Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
File:                     8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json)
Hash identifier:          YFF74Yd/aSp4LIuZ4vKbV/+BfPLwYbDgedmyOtfARxg=
Subject key identifier:   60:E8:54:61:2A:25:B3:D3:B4:E0:D4:8A:87:36:20:02:10:7D:F3:DA
Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
Certificate issuer:       /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Certificate serial:       245F270D7A961C2AB2D2D00F4AAFB4914F14AC89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 16:42:19 +0000
Manifest this update:     Fri 12 Jun 2026 16:37:19 +0000
Manifest next update:     Sat 13 Jun 2026 17:37:19 +0000
Files and hashes:         1: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: O9k27lH73euHRho9owmtx7sdPg/wxKngspzEd92MolY=)
                          2: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
                          rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 17:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:27:0d:7a:96:1c:2a:b2:d2:d0:0f:4a:af:b4:91:4f:14:ac:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
        Validity
            Not Before: Jun 12 16:37:19 2026 GMT
            Not After : Jun 13 17:37:19 2026 GMT
        Subject: CN=60E854612A25B3D3B4E0D48A87362002107DF3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:60:34:6d:58:2c:60:3a:fa:74:37:e1:53:
                    09:5e:7b:28:c6:74:52:03:a6:36:2b:8b:5d:cd:b6:
                    0d:da:07:97:33:d2:9b:39:87:41:a3:a8:76:6c:21:
                    17:c0:a2:76:f7:74:4f:e3:91:85:eb:5d:94:c3:91:
                    dd:ed:d4:0d:ac:9f:24:c0:8a:30:a8:ea:57:b5:a0:
                    e7:66:79:22:f2:b7:39:9d:8f:a7:be:42:36:87:bd:
                    6c:83:dc:a7:86:15:3b:83:db:d8:21:ed:16:5c:cb:
                    cb:55:81:9f:6f:8d:81:36:65:c3:b5:34:3b:2b:b7:
                    58:0b:47:0f:bf:62:b8:b6:f4:d7:29:ea:96:92:80:
                    04:6a:9a:45:a5:5c:2e:42:45:3b:94:84:ff:47:60:
                    42:6c:10:27:51:28:94:72:0b:ac:0b:36:cb:c1:e1:
                    13:97:fe:bf:6d:ab:73:05:62:15:20:9e:49:45:4e:
                    f5:3d:87:9b:69:53:e5:33:2c:ef:d8:0d:14:a7:d2:
                    fb:e9:b6:7a:98:f7:91:09:e0:1e:df:5f:25:d0:5d:
                    ca:31:6a:13:f2:89:f1:a0:20:40:3c:01:e0:d6:17:
                    59:b7:f6:16:7d:d6:3a:22:9c:c1:41:94:ec:60:08:
                    91:01:07:1c:ad:f2:3d:36:20:8d:9d:73:66:4c:1d:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:54:61:2A:25:B3:D3:B4:E0:D4:8A:87:36:20:02:10:7D:F3:DA
            X509v3 Authority Key Identifier:
                keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:ff:bc:9c:07:17:61:c1:bc:4e:9f:39:28:42:0f:1e:47:
         17:f1:dd:ac:d5:44:c9:b1:3a:c3:b8:2d:aa:59:5d:fd:32:44:
         f7:99:ef:ad:94:a8:fd:a3:f4:60:82:81:bd:bd:10:63:9b:ff:
         0a:43:2c:f9:d5:21:3d:a3:3a:ee:d5:b5:d1:5a:09:9d:ec:2b:
         ef:cc:4b:6c:39:af:46:cf:63:db:d9:b2:6d:e9:dd:08:8a:83:
         fc:16:41:28:53:62:d4:8a:c0:75:cb:77:5e:5d:9a:da:f1:16:
         9b:01:4b:d3:0a:13:2b:5f:5a:bb:a1:e7:aa:cf:88:9d:06:6d:
         27:4d:56:32:9a:44:6e:b8:52:c8:33:4c:da:34:7d:8b:02:3c:
         29:29:20:58:50:bc:4a:fb:98:5c:a1:4c:40:58:6a:c5:d4:53:
         9f:ca:e4:78:e8:32:52:cd:0e:5a:55:1f:04:c3:fa:64:7d:92:
         46:22:4b:4e:21:b8:fd:52:91:6e:58:f2:16:26:57:e4:f6:00:
         6e:78:7f:c0:06:9c:5d:5d:fb:51:fe:7c:c1:d8:68:ae:36:65:
         f5:19:d1:c2:54:e0:c6:0d:cd:5c:b6:95:0b:b2:83:97:07:a4:
         22:71:22:d6:de:28:46:a2:c5:cf:08:1f:d5:ed:ca:9d:4d:87:
         72:7b:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:57 2026 by rpki-client