Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          U812M3EFLjpOSg1ELQ8MBHEbW0ueNLKyV0hUqi8197g=
Subject key identifier:   9D:10:70:38:3C:13:00:5C:59:81:C4:B8:0A:6C:89:18:F6:D5:34:37
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       145F7C2B54C8FE3B5A8CC0A5BA8B7E057543A615
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          C1
Signing time:             Sun 20 Sep 2026 14:04:41 +0000
Manifest this update:     Sun 20 Sep 2026 13:59:41 +0000
Manifest next update:     Mon 21 Sep 2026 16:34:41 +0000
Files and hashes:         1: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          2: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          3: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          4: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          5: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          6: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          7: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          8: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          9: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          10: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          11: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          12: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          13: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: CLcZzchCoh/nahHMRtuVrV+Sd1Qz2bPSyLS5TTDgmiw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 08:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5f:7c:2b:54:c8:fe:3b:5a:8c:c0:a5:ba:8b:7e:05:75:43:a6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Sep 20 13:59:41 2026 GMT
            Not After : Sep 21 16:34:41 2026 GMT
        Subject: CN=9D1070383C13005C5981C4B80A6C8918F6D53437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:c6:b5:a5:8f:ce:37:49:6f:d9:01:2d:2c:
                    07:a5:17:e0:06:07:22:be:41:98:71:88:19:d7:01:
                    ff:35:94:0a:fd:b8:28:d4:e2:c5:70:67:d1:06:98:
                    6a:4e:70:30:66:2a:fd:d3:5a:07:02:4b:54:60:1c:
                    7b:c3:6c:29:06:a8:39:aa:b0:f3:cd:8c:01:d9:60:
                    f9:2a:0f:d1:d6:d4:df:0e:cc:ea:2d:f7:d3:63:4e:
                    6d:79:78:ef:20:b3:48:75:43:ae:c1:01:65:0d:d1:
                    94:28:1c:3c:7a:c5:e0:ce:8c:19:79:3e:f1:67:22:
                    a8:a5:94:f1:72:a2:4d:0e:06:7e:52:dc:26:65:8a:
                    d0:02:14:54:88:61:16:fb:92:88:ff:26:90:89:74:
                    39:11:6b:d8:77:8a:2e:97:80:d4:ce:f0:30:55:4b:
                    9b:6b:ca:06:2c:62:91:46:a1:3f:e6:96:ed:ea:e2:
                    c2:3d:3d:2d:90:cd:b6:64:60:cc:86:1e:63:00:ff:
                    a1:fe:ab:c8:6e:5c:83:b4:c6:66:3b:5f:3f:3c:53:
                    b7:18:54:24:9a:05:54:70:2e:38:a4:57:cc:4e:28:
                    99:aa:e9:5a:bf:d8:42:83:0e:f8:49:52:a6:aa:5c:
                    66:66:72:3c:70:90:17:30:fd:8b:1d:aa:cf:0b:47:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:70:38:3C:13:00:5C:59:81:C4:B8:0A:6C:89:18:F6:D5:34:37
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:ca:66:ba:a5:9b:93:5b:af:59:b0:f1:6b:66:6e:0c:c4:
         ba:5f:a3:a5:d7:a7:d7:c3:b7:22:dc:4f:60:96:8e:29:60:27:
         66:48:0d:0b:b9:21:f0:ed:41:d1:9f:d6:b9:ca:c9:26:99:78:
         c3:65:11:58:01:cd:0e:04:68:05:d7:c5:24:87:a0:73:49:b5:
         88:1c:07:ac:26:8a:f6:c5:5e:2a:82:89:8e:a8:a0:46:b9:43:
         e6:7d:9b:bf:f1:22:48:f4:20:26:ea:3e:39:f5:be:25:a9:27:
         9f:fb:a8:74:ee:db:bf:0b:f2:69:96:79:cc:d2:7b:3d:49:22:
         35:ec:d2:99:66:28:bd:45:be:a4:7a:67:9c:80:6d:12:bf:de:
         5e:d9:87:28:6a:e4:06:a1:91:9b:3d:e4:50:d6:ca:0f:1b:f1:
         48:42:55:c4:1f:e9:c1:df:47:16:a3:51:17:7d:5b:0e:53:9a:
         7f:d5:2d:15:37:a9:d5:02:ff:75:1f:39:8a:53:c4:7e:64:7c:
         1e:71:36:c6:d2:21:d9:75:e9:ba:0b:37:be:c3:e3:70:72:e6:
         27:e0:22:24:51:b2:1f:ae:9e:90:ec:da:14:95:d3:2e:e8:13:
         9f:f8:43:a1:0e:b7:9d:24:fb:62:05:b4:17:d3:15:a1:5d:f6:
         ce:20:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:08:23 2026 by rpki-client