Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
File:                     8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json)
Hash identifier:          0NjZGD758SjNf7DSnyH52Iwlh0zhT9ekkBR1Rvgbt2U=
Subject key identifier:   31:B2:FC:FC:1E:B8:10:53:A0:4F:5C:0D:93:B0:42:D9:3D:11:FE:04
Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
Certificate issuer:       /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Certificate serial:       248DF77323013A0E19BDED131494DEFA4CFEBF64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
Manifest number:          6A
Signing time:             Tue 28 Jul 2026 09:08:03 +0000
Manifest this update:     Tue 28 Jul 2026 09:03:03 +0000
Manifest next update:     Wed 29 Jul 2026 10:20:03 +0000
Files and hashes:         1: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=)
                          2: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: uNtTOUuuyYtouFXyfhLVlVBlv/hvEdWaVxg2+K2MpBA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
                          rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8d:f7:73:23:01:3a:0e:19:bd:ed:13:14:94:de:fa:4c:fe:bf:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
        Validity
            Not Before: Jul 28 09:03:03 2026 GMT
            Not After : Jul 29 10:20:03 2026 GMT
        Subject: CN=31B2FCFC1EB81053A04F5C0D93B042D93D11FE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:d3:6c:83:92:8a:20:c8:89:49:68:fb:32:
                    7e:c1:63:7a:ee:ce:dc:dc:b0:3e:4e:da:ec:7d:b8:
                    6c:d5:47:f8:00:97:41:11:18:73:12:29:27:c9:9e:
                    29:85:d1:8d:c9:78:08:c1:b4:1d:81:65:f2:bf:75:
                    e1:68:05:28:ae:0c:88:16:fc:19:a9:a6:af:ab:88:
                    a9:5d:89:e7:3b:4a:13:ad:43:db:5c:af:34:cc:37:
                    77:6c:44:e2:7f:b4:ec:2c:bb:8c:22:19:51:7d:61:
                    b4:bf:cb:37:40:0a:22:61:39:81:aa:75:d8:c5:7a:
                    1f:4f:cc:b9:2f:e1:04:cd:76:53:7b:3e:6c:69:bd:
                    a0:46:55:f0:b4:2a:01:ea:48:8d:ab:31:42:5d:f7:
                    d7:35:c7:33:db:43:98:a0:f8:07:59:5b:63:9e:ef:
                    e7:0d:82:a0:29:38:c6:35:34:40:fc:2b:b5:1d:e9:
                    3d:d0:49:62:d4:45:dc:93:81:57:44:7a:47:6d:4a:
                    d6:b5:d8:2f:a2:2c:e6:cf:25:16:33:31:39:6a:0f:
                    fc:50:dc:56:2b:ba:59:cc:6e:c8:27:a9:91:6e:5e:
                    1a:85:3f:05:92:f9:80:e1:33:79:58:ca:1f:bf:cb:
                    4d:a5:c9:b7:9f:21:74:2f:97:e5:91:ef:df:69:09:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:FC:FC:1E:B8:10:53:A0:4F:5C:0D:93:B0:42:D9:3D:11:FE:04
            X509v3 Authority Key Identifier:
                keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:c1:4e:7b:81:4e:bb:24:44:d9:e7:b6:38:7e:85:15:06:
         8f:51:32:d6:24:d1:d7:af:7f:5c:af:99:19:70:90:e0:2b:2b:
         1c:ff:d0:28:4d:e4:bc:b4:8d:18:38:07:46:0f:30:47:25:0c:
         ed:a7:73:3d:77:8a:51:17:db:16:e3:a4:09:20:40:fc:14:3b:
         8d:ec:0d:c1:02:b1:a7:18:5d:2c:aa:fa:91:82:26:73:db:0b:
         1c:a7:06:16:8e:97:79:8c:2d:94:d5:65:d3:db:b8:25:5a:95:
         e7:4e:14:9e:7d:80:78:7c:10:ca:c1:b1:5e:5b:5a:c4:8e:84:
         4c:01:f8:1f:07:1e:6e:3d:9c:84:05:d3:93:1d:a9:1e:2f:9a:
         dd:10:28:95:35:b2:8c:76:a2:aa:10:9e:d5:e1:7a:51:78:d5:
         1d:79:78:23:80:71:6f:a4:26:75:51:90:db:84:b4:f0:92:0b:
         2e:bd:e6:ae:97:65:7b:3f:e1:f7:39:b2:b6:5a:b2:a9:b2:f5:
         c0:a4:ce:63:07:73:83:f8:21:f3:db:d8:19:06:2a:d2:3c:a5:
         9a:a4:7f:b9:fe:ac:14:5d:af:e4:d8:42:ea:b5:75:d7:a1:2d:
         5c:c9:ff:52:ca:fd:77:46:bb:63:4c:e1:58:b3:3a:3a:03:8c:
         0e:42:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:04 2026 by rpki-client