Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
File:                     AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft (raw, json)
Hash identifier:          bU6TDRD7ExVwVHOov491MHJ/boli63X8fWfTh6cc5K0=
Subject key identifier:   60:AB:19:01:C3:C5:23:D8:A4:CF:4E:37:A5:09:9C:E6:CF:91:C3:73
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Certificate issuer:       /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial:       350A29F09F1F7FAA22D841D7A23A40422910397B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 16:57:23 +0000
Manifest this update:     Fri 14 Aug 2026 16:52:23 +0000
Manifest next update:     Sat 15 Aug 2026 19:52:23 +0000
Files and hashes:         1: 3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (hash: 1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=)
                          2: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl (hash: AAcaETEMez93muEsQ3QhRILdjLq2rp+zGKxy3HZdEC4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
                          rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 19:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0a:29:f0:9f:1f:7f:aa:22:d8:41:d7:a2:3a:40:42:29:10:39:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
        Validity
            Not Before: Aug 14 16:52:23 2026 GMT
            Not After : Aug 15 19:52:23 2026 GMT
        Subject: CN=60AB1901C3C523D8A4CF4E37A5099CE6CF91C373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:0a:22:e5:93:71:9f:71:b1:8a:f9:7b:ac:
                    24:d7:12:19:10:3a:bf:c6:3b:b2:96:15:89:4a:0f:
                    b5:78:fe:3d:1f:33:67:00:1d:0e:f3:52:5f:29:ad:
                    05:81:d9:f8:c9:a2:5f:f5:1d:92:f3:c4:b2:4f:6a:
                    5c:43:36:43:79:91:18:03:c7:b0:ca:8d:47:12:cb:
                    85:10:ea:f5:36:48:af:21:7e:f5:7b:02:bb:61:1f:
                    a7:f0:de:e2:f3:67:64:05:21:6d:f4:7a:21:bd:bb:
                    e2:b3:e4:22:b8:bb:42:c2:a6:e4:a6:4d:fc:ea:8f:
                    8e:b2:4d:13:c9:5d:25:aa:55:4c:e4:4c:74:7f:a3:
                    df:e6:ca:c0:ad:ab:c3:cf:86:58:ee:c7:c4:9d:92:
                    b6:db:8c:60:74:bf:1e:3f:32:16:c1:08:1f:cc:1c:
                    76:34:c5:f5:3e:f1:c6:68:c8:af:d6:f1:51:db:ed:
                    ea:86:29:e9:44:95:36:c9:8f:9f:12:0c:0a:bf:5f:
                    ea:3b:7f:e3:35:c8:16:90:a6:21:c8:40:ac:e2:a2:
                    07:2d:88:24:4b:99:90:9a:a6:b5:c4:b6:a3:9a:b0:
                    98:91:89:2a:55:49:7f:c7:e5:59:45:3c:a5:c7:ef:
                    b4:91:1a:b4:a9:0f:17:c2:24:23:4b:02:7b:94:58:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:19:01:C3:C5:23:D8:A4:CF:4E:37:A5:09:9C:E6:CF:91:C3:73
            X509v3 Authority Key Identifier:
                keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:a0:98:a2:a6:ea:47:41:57:38:74:69:e3:84:fa:4c:cf:
         23:7f:13:d8:09:b4:5f:fe:ef:c7:1e:28:f6:f2:1d:60:bd:67:
         b6:4a:71:6b:15:88:75:af:34:58:3e:4b:7c:f5:70:e2:2e:aa:
         21:bd:ca:77:3f:f9:3c:4b:fd:5b:2a:a1:4a:d5:3a:38:e5:bb:
         d1:f7:e1:51:45:e4:39:57:6f:79:da:b1:86:a1:2d:ae:6a:23:
         ac:d4:4b:2c:a1:81:b6:09:d0:04:91:06:94:87:3a:94:3e:90:
         0f:ad:49:fc:1f:4b:f8:f1:99:68:91:19:22:94:b0:be:c5:56:
         02:42:a1:aa:b8:e3:1b:03:65:73:49:d8:d6:e6:d8:67:47:7f:
         98:b1:8e:be:35:26:32:16:55:f3:a9:c6:dc:5c:df:83:c0:2e:
         25:28:80:5a:24:8e:1b:78:8b:27:b6:29:52:54:e7:ee:a8:8b:
         db:46:8a:1e:a4:23:2b:d1:a0:08:55:43:0f:23:ec:aa:62:02:
         1c:a3:37:b0:00:9f:ef:52:d2:8d:cb:43:ac:ba:07:4c:e7:d9:
         59:71:cd:67:92:50:21:e1:40:b3:fb:41:3f:8b:f1:23:94:e7:
         31:57:92:fc:28:31:22:bf:88:21:be:42:71:38:6b:da:4a:18:
         7d:b8:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:42 2026 by rpki-client