Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
File:                     AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft (raw, json)
Hash identifier:          EWLjldwb/pX3celK3xKoEVRWXtFaglgv10AwmUlQkwM=
Subject key identifier:   4A:0B:C1:B2:3D:64:FF:BB:3D:40:F8:C3:E9:DC:AD:76:42:D6:32:86
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Certificate issuer:       /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial:       3683DC95B829FC63055968EFF97A316BF7B7E3FF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
Manifest number:          C4
Signing time:             Sat 03 Oct 2026 23:38:22 +0000
Manifest this update:     Sat 03 Oct 2026 23:33:22 +0000
Manifest next update:     Mon 05 Oct 2026 02:05:22 +0000
Files and hashes:         1: 3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (hash: 1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=)
                          2: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl (hash: eji6T4sb6qd4zB61+llLAKBR7JlzsALIXSt6/Y0gMig=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
                          rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 02:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:83:dc:95:b8:29:fc:63:05:59:68:ef:f9:7a:31:6b:f7:b7:e3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
        Validity
            Not Before: Oct  3 23:33:22 2026 GMT
            Not After : Oct  5 02:05:22 2026 GMT
        Subject: CN=4A0BC1B23D64FFBB3D40F8C3E9DCAD7642D63286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:03:47:f6:1c:af:03:71:a7:d2:93:62:24:
                    10:4b:e4:e6:32:66:7e:5a:56:38:91:44:7e:58:40:
                    54:3c:24:1f:74:29:97:be:fb:bd:78:46:51:d0:4c:
                    14:7c:c8:b3:34:b4:8f:61:db:ca:f2:f4:77:77:34:
                    0f:95:7d:e8:39:af:45:3a:d6:73:de:0f:9b:c9:81:
                    ff:f4:8a:2c:33:a8:0b:93:92:98:71:33:43:9a:9a:
                    49:c4:76:03:78:ae:7c:6d:ff:41:2b:e9:48:2b:eb:
                    e3:fe:0b:4a:c1:28:c3:37:25:86:8b:1a:d6:84:9f:
                    3b:99:d9:04:a8:c7:06:67:d3:18:19:3c:1e:a9:38:
                    26:60:6d:59:e5:03:e0:d3:55:fa:8b:e7:46:a7:0e:
                    da:3a:d4:0a:85:31:fe:42:80:b7:bc:a2:1d:83:8d:
                    2f:d8:99:a6:b1:88:0d:73:16:76:28:d6:a0:d8:50:
                    f2:ab:cc:07:28:b8:01:2b:d5:94:32:a2:b2:b8:a0:
                    f2:42:ee:bd:78:f5:40:3c:6b:90:1f:3e:62:93:66:
                    74:5e:71:63:aa:ee:c7:1f:63:01:31:61:25:a1:52:
                    b0:f2:9d:ed:01:7a:6d:53:d5:d4:9b:5f:a2:44:91:
                    dc:f0:41:66:4c:80:ad:c2:28:b9:2d:67:30:6c:ab:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0B:C1:B2:3D:64:FF:BB:3D:40:F8:C3:E9:DC:AD:76:42:D6:32:86
            X509v3 Authority Key Identifier:
                keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:58:db:45:b6:6f:25:1f:f3:14:ce:4a:cd:a4:83:07:95:b9:
         18:23:68:0a:96:a0:ae:c3:0f:f0:b2:fd:48:3f:e8:e1:c6:71:
         95:b4:44:b9:37:61:71:09:53:57:3e:2f:84:8d:87:f7:d1:3a:
         0e:1c:a5:99:78:94:8c:71:16:10:8a:b5:40:0e:a9:f3:ef:62:
         31:b8:34:d5:24:94:86:72:af:32:4a:2b:cd:8c:ae:0c:d9:64:
         5b:3e:54:b4:4a:c6:e2:95:29:25:e7:31:0a:c7:5f:8b:64:cf:
         1d:e2:b6:0c:f9:11:e8:dd:83:08:51:ea:b3:0a:3d:12:15:83:
         a7:d5:72:ee:58:4a:05:3d:30:0f:ae:70:91:7b:9b:35:0e:f4:
         79:c4:cf:6e:f3:63:ee:08:e2:02:32:79:be:67:c1:92:0f:37:
         cd:4d:f8:6e:39:61:13:93:d9:a9:b9:cc:60:b1:65:64:7d:21:
         7a:17:b8:fe:78:52:67:a8:4f:b2:e7:4a:38:7f:94:b3:b7:9c:
         b9:b5:a1:1d:4a:48:d1:a3:99:98:64:c5:27:ea:51:40:75:a3:
         ae:33:19:2a:5e:b4:84:86:e0:57:0f:2a:a2:c2:30:89:7c:6a:
         6e:19:94:c2:ea:a0:f0:3b:6f:8f:02:28:da:19:fd:18:e7:1a:
         18:3f:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:01:18 2026 by rpki-client