Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
File:                     6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft (raw, json)
Hash identifier:          qMncsJfA2sqA22CroFGJNzRwYOAaki/4fBH9TCqOKkE=
Subject key identifier:   0B:E9:E9:EF:2A:09:7A:5A:66:FF:5B:17:7A:DA:56:5D:14:BB:A6:5C
Authority key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
Certificate issuer:       /CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
Certificate serial:       0315098A9C2934E8EE6FB5834E930BE593D80014
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
Manifest number:          45
Signing time:             Tue 30 Jun 2026 14:24:08 +0000
Manifest this update:     Tue 30 Jun 2026 14:19:08 +0000
Manifest next update:     Wed 01 Jul 2026 18:08:08 +0000
Files and hashes:         1: 3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa (hash: P5QLHoBtt6SbxYucP/7Z4dIJgiwE8f3I3JbpUYs0g0M=)
                          2: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl (hash: nGsmob7S4dqW5Xj8M/FtU63IKaPhe5Vvps4cuPWdBK8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl
                          rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:15:09:8a:9c:29:34:e8:ee:6f:b5:83:4e:93:0b:e5:93:d8:00:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
        Validity
            Not Before: Jun 30 14:19:08 2026 GMT
            Not After : Jul  1 18:08:08 2026 GMT
        Subject: CN=0BE9E9EF2A097A5A66FF5B177ADA565D14BBA65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:fa:af:6f:c6:b6:1f:8a:2a:23:db:fd:7a:
                    87:16:f7:6b:60:2e:3c:ae:14:bc:61:33:37:66:24:
                    8e:7d:4e:e0:8d:76:eb:74:c4:8e:1b:f4:1f:8d:ff:
                    51:6d:69:3b:3e:46:d8:8a:5a:72:4d:15:f7:62:13:
                    d2:23:70:66:48:0b:ce:3f:44:f4:84:e4:3d:25:0f:
                    d5:04:50:7c:a2:7f:2b:0d:30:97:16:72:a3:0e:43:
                    db:04:c7:5c:43:37:4e:98:2e:39:8b:2f:88:f7:9f:
                    cf:45:b0:70:bc:18:23:53:77:40:77:f7:6e:0b:02:
                    54:8e:07:77:af:eb:55:dc:a9:04:c9:64:15:f7:6d:
                    fb:bf:4c:64:48:aa:b9:d7:01:0c:ba:19:17:55:a7:
                    36:02:ab:22:ea:27:07:8c:94:9a:76:90:79:9f:9f:
                    5c:b9:c7:cd:e4:31:07:57:81:51:62:29:87:9a:54:
                    a7:87:30:02:76:2c:6c:cc:c7:c1:c7:e4:4e:8f:b4:
                    d4:7c:4b:9e:67:1d:d8:7c:d2:dd:21:9d:c7:99:4a:
                    17:75:67:d0:85:21:4b:cb:b3:8d:8e:00:1f:b1:7c:
                    9e:0b:00:9f:3b:9f:35:cd:7c:b1:6f:14:c8:30:d5:
                    98:4a:d6:67:93:86:74:c5:54:bf:31:4a:62:fb:12:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:E9:EF:2A:09:7A:5A:66:FF:5B:17:7A:DA:56:5D:14:BB:A6:5C
            X509v3 Authority Key Identifier:
                keyid:62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:67:b7:d3:d9:f1:a3:0f:6c:1d:5c:5e:2d:77:44:c7:d3:9b:
         80:cf:16:d4:72:f9:51:89:b1:1b:b0:47:19:e2:48:42:86:83:
         74:a7:61:03:0b:62:46:cd:14:44:05:38:e7:c4:22:ed:12:92:
         84:a7:b0:ae:cb:ff:36:f3:e4:60:7e:97:d9:32:39:08:10:87:
         ae:ff:b7:4b:e7:c5:a2:2a:4e:36:8e:d0:01:98:72:37:68:53:
         6b:a9:58:7a:da:d9:88:fc:a0:5b:9e:54:6c:97:b0:d4:bd:62:
         40:35:c4:8c:66:51:d5:93:0c:63:0d:30:4f:fc:70:cd:8c:75:
         82:81:ba:13:e5:75:c3:96:90:6a:8b:7b:21:fa:1a:71:d8:1d:
         45:45:ef:0f:fc:82:00:35:0d:1d:a8:6f:b7:3c:bc:61:13:80:
         ff:19:2f:f9:14:b4:47:ee:ae:b7:cd:c0:82:4b:e0:f2:ff:00:
         9b:76:47:1c:2a:c1:6f:18:1d:74:c7:2d:f4:9b:f2:81:46:1e:
         79:2d:97:85:67:61:e8:87:42:6b:a2:90:11:83:4b:78:89:f0:
         8b:4a:82:36:89:f8:f4:e4:90:ea:75:97:6e:65:54:7a:94:c2:
         86:94:8e:58:16:27:9b:22:92:af:8c:c3:e5:f4:54:31:32:86:
         03:b8:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:43 2026 by rpki-client