Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File:                     3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier:          f2/k3/3+7285Jer3OEwW2F2es08UOoNRuSmKU1oWQHc=
Subject key identifier:   68:68:EB:79:7F:DC:85:54:2B:AF:DB:FC:56:07:8C:2B:B5:B4:71:96
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer:       /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial:       383E1A486BB8EE2CCF6D2A036130726CB4B14D4F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number:          08
Signing time:             Fri 15 May 2026 14:27:29 +0000
Manifest this update:     Fri 15 May 2026 14:22:29 +0000
Manifest next update:     Sat 16 May 2026 15:24:29 +0000
Files and hashes:         1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
                          2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: aZs6ePlr3ij855WZvnt0liTYcrWN5BlMAo3S/FlnGjM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 15:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3e:1a:48:6b:b8:ee:2c:cf:6d:2a:03:61:30:72:6c:b4:b1:4d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
        Validity
            Not Before: May 15 14:22:29 2026 GMT
            Not After : May 16 15:24:29 2026 GMT
        Subject: CN=6868EB797FDC85542BAFDBFC56078C2BB5B47196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:67:cc:83:18:e1:0a:50:13:e2:4a:f2:e6:76:
                    c4:d7:7c:cb:b3:6e:c1:86:9b:8b:0f:04:95:2a:1a:
                    3e:63:33:52:40:06:07:e4:14:c4:0b:f1:8e:33:2f:
                    00:58:d3:45:f5:e3:8e:8e:91:f9:8b:c4:f9:f0:96:
                    0d:67:84:d1:b3:fe:44:58:22:64:e3:30:3b:18:be:
                    17:4d:75:4c:94:d0:97:b4:20:73:13:38:ab:13:71:
                    27:15:4f:bc:f3:36:38:a5:9e:8a:a0:93:bc:43:22:
                    7d:71:93:7c:e1:ac:37:19:87:dd:c4:f1:ac:1b:86:
                    b2:cc:62:6b:71:e8:ae:ca:4c:9c:9a:4d:c9:ef:ee:
                    05:8a:61:55:3f:2a:94:6c:82:36:ca:a6:86:2d:db:
                    e6:11:e3:71:f2:13:f4:d7:62:b3:b9:03:78:95:36:
                    f9:98:d7:97:5f:bf:0a:7e:e0:40:b6:4d:f2:40:b6:
                    f0:25:aa:05:4c:19:ad:27:16:ef:f2:3a:a6:31:7e:
                    dc:65:6d:17:63:40:41:7e:f3:af:ba:b1:83:32:2d:
                    b4:fa:08:a6:d4:e8:85:4a:63:33:aa:c1:ba:50:19:
                    91:a6:35:68:39:46:a2:10:f6:32:57:b9:29:36:d6:
                    39:0d:62:74:d4:89:38:d9:7f:f4:9c:72:43:82:d5:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:68:EB:79:7F:DC:85:54:2B:AF:DB:FC:56:07:8C:2B:B5:B4:71:96
            X509v3 Authority Key Identifier:
                keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:b1:85:51:42:b8:09:a5:66:4f:81:e4:27:6b:f7:28:3f:
         bb:54:eb:37:9a:d2:64:6b:dc:6b:ab:f7:d2:90:43:3b:89:ab:
         45:20:d5:bd:38:6a:bc:ec:82:57:d4:fb:fc:d4:7b:9a:b6:2f:
         ce:66:fc:6b:39:19:30:9a:61:87:40:2c:58:88:42:2c:0c:63:
         9a:e2:c7:39:75:2c:7a:c8:69:2d:f1:dc:a6:cc:b5:70:7a:af:
         c2:0d:fd:47:19:fd:25:35:92:40:60:dd:5b:18:15:55:4b:03:
         89:87:69:10:ed:27:d1:8e:9c:99:46:b0:6b:20:b1:7e:0c:dc:
         11:01:90:83:88:45:22:88:0c:35:ae:5e:45:3d:74:ad:99:39:
         d0:60:18:aa:56:05:db:bb:8b:f5:fd:4b:a3:9a:09:f5:05:e3:
         a5:70:9f:3a:91:27:1c:89:f6:b5:50:fe:1c:be:bf:35:32:35:
         c1:5a:40:1f:88:21:48:71:b8:42:91:78:f9:03:1a:a4:da:f3:
         28:aa:e2:90:d3:f2:4a:c3:9e:f3:32:97:2d:be:81:28:71:d7:
         07:3d:9f:d6:aa:fb:50:a5:90:44:16:6f:8a:ba:bf:18:ad:68:
         28:ad:7b:ce:ba:8d:06:04:3a:99:c1:20:1a:fa:34:b9:ff:5b:
         e6:fa:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:53:39 2026 by rpki-client