Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File:                     CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier:          7fysmWEXPF5uFCHvOw3z9bz1VtudFTcF5VZeGpxru5M=
Subject key identifier:   6E:0B:F9:6C:9B:32:D0:51:92:10:3A:FB:C6:65:6A:BA:3A:97:D2:91
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer:       /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial:       688A49030A06E0E7C46F8C913A2ED3C7D9D8FDB5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 07:48:21 +0000
Manifest this update:     Tue 30 Jun 2026 07:43:21 +0000
Manifest next update:     Wed 01 Jul 2026 10:07:21 +0000
Files and hashes:         1: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
                          2: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: vjbj+MYX3x2w7Rnj1VsRZ3KDjJMN3+/R4xgsnp1+kTI=)
                          3: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 10:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8a:49:03:0a:06:e0:e7:c4:6f:8c:91:3a:2e:d3:c7:d9:d8:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
        Validity
            Not Before: Jun 30 07:43:21 2026 GMT
            Not After : Jul  1 10:07:21 2026 GMT
        Subject: CN=6E0BF96C9B32D05192103AFBC6656ABA3A97D291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:6e:bd:62:24:6a:0a:d6:0f:ff:a8:7b:90:
                    76:a7:1e:fb:01:86:d0:1b:b6:cb:bf:77:c9:4d:a8:
                    0f:f2:1f:50:47:fd:39:37:02:06:88:36:c5:72:56:
                    21:b5:49:9b:70:b9:13:08:ed:98:b8:0f:19:2b:0a:
                    0e:f8:19:62:1f:a8:ef:16:62:dc:5e:6b:a9:fe:82:
                    5e:a8:d8:3a:a8:99:49:bf:e7:f2:1a:96:5a:14:05:
                    8f:89:03:43:31:b2:cd:21:9e:e5:5a:cb:3c:ba:0a:
                    18:5b:e0:c2:ad:00:2a:42:82:f2:9a:f2:e6:4e:e5:
                    08:fe:fc:1c:6b:8d:c2:20:63:e5:7b:d5:dd:39:b2:
                    ed:1e:fa:95:da:04:72:15:f2:bd:91:73:83:f4:89:
                    d6:c3:fe:1b:69:4b:6a:6c:c1:3b:b9:0f:3c:48:25:
                    21:b9:e4:25:87:fb:84:0b:db:36:d3:8a:1c:86:49:
                    34:09:08:1d:1e:67:ea:70:89:75:ea:a5:bd:f3:a8:
                    e4:42:5e:3b:33:b3:32:41:25:e9:fe:3a:88:c2:fc:
                    16:20:ee:86:a0:7b:92:4c:ca:3b:06:70:7f:62:a5:
                    a6:4b:69:3a:84:01:bd:74:fe:f6:f2:1d:16:84:99:
                    6f:8d:71:3b:c4:ef:c6:15:3e:9a:99:f9:4c:05:9b:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:F9:6C:9B:32:D0:51:92:10:3A:FB:C6:65:6A:BA:3A:97:D2:91
            X509v3 Authority Key Identifier:
                keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dd:44:c5:37:c0:3f:ad:21:00:3c:3b:21:7d:81:4a:bc:53:
         93:ae:39:b8:85:c8:de:d1:c0:dc:af:42:48:f0:3e:fe:5c:5e:
         76:7a:0c:10:7a:11:58:f4:31:e6:b5:a2:d7:5a:d2:99:00:0e:
         cd:5d:b0:0a:36:5b:b9:fe:9d:8b:d6:8d:e5:c5:43:ca:aa:a1:
         a2:07:63:49:2b:c3:9b:38:5d:02:3f:34:8b:61:35:92:ea:b2:
         ce:08:18:f5:59:0c:d0:bb:d6:e3:2e:4e:ac:cc:02:5f:91:b7:
         8e:e0:19:fb:ec:4a:85:1a:e0:38:16:8b:e1:e1:15:20:71:67:
         25:f0:07:4d:76:bd:5e:f5:3f:e0:c0:72:96:ef:b6:0b:f4:08:
         9d:90:56:2f:8a:7e:f5:b9:4d:c9:51:88:60:82:18:90:e5:0c:
         55:01:73:63:7d:62:8b:17:fa:c1:bd:8c:12:8e:07:28:3a:58:
         51:25:c3:b2:e8:7b:16:7c:82:3b:fe:d1:e9:07:bc:8d:ad:e0:
         29:53:75:f1:2c:86:fe:66:0c:e8:2e:2d:41:12:9c:a2:76:c5:
         58:23:be:a5:46:11:8f:23:70:a8:9d:a1:99:58:d8:32:ae:60:
         73:50:5a:0d:30:3e:0a:6c:a3:8a:19:7d:7f:7b:1f:36:cf:14:
         a1:7c:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:55 2026 by rpki-client