Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
File:                     8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json)
Hash identifier:          Vmdj/Izn54JxnRVN8JIZsr981KEPLR4kafM+eAehS1w=
Subject key identifier:   B3:04:D7:6D:4C:A4:A6:61:98:EF:FA:E0:05:8C:D9:2B:E3:E4:BF:1E
Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12
Certificate issuer:       /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312
Certificate serial:       4DD4439F250B9FAB391C601778122983188AA9D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 05:53:13 +0000
Manifest this update:     Tue 30 Jun 2026 05:48:13 +0000
Manifest next update:     Wed 01 Jul 2026 09:16:13 +0000
Files and hashes:         1: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: ZYN2V+xA5pTTA1l9dzbZZM9CPu3dPWLoVmwu9a59d4I=)
                          2: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=)
                          3: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl
                          rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d4:43:9f:25:0b:9f:ab:39:1c:60:17:78:12:29:83:18:8a:a9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312
        Validity
            Not Before: Jun 30 05:48:13 2026 GMT
            Not After : Jul  1 09:16:13 2026 GMT
        Subject: CN=B304D76D4CA4A66198EFFAE0058CD92BE3E4BF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:e8:cc:14:be:ae:de:9c:b4:d6:df:80:2a:
                    cc:9a:1b:22:d1:3b:2f:95:3d:35:60:51:62:9c:57:
                    8b:c7:32:34:b6:e5:f3:28:be:45:68:22:22:e6:0e:
                    33:4c:88:89:f5:4f:e8:89:26:bf:81:ba:a8:12:a3:
                    fb:78:b5:7d:7e:fa:67:9b:19:92:5c:2b:02:3d:53:
                    44:c7:75:a1:c1:cf:61:44:78:4e:27:d6:6a:d8:9a:
                    c7:eb:82:23:13:ea:66:64:ec:2b:64:6e:e2:08:5f:
                    3b:e3:d1:af:82:59:df:42:c6:1f:e8:cd:6d:9e:c2:
                    85:46:d4:26:12:0b:5e:7f:2a:22:3f:18:72:2a:33:
                    08:76:05:99:1d:38:56:3d:00:ef:8b:82:2e:5d:e1:
                    a8:b2:64:01:ae:7b:40:fe:6b:a2:8b:75:24:59:d3:
                    1c:22:5f:5d:3e:28:c0:8b:03:24:2e:67:a5:8d:4e:
                    f1:65:dd:ce:b5:e3:e6:d9:ae:47:ca:3b:10:a9:e4:
                    3b:ce:be:2c:b8:59:cb:fd:85:db:4c:d0:7b:e7:bb:
                    02:cf:40:d4:e0:5b:ec:42:d9:60:41:13:f9:5a:74:
                    4f:11:c1:26:8a:db:99:64:59:ab:21:11:df:73:7b:
                    f2:a5:2c:43:22:cf:33:14:c1:01:12:6d:91:33:05:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:04:D7:6D:4C:A4:A6:61:98:EF:FA:E0:05:8C:D9:2B:E3:E4:BF:1E
            X509v3 Authority Key Identifier:
                keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:22:03:b5:f8:b8:37:3e:93:cb:2d:01:17:3e:2d:49:ca:
         70:ec:9f:02:d2:5b:3b:df:6e:bc:e3:21:48:57:66:89:3f:38:
         3b:ac:45:ff:1b:f1:c3:da:0e:03:2a:d2:43:b5:78:ed:25:6f:
         3b:55:7e:e3:44:20:6a:1f:43:8c:99:48:f3:a6:3d:fc:53:82:
         91:07:09:b0:43:a9:2e:bc:f3:73:04:5c:42:b9:a4:76:1a:9b:
         ec:7e:ee:03:2d:62:0d:d5:dd:b0:6c:5d:63:31:81:8e:ce:89:
         2e:16:ec:88:1f:ca:4f:13:32:c1:1d:24:d6:fe:17:65:d7:7d:
         dd:f3:26:d7:95:39:f4:8c:80:3d:e1:3a:a4:e7:24:83:9c:2f:
         85:17:88:5c:96:59:5f:f2:bc:3c:81:3b:0d:ff:64:fe:d0:29:
         33:42:1c:48:39:4d:c9:a9:d9:cd:a4:d8:0c:c0:72:bc:4b:38:
         ac:17:60:5d:3f:34:72:0e:bc:7d:ee:a0:a7:9d:7b:2a:ed:57:
         62:ae:c3:db:05:92:fe:ee:d8:ba:d2:04:13:ca:28:c1:38:69:
         8a:8d:4e:af:b5:6c:29:93:47:a0:cb:4e:d9:c7:31:15:cf:fb:
         83:ba:31:09:6a:c0:9f:b1:6e:a2:04:05:85:37:05:4e:cb:74:
         97:12:a4:af
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUTdRDnyULn6s5HGAXeBIpgxiKqdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUzMEYw
QUQ5OTMxMjAeFw0yNjA2MzAwNTQ4MTNaFw0yNjA3MDEwOTE2MTNaMDMxMTAvBgNV
BAMTKEIzMDRENzZENENBNEE2NjE5OEVGRkFFMDA1OENEOTJCRTNFNEJGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGOjMFL6u3py01t+AKsyaGyLR
Oy+VPTVgUWKcV4vHMjS25fMovkVoIiLmDjNMiIn1T+iJJr+BuqgSo/t4tX1++meb
GZJcKwI9U0THdaHBz2FEeE4n1mrYmsfrgiMT6mZk7CtkbuIIXzvj0a+CWd9Cxh/o
zW2ewoVG1CYSC15/KiI/GHIqMwh2BZkdOFY9AO+Lgi5d4aiyZAGue0D+a6KLdSRZ
0xwiX10+KMCLAyQuZ6WNTvFl3c614+bZrkfKOxCp5DvOviy4Wcv9hdtM0HvnuwLP
QNTgW+xC2WBBE/ladE8RwSaK25lkWashEd9ze/KlLEMizzMUwQESbZEzBbPpAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUswTXbUykpmGY7/rgBYzZK+Pkvx4wHwYDVR0j
BBgwFoAUjf4kG2tWQl0FMI1s+E5TDwrZkxIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFROUy8w
LzhERkUyNDFCNkI1NjQyNUQwNTMwOEQ2Q0Y4NEU1MzBGMEFEOTkzMTIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUz
MEYwQUQ5OTMxMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RUTlMvMC84REZFMjQxQjZCNTY0MjVE
MDUzMDhENkNGODRFNTMwRjBBRDk5MzEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw0iA7X4uDc+k8st
ARc+LUnKcOyfAtJbO99uvOMhSFdmiT84O6xF/xvxw9oOAyrSQ7V47SVvO1V+40Qg
ah9DjJlI86Y9/FOCkQcJsEOpLrzzcwRcQrmkdhqb7H7uAy1iDdXdsGxdYzGBjs6J
LhbsiB/KTxMywR0k1v4XZdd93fMm15U59IyAPeE6pOckg5wvhReIXJZZX/K8PIE7
Df9k/tApM0IcSDlNyanZzaTYDMByvEs4rBdgXT80cg68fe6gp517Ku1XYq7D2wWS
/u7YutIEE8oowThpio1Or7VsKZNHoMtO2ccxFc/7g7oxCWrAn7FuogQFhTcFTst0
lxKkrw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:53 2026 by rpki-client