Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
File:                     9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json)
Hash identifier:          O/WmGO16JyQATVLZwA8E/97Opuow14Dbey7CHaw/btE=
Subject key identifier:   DC:DF:9F:52:93:43:AA:A6:D3:AA:53:89:18:E2:C5:D9:96:97:C4:1C
Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D
Certificate issuer:       /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
Certificate serial:       0D27E6EA2DF47B59275753FE08F3CCEF2020AED2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 01:38:39 +0000
Manifest this update:     Sat 13 Jun 2026 01:33:39 +0000
Manifest next update:     Sun 14 Jun 2026 05:37:39 +0000
Files and hashes:         1: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=)
                          2: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: crz7nAVsCL5knBtQrcPHOXkINcA9mQ2yW8CsQMRZ2QE=)
                          3: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=)
                          4: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl
                          rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:27:e6:ea:2d:f4:7b:59:27:57:53:fe:08:f3:cc:ef:20:20:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
        Validity
            Not Before: Jun 13 01:33:39 2026 GMT
            Not After : Jun 14 05:37:39 2026 GMT
        Subject: CN=DCDF9F529343AAA6D3AA538918E2C5D99697C41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:ce:48:0c:bf:80:a6:8c:93:bc:d1:ff:ad:
                    f5:c4:dd:ab:2a:5b:00:3f:88:11:4e:44:b0:de:00:
                    16:26:ac:b9:f9:00:bb:10:ba:91:e8:5a:39:87:81:
                    51:bd:a1:d2:17:54:b3:45:22:71:a8:e5:4b:df:30:
                    be:24:d5:a2:37:43:b4:21:4a:0e:0a:1d:94:31:aa:
                    e3:d2:0e:24:9f:e7:3f:01:af:93:39:54:b0:cc:d2:
                    9d:81:ed:26:17:23:2b:dc:9c:47:d8:6b:41:4a:70:
                    39:f0:a3:40:7c:e9:d6:32:a0:c7:df:3b:ce:ec:8d:
                    c9:70:dd:8e:4f:66:fc:89:4b:8c:07:62:70:d0:8d:
                    3b:94:18:83:fd:a9:af:dc:dd:c8:a2:42:5a:5d:b2:
                    74:9a:9f:d8:68:08:41:67:ed:8f:1b:06:84:1e:06:
                    e0:59:20:62:af:e9:62:e8:8c:3b:5e:0d:f7:df:c7:
                    26:48:52:b9:20:ef:da:46:d6:27:a0:15:96:35:0b:
                    e5:fa:9b:b9:23:9c:8f:c5:a4:76:0d:0d:c6:ed:1d:
                    82:e4:9e:ff:f8:ed:d7:c5:4e:1d:6d:4b:77:63:16:
                    a9:11:08:ba:5d:2b:dc:e2:d8:07:cd:e1:05:88:40:
                    62:b8:f8:2a:a9:1b:64:fa:65:bc:b3:c6:6d:97:6f:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DF:9F:52:93:43:AA:A6:D3:AA:53:89:18:E2:C5:D9:96:97:C4:1C
            X509v3 Authority Key Identifier:
                keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:12:eb:9a:29:89:d9:ff:95:90:64:1f:36:45:ee:9c:25:
         e8:f2:c7:82:27:a6:b3:17:3a:66:03:73:23:f6:9d:d9:18:da:
         fc:79:51:06:e3:39:d4:93:d1:ff:ec:6a:44:53:14:5e:56:b9:
         41:45:ba:f8:90:6a:93:5a:07:16:ac:e5:00:54:05:89:e0:ce:
         52:b1:8e:33:a8:28:83:02:0e:fd:12:76:9e:5d:78:a6:9d:75:
         a9:de:1d:e0:14:43:38:9b:4d:22:3b:81:1d:a9:37:df:bc:6e:
         8f:9a:ef:b9:8a:86:10:9c:d1:bd:7c:b6:30:b3:57:b0:91:5e:
         6c:b9:f1:0b:7d:7a:57:53:6f:63:e2:da:1b:67:aa:1e:a7:68:
         c0:b8:99:4e:c6:a3:6e:1a:b8:68:c6:b3:8f:75:6d:6c:03:79:
         96:e6:dd:db:9b:10:43:a2:f4:00:71:6a:cb:ad:56:8c:62:79:
         9c:65:0d:8a:01:e7:22:6a:74:f4:fb:b2:3a:08:30:9c:54:af:
         8d:fb:43:84:80:dc:14:08:66:2a:ed:e5:f3:5e:65:56:c8:ed:
         8d:4b:f4:93:66:e4:ad:f4:a3:ea:62:cd:b3:6d:1f:41:26:98:
         20:d6:65:af:de:12:b5:10:40:f6:4f:17:64:16:56:f4:53:5b:
         62:6e:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:34 2026 by rpki-client