Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
File:                     FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft (raw, json)
Hash identifier:          nEnqzOCvE53M+fR208Nv2xGBuGxKKbbvuWOSRobHoXA=
Subject key identifier:   D9:18:5D:A1:68:F7:D6:D3:48:E4:3F:C8:B1:3B:27:21:05:B8:0F:1F
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       66F57DEAC97B3E139966910058B60D681E7EEE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
Manifest number:          C7
Signing time:             Mon 21 Sep 2026 14:17:22 +0000
Manifest this update:     Mon 21 Sep 2026 14:12:22 +0000
Manifest next update:     Tue 22 Sep 2026 17:54:22 +0000
Files and hashes:         1: 3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa (hash: /BkzGnIADOG5q6v5Jcjt5hTu07e9hGlwOm8KNG5UzOI=)
                          2: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl (hash: lpLCl4wriwCYfXjQ/zHGWFwze+0fUXJt8wnx8vVkaR0=)
                          3: 3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa (hash: QJpakj5AI9RKVWG2PgQIpjIivIC60des2reJiowl4os=)
                          4: 3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa (hash: JgeKv43zj2I8mn+V1L9xsA2666IYScxWd+2UEJ5XPhc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 17:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:7d:ea:c9:7b:3e:13:99:66:91:00:58:b6:0d:68:1e:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: Sep 21 14:12:22 2026 GMT
            Not After : Sep 22 17:54:22 2026 GMT
        Subject: CN=D9185DA168F7D6D348E43FC8B13B272105B80F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:19:c7:b5:de:db:a8:92:94:03:05:49:63:
                    47:70:73:6e:85:a1:1b:0d:f5:b5:e1:72:48:5f:b9:
                    46:3c:f3:22:46:e4:e1:88:98:bc:ff:07:7a:55:61:
                    f0:d0:d5:f0:76:ee:bd:1a:99:81:4c:d9:84:32:b9:
                    6e:5f:0a:9b:d5:fd:ea:b2:e2:0b:4c:b2:4d:61:03:
                    6d:bd:da:93:8e:8e:76:58:7a:61:b0:c4:d0:13:da:
                    89:4a:b6:9a:b6:2c:e1:b5:65:9a:b7:10:10:fd:cd:
                    d2:1f:07:53:3f:5c:84:93:03:50:3c:85:45:4d:00:
                    26:17:74:e6:d0:bb:76:3d:a1:30:9c:08:3f:e3:ac:
                    82:3a:10:a5:23:da:a2:b6:1c:64:a9:fe:38:dd:41:
                    00:6c:eb:e2:40:92:ec:1e:a3:d3:4d:3a:37:7d:ec:
                    73:57:7c:4a:d2:b4:af:f2:aa:19:73:92:34:0f:9d:
                    30:68:8e:c0:20:7f:b3:36:35:78:55:7d:21:57:32:
                    9a:04:14:3c:76:7a:11:49:26:e7:af:b8:11:71:6e:
                    88:91:e0:ae:9e:97:c2:2a:df:90:20:fc:11:2b:ea:
                    5a:90:72:98:a6:08:e4:64:b0:6b:28:f7:db:26:d9:
                    a5:46:06:12:a0:77:5b:bd:e5:37:25:fe:5e:35:50:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:5D:A1:68:F7:D6:D3:48:E4:3F:C8:B1:3B:27:21:05:B8:0F:1F
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:01:79:b6:85:78:2b:ce:9d:b0:d2:cd:9f:b7:df:fc:9c:f6:
         05:27:b1:ed:44:0c:23:ef:2d:6e:cb:ac:3b:a7:79:ef:ab:c6:
         e2:80:cc:22:46:12:5a:98:8b:e6:e8:84:72:95:72:bb:41:b1:
         e0:d0:95:b9:75:cb:e6:79:fe:01:04:bd:09:97:07:c6:cd:50:
         87:ec:c8:59:59:bd:b5:cd:90:dc:4a:b7:d6:14:dc:10:3c:8f:
         88:80:2b:3d:72:ae:2b:89:b5:64:62:a5:b7:8f:86:61:f9:ae:
         43:53:2b:14:10:1d:52:8a:2f:41:e4:69:50:22:f0:6a:20:8d:
         06:4b:27:0f:19:cb:7f:ca:b1:0b:6d:cf:c2:61:17:42:4b:04:
         06:bc:fe:51:e7:13:6f:68:96:79:ec:a0:47:19:57:de:a3:d0:
         15:db:2b:da:a2:3b:e9:76:be:67:5f:ee:ac:61:7b:b1:a0:b1:
         74:5b:27:b7:8e:f9:df:17:1c:7f:fc:43:5e:4d:85:bd:21:a1:
         f0:9f:42:01:f3:d0:69:c3:99:d0:dd:32:f5:96:ec:11:97:40:
         90:88:bd:15:59:c7:d9:0e:b5:d8:0b:52:ff:82:72:55:62:32:
         8a:2d:fd:58:8d:81:51:5b:53:be:47:80:e8:ea:72:64:e0:b0:
         6b:c3:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:36 2026 by rpki-client