Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier:          63zPUFoO7b8e3wsAtjXKZq6BDLTm8GAxNzZmJGK7wx0=
Subject key identifier:   8D:D8:23:A8:F1:90:59:64:E6:06:5C:2D:5E:FF:AB:D8:F7:8A:40:D2
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       4EB9D65AE222B07D4562840CA770853C3131B374
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 05:51:44 +0000
Manifest this update:     Wed 23 Sep 2026 05:46:44 +0000
Manifest next update:     Thu 24 Sep 2026 08:42:44 +0000
Files and hashes:         1: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
                          2: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
                          3: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
                          4: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
                          5: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: csfGN0M1LmQ807fF8N6rlS+M4m79FsA0PBGItYEgJiY=)
                          6: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
                          7: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
                          8: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
                          9: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
                          10: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
                          11: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
                          12: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
                          13: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
                          14: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
                          rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b9:d6:5a:e2:22:b0:7d:45:62:84:0c:a7:70:85:3c:31:31:b3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: Sep 23 05:46:44 2026 GMT
            Not After : Sep 24 08:42:44 2026 GMT
        Subject: CN=8DD823A8F1905964E6065C2D5EFFABD8F78A40D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:c8:fa:cf:9a:bb:78:6e:91:d2:65:71:4d:
                    24:0c:0d:ba:55:57:25:5c:ac:4f:75:71:bd:8c:46:
                    48:b6:c3:ab:de:1a:53:63:b2:60:34:13:20:98:01:
                    5e:53:a8:81:ac:7f:f4:a8:ec:85:93:09:28:cb:ba:
                    11:e5:23:49:c9:04:90:37:a2:28:2f:a4:e8:1c:ef:
                    70:16:87:09:95:52:07:f4:dc:1e:ab:d9:7b:10:cf:
                    d8:a2:56:56:22:2d:00:e9:d7:15:3f:a4:f8:bd:2b:
                    55:32:86:55:40:cc:33:ca:c0:86:9e:50:a2:ca:86:
                    af:2b:07:fd:70:63:9a:0b:61:5a:a7:91:f8:de:1d:
                    41:d3:a3:e1:f4:4e:f1:59:39:a4:5d:97:e3:a1:8b:
                    49:63:17:1e:5f:2f:6c:f0:f1:20:d7:2d:e7:61:0b:
                    f6:77:51:fb:c0:aa:01:49:ad:fa:ea:06:f8:69:72:
                    b8:eb:25:03:43:e6:07:32:bd:0e:75:ee:a5:45:7e:
                    e9:db:07:ca:2e:d1:33:72:47:30:83:19:8e:6c:7f:
                    b5:7e:12:ca:ee:78:d2:e3:de:13:3d:03:eb:64:e2:
                    c5:61:bf:6b:80:99:a2:65:dc:16:bc:ff:76:f2:d7:
                    35:92:3c:17:16:59:a5:d2:25:6e:e6:76:8c:73:b6:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:23:A8:F1:90:59:64:E6:06:5C:2D:5E:FF:AB:D8:F7:8A:40:D2
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:06:98:5d:0e:c3:ce:5e:35:e0:d6:c1:2a:25:be:65:c6:2e:
         b1:7b:bd:72:18:3f:9b:e2:d8:1e:9f:bc:f4:99:50:d1:2a:98:
         45:2a:28:31:35:5f:a0:7c:3a:d1:fd:22:2a:87:1d:b9:7f:52:
         44:91:c0:d6:bb:2f:cb:45:9c:29:f1:c2:f0:ca:ff:72:66:f7:
         e8:f8:86:45:b6:f0:ec:e0:4b:35:45:ab:a0:31:6f:8a:8b:ac:
         af:8a:db:6b:aa:8b:d5:55:20:ab:14:83:ca:7c:e8:3f:51:85:
         9e:0a:7c:ab:08:d4:b3:04:02:e9:63:98:d1:90:ca:cd:11:f3:
         3d:c4:5c:64:8b:22:ce:63:0c:79:38:a1:2f:6e:75:05:4a:ae:
         33:c7:8b:f6:28:47:9c:00:9d:dd:bb:4d:b7:96:59:7e:fc:2a:
         71:3b:03:e4:77:e0:03:a6:46:42:50:04:62:c3:ff:83:b2:2b:
         1e:94:17:c8:fc:79:7f:fc:59:af:9a:49:76:0a:90:1a:6b:32:
         27:55:45:96:da:53:a6:a0:e8:f4:ea:ef:11:52:18:11:9f:f4:
         28:5e:49:a3:f3:e6:e4:cf:f4:e6:91:25:1a:76:8e:d4:10:06:
         32:07:23:29:bd:60:31:1a:9d:0b:4f:02:f2:6a:d6:c2:79:6c:
         e2:c9:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:53 2026 by rpki-client