:d6:ab:
                    5c:ad:0f:08:07:64:e4:87:ad:45:5f:f3:4d:c0:c7:
                    52:1a:87:ad:b1:4a:11:e1:50:42:43:28:b5:19:f5:
                    7e:84:f3:4b:4b:16:4e:47:1d:37:2b:98:fd:5d:68:
                    e1:ae:7d:89:35:35:1a:65:53:78:71:91:1f:1b:eb:
                    fe:f7:c8:a8:96:21:96:9e:96:7a:30:92:10:54:e4:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:65:0E:1C:DD:96:CD:18:19:63:E7:FB:EF:67:42:E2:4C:ED:A5
            X509v3 Authority Key Identifier:
                keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:23:e6:95:53:19:08:bd:c5:96:ae:4e:99:33:76:69:04:34:
         5c:7c:17:76:78:bb:28:d5:a6:27:77:f1:02:02:14:28:7f:8b:
         6d:36:2b:52:cc:9f:73:6a:85:3f:af:a4:fd:36:3d:41:c0:c6:
         b3:1f:29:2a:03:5f:00:d5:40:1e:2e:5a:bb:50:85:01:e6:83:
         46:24:62:68:35:62:f7:66:1c:7a:f3:ca:82:c3:bb:02:99:be:
         35:00:9d:05:65:d0:bf:85:42:6c:c4:fc:0a:2a:f9:16:e2:d5:
         bb:c1:06:3a:0a:6f:b1:94:67:56:27:51:bc:71:8b:fd:43:70:
         cb:29:f8:3f:58:9a:68:d5:60:bd:6b:d9:b2:6b:d4:d1:43:43:
         e9:0c:2a:30:27:06:64:bc:88:4d:2f:8f:4c:91:9b:8d:9b:26:
         3c:7d:a6:72:32:3f:0e:1f:39:3e:bd:8f:ab:cd:6c:40:c2:39:
         4b:5c:a6:7b:62:93:fd:e7:22:bf:e2:d2:44:b1:19:3a:69:31:
         df:e3:a7:fc:09:73:bd:8b:8d:c5:7b:e7:18:98:d3:c4:c3:35:
         f0:87:fe:05:4c:a3:44:a1:9a:38:8f:54:b5:de:f7:8c:cd:c9:
         53:39:9c:31:4a:38:8f:61:78:01:2c:c6:e2:62:3c:88:b2:23:
         68:46:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:27 2026 by rpki-client