Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          DRrLi8FAGGq6W9SfS4L7uUkdQPKWsvmRS/7eHsgCU8M=
Subject key identifier:   B6:9B:35:AF:11:53:AC:9F:38:11:63:24:94:78:27:04:4E:7C:0E:98
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       4C2841C52A58E7D879C210C6888FCDCDA6A55796
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 01:42:48 +0000
Manifest this update:     Tue 30 Jun 2026 01:37:48 +0000
Manifest next update:     Wed 01 Jul 2026 05:01:48 +0000
Files and hashes:         1: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
                          2: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: ZxZa+NQMFJb0nFbCcE/H47MpJAjsOoQj2LgWjS3HFQw=)
                          3: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 05:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:28:41:c5:2a:58:e7:d8:79:c2:10:c6:88:8f:cd:cd:a6:a5:57:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: Jun 30 01:37:48 2026 GMT
            Not After : Jul  1 05:01:48 2026 GMT
        Subject: CN=B69B35AF1153AC9F38116324947827044E7C0E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:b3:e9:07:ab:75:64:13:89:d0:ab:86:7f:
                    28:d1:59:de:fe:88:a0:19:f0:f1:85:91:6d:ee:c0:
                    47:ca:c8:5f:34:0e:c5:14:35:19:cb:9c:cf:66:dc:
                    3a:93:71:36:81:fe:f3:9a:ff:47:f4:d9:29:87:36:
                    84:d2:b4:ca:67:9c:fb:c9:f3:42:7b:f5:20:83:6f:
                    0c:71:18:2e:db:ae:f5:63:19:c9:88:7f:19:3b:4a:
                    62:ab:a5:ac:ea:45:51:a2:40:01:f0:c1:7f:cf:c0:
                    d8:07:20:fa:90:60:6f:bd:24:f8:26:3c:ea:da:7a:
                    4c:5f:10:a0:7f:cb:ca:29:ad:78:24:e5:90:20:61:
                    fb:56:4e:2e:8b:09:51:db:7d:30:8a:de:33:a3:c2:
                    fa:4c:b6:74:30:db:65:ed:01:0e:7f:e5:c0:58:8a:
                    99:b3:ed:6b:55:51:a4:63:ef:6d:66:4f:23:87:36:
                    f9:f7:3f:67:dd:2d:0f:df:41:e4:79:50:31:f3:e6:
                    d1:e7:ae:23:fc:13:18:5d:33:6b:be:9f:24:d8:7d:
                    b6:5f:f6:40:fb:93:d9:df:43:9f:71:0b:d8:de:13:
                    7b:86:50:87:33:9c:50:8d:6a:9a:c0:fd:2c:26:b0:
                    c3:ff:5b:59:f1:62:3c:40:8b:47:f2:b3:8c:84:81:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:35:AF:11:53:AC:9F:38:11:63:24:94:78:27:04:4E:7C:0E:98
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:26:87:5b:88:ce:e9:4e:60:8f:98:25:d9:a5:96:00:44:
         f8:c4:15:89:2a:21:91:6f:21:62:1f:4a:0a:76:b0:ee:b3:2f:
         12:5e:71:18:2d:f3:2b:32:27:57:40:a8:ca:3d:b9:d6:52:c9:
         f1:e9:b0:43:74:16:fe:06:f3:38:62:eb:33:07:68:7e:e4:6e:
         75:95:c7:cf:92:98:59:91:34:1a:73:d5:a2:d7:e1:cd:f2:ff:
         6c:19:0e:17:22:e7:9f:69:51:c2:ef:41:3d:84:41:85:95:67:
         0f:7b:20:f2:7d:52:b6:ee:04:b5:b7:2b:a0:f6:c7:49:ff:bd:
         f7:c6:3b:41:e7:b5:23:f3:1b:ea:5b:56:02:de:81:d6:a9:8a:
         c6:4c:2e:e3:39:a1:dd:33:13:cb:27:ca:fb:7d:e4:e8:dc:62:
         c1:f5:30:74:e4:13:6b:e8:d6:89:fa:64:80:91:26:c2:a7:b1:
         27:2b:2e:cb:34:44:12:0d:18:00:a4:6e:ec:4a:6e:f2:81:25:
         94:20:6b:14:52:73:d5:c8:43:06:f5:53:94:6d:96:ef:8d:73:
         2b:c9:dd:f3:4a:61:15:9c:a1:5b:03:05:86:dd:af:5a:3b:a5:
         b2:b6:63:fe:23:f6:06:1a:b8:08:c4:00:54:71:55:6b:36:6c:
         9b:51:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:13 2026 by rpki-client