Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File:                     3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier:          ggqF/u/+Bg14wv4wxG4CoI1gbeGr3E2BlbLB+njTpy8=
Subject key identifier:   A1:17:6B:DB:2E:83:29:5F:CA:21:63:93:7B:6C:73:C2:46:13:81:4B
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer:       /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial:       0F07F346C789D92543C1742ED05D63B4FBC7F8A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 06:23:15 +0000
Manifest this update:     Tue 30 Jun 2026 06:18:15 +0000
Manifest next update:     Wed 01 Jul 2026 10:20:15 +0000
Files and hashes:         1: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: m5tHuQzo6moQzLhTYDPnJ2n2EM0C38Ztrfq1lgB0QyE=)
                          2: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 19:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:07:f3:46:c7:89:d9:25:43:c1:74:2e:d0:5d:63:b4:fb:c7:f8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
        Validity
            Not Before: Jun 30 06:18:15 2026 GMT
            Not After : Jul  1 10:20:15 2026 GMT
        Subject: CN=A1176BDB2E83295FCA2163937B6C73C24613814B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:5a:53:37:15:37:fa:08:38:fd:a6:58:29:
                    c5:17:7c:86:d8:42:09:ee:fc:2b:73:1e:5f:7f:71:
                    ec:59:40:0b:7d:31:90:59:ec:9b:58:22:75:55:8f:
                    a4:d7:08:22:ef:20:24:f4:0e:c8:a4:cf:d8:a7:b8:
                    a0:d1:e8:44:69:16:72:fc:27:9d:dc:fa:c0:73:01:
                    37:d0:7e:d0:a0:4a:fa:f6:47:02:13:96:77:72:07:
                    ac:dd:45:63:03:0a:86:8d:1b:ce:2a:aa:30:d6:15:
                    ae:15:c0:e2:e0:cf:7e:5f:99:4c:36:24:a5:f2:38:
                    7b:73:7d:af:c6:01:02:b0:1e:c2:f7:e5:db:35:18:
                    55:95:2b:20:47:71:30:02:b9:72:13:e9:77:20:f3:
                    90:b6:1f:67:2e:a2:74:0d:63:f4:a4:f2:99:0a:b7:
                    5d:8b:09:15:bb:ac:5e:9b:36:f7:bd:e9:c2:39:6d:
                    8d:47:32:12:e8:6c:c7:cd:b8:42:b3:84:52:21:14:
                    22:0e:68:8a:96:e0:c1:fa:d6:31:33:23:f2:55:5b:
                    4e:ef:58:0b:0b:f1:1a:14:93:9f:87:6f:6a:9f:55:
                    df:72:19:2d:a7:9c:80:9e:73:c5:bc:43:74:7a:f1:
                    0e:0b:09:e5:04:b1:f8:43:2d:f1:ce:dc:0c:60:e0:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:6B:DB:2E:83:29:5F:CA:21:63:93:7B:6C:73:C2:46:13:81:4B
            X509v3 Authority Key Identifier:
                keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:31:00:34:12:5b:66:5d:11:4f:56:02:34:4c:79:ce:09:89:
         ce:4f:51:5b:1d:4a:98:9a:b6:42:3c:28:a6:0b:6d:6f:b2:d2:
         81:84:80:38:01:dc:f3:88:b8:f4:60:a0:1f:53:5e:6d:f4:28:
         e9:d2:58:07:1a:b2:4a:d2:54:12:9a:29:b2:36:e8:e8:c1:90:
         2b:b1:11:3f:28:3c:15:a0:54:28:b5:d0:3a:6a:fe:5b:84:75:
         66:0c:03:61:79:2b:de:d9:f2:b9:29:85:40:d4:53:08:ce:4a:
         96:b4:61:87:c7:e4:55:fd:c3:ef:e1:1f:9e:d5:5e:c2:d9:7d:
         b5:74:88:92:1b:36:74:df:da:99:88:67:84:15:3d:8c:62:13:
         f0:84:ae:0e:e2:5a:6d:0b:4d:38:79:4d:c9:44:8a:72:31:10:
         5a:9c:e4:3c:3b:77:3c:0c:c8:14:89:a9:64:3a:17:94:f1:b5:
         e4:76:bd:6b:98:d4:35:78:11:1a:ff:dd:e6:5f:ba:b8:09:78:
         91:fd:7b:fd:1d:b9:87:9c:4c:53:32:35:38:3e:3a:d0:9f:c8:
         31:a9:81:60:f5:83:a5:a1:2d:f8:fe:58:ff:fd:1d:58:5e:30:
         5e:c9:c0:84:be:92:db:97:1d:ed:78:17:cf:33:71:fe:39:64:
         20:35:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:47 2026 by rpki-client