Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
File:                     D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json)
Hash identifier:          CnWcCVjyyL+IoK1+B26Fwb7NybAO/I/6EaXH1z+yxnM=
Subject key identifier:   F6:99:D9:EB:34:9C:D7:29:9F:80:76:39:F4:5B:4A:EF:05:73:88:68
Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64
Certificate issuer:       /CN=D7FDD2309EFAC257359F67A560160D59D372E164
Certificate serial:       566D9C5948A974D87F729DDE3E37DD85C634D6E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
Manifest number:          B8
Signing time:             Fri 25 Sep 2026 04:31:38 +0000
Manifest this update:     Fri 25 Sep 2026 04:26:38 +0000
Manifest next update:     Sat 26 Sep 2026 05:30:38 +0000
Files and hashes:         1: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: K+r2HxmkmS6vHhhq0sjjOx1moDzSrIEr1yIssCaAuvI=)
                          2: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=)
                          3: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl
                          rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:9c:59:48:a9:74:d8:7f:72:9d:de:3e:37:dd:85:c6:34:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164
        Validity
            Not Before: Sep 25 04:26:38 2026 GMT
            Not After : Sep 26 05:30:38 2026 GMT
        Subject: CN=F699D9EB349CD7299F807639F45B4AEF05738868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:a4:a5:ee:14:79:e5:d3:34:57:7f:bf:f2:
                    99:52:e9:29:ac:b2:38:06:0c:5f:5e:56:cb:22:84:
                    0c:02:76:09:a1:94:76:b7:94:24:f9:1d:c3:6f:0d:
                    55:b5:b2:d2:a7:10:cb:b9:77:dc:84:c3:b9:ac:8b:
                    3d:22:b5:b7:bc:d5:b4:31:a4:ca:75:6e:07:27:2d:
                    c1:4b:50:44:87:73:be:1c:17:a9:ec:fe:11:0e:f8:
                    61:c5:df:9f:a6:57:04:e2:f8:c7:6a:33:6b:98:63:
                    96:10:f9:66:2e:d2:cd:6d:db:6d:ac:01:a5:98:cc:
                    53:9d:27:77:9d:1b:5f:f5:7c:d3:84:cd:68:79:b3:
                    4c:d1:a0:ad:3f:ed:6f:fa:55:17:75:66:8d:4f:4c:
                    4b:2e:b1:8a:e5:7f:8a:54:08:78:bd:30:23:f0:80:
                    89:c1:19:1c:e5:c5:a1:60:30:c0:a4:74:dd:1b:52:
                    63:ec:ba:f4:29:cc:a1:8c:17:21:bc:fb:b9:88:5b:
                    f2:0a:11:f1:d3:59:1a:59:7b:f2:00:e3:48:0d:5d:
                    68:4d:7b:ea:f3:f5:b5:9c:9a:99:b0:e0:3c:fa:64:
                    5f:f8:bf:52:b6:97:8d:17:ab:c5:0c:55:f3:66:cd:
                    8a:40:18:fa:da:f3:5c:c7:ce:e6:65:60:c5:d7:69:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:D9:EB:34:9C:D7:29:9F:80:76:39:F4:5B:4A:EF:05:73:88:68
            X509v3 Authority Key Identifier:
                keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:74:e8:c9:72:8a:61:81:f3:bb:16:84:c3:6e:6f:94:ef:
         20:4b:9b:8d:c4:d6:4e:5d:45:92:f2:1b:53:fe:ea:03:cf:69:
         3e:a3:e0:71:2c:be:d9:c5:fe:d3:b9:da:5c:d6:b7:05:73:54:
         82:8b:e1:85:63:6b:f6:dc:c9:a4:44:f9:2f:80:4a:16:79:30:
         6c:55:b9:c4:b7:c5:a6:6b:08:df:41:ba:05:09:d8:9a:d4:fe:
         5f:9e:b4:16:ea:78:4b:11:8b:c8:70:59:37:87:a2:75:a9:a3:
         02:b5:e2:2f:15:6f:31:6d:21:6d:e8:c6:d4:0a:f1:3e:a7:8c:
         cd:65:9e:ff:8b:71:cc:25:16:56:80:c8:38:b3:53:6d:54:85:
         4c:7f:9e:81:43:c5:94:92:6b:33:b0:06:b6:99:0c:fc:ca:a3:
         d8:e7:c3:5e:e2:75:1b:fb:31:21:9d:32:59:58:04:19:8b:df:
         cd:0c:23:b2:6c:0b:0a:1e:46:45:79:1e:81:9c:ff:b6:df:f0:
         45:95:51:6e:69:b9:09:b9:7a:68:00:89:55:67:e2:c0:e1:a7:
         f2:f3:2f:93:a5:32:5f:38:d8:33:5e:11:06:ee:a2:74:30:bf:
         90:11:81:eb:36:f7:85:7d:b9:3b:dd:0c:2c:f3:70:f9:e8:c8:
         38:bd:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:08:26 2026 by rpki-client