Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
File:                     34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft (raw, json)
Hash identifier:          xq6yb4lmWmdS14PhuXyGKzglzyEEyQ3x8jKYwX7jXXk=
Subject key identifier:   42:96:6A:5E:AF:33:2D:21:9B:A0:77:EF:C5:F3:5E:AB:42:58:C1:0B
Authority key identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED
Certificate issuer:       /CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
Certificate serial:       6004C2F1055287B1F4C9C2C6376FCABF57D04CFC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
Manifest number:          B8
Signing time:             Mon 21 Sep 2026 10:41:57 +0000
Manifest this update:     Mon 21 Sep 2026 10:36:57 +0000
Manifest next update:     Tue 22 Sep 2026 11:46:57 +0000
Files and hashes:         1: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl (hash: iInqm5ZW2Y9WYR6ibTUMWsiSbgmk6AbMHzU22X6Y/XY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl
                          rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:c2:f1:05:52:87:b1:f4:c9:c2:c6:37:6f:ca:bf:57:d0:4c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
        Validity
            Not Before: Sep 21 10:36:57 2026 GMT
            Not After : Sep 22 11:46:57 2026 GMT
        Subject: CN=42966A5EAF332D219BA077EFC5F35EAB4258C10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:36:24:07:48:f7:53:2e:3a:2b:fa:09:00:
                    4e:a3:75:99:ec:be:e6:8c:63:4e:22:56:89:bb:9a:
                    90:3a:d7:c5:10:3a:fa:7a:e7:26:06:86:d5:3b:14:
                    be:48:b4:a2:a7:ca:ac:cf:cd:6e:d5:10:4d:0b:d9:
                    2d:ce:d5:c8:c5:87:f8:f0:ee:d1:9b:a1:e2:fb:13:
                    19:5c:d1:ae:5a:0a:20:9e:ea:32:a0:0f:ef:36:89:
                    78:6c:63:2b:ca:95:b7:9c:06:9e:f9:ae:a0:13:be:
                    67:c7:af:6f:3e:3c:f1:01:2f:69:5c:9a:4d:7b:d7:
                    8a:05:1c:49:92:db:70:70:52:0d:eb:e9:a8:12:22:
                    ab:06:06:a4:e9:ac:2f:a1:59:8b:b6:c8:62:ac:b6:
                    78:74:06:62:5f:d0:13:b6:ce:54:83:5b:1c:03:f8:
                    77:e5:a8:a0:f4:aa:2b:2e:61:3f:ca:b6:ea:83:e5:
                    be:c1:4b:16:86:e0:aa:7d:22:ef:59:0e:ac:ce:71:
                    f2:db:3a:d2:0f:87:3b:f2:a5:11:83:0b:b6:c9:55:
                    c3:95:8c:b7:b7:da:58:f0:c8:e6:93:02:e7:30:6e:
                    bc:e0:f3:5a:40:8c:c8:80:38:1e:1c:e7:25:d5:28:
                    e2:16:57:e6:26:3b:b6:9a:6f:43:8b:d4:ae:f8:37:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:6A:5E:AF:33:2D:21:9B:A0:77:EF:C5:F3:5E:AB:42:58:C1:0B
            X509v3 Authority Key Identifier:
                keyid:34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:5e:52:c2:9f:60:5b:90:ca:d5:57:4a:7b:1f:9a:98:23:
         6a:41:8c:1a:4b:ac:bf:34:a6:36:95:73:a5:49:ed:da:47:e1:
         ea:16:6f:08:86:7a:b9:c1:26:b4:f1:69:6a:2d:b4:d7:db:03:
         f6:89:01:50:54:d9:96:6f:c6:97:d0:c4:b7:cf:c0:fd:9d:67:
         03:21:f7:de:c2:79:ed:f3:45:78:fe:c6:53:a7:50:af:33:ed:
         79:7b:2e:78:5e:ee:f9:c1:89:ed:b0:94:ca:a3:fe:01:2a:2e:
         2a:c7:dc:e1:49:f4:73:95:d4:79:85:f7:56:8a:67:5c:ce:c4:
         b0:69:e2:1a:6b:dc:b4:d8:64:d9:ef:51:dc:c1:89:ee:54:33:
         4d:91:b0:2e:2f:cb:ed:6f:cc:94:58:af:5a:bd:73:d7:67:5e:
         c0:1d:b7:96:07:14:50:1f:f1:a9:c4:92:58:44:3f:13:65:4d:
         14:d0:bb:1f:3e:40:f1:e3:c8:31:45:4e:2d:13:d9:09:1b:c9:
         7b:6f:70:51:5a:54:61:ab:ee:61:87:8b:9a:14:6b:40:31:13:
         25:f2:d3:d1:c2:4c:4c:d8:ba:b1:35:fc:3c:b8:4c:1d:9b:00:
         8a:4e:7d:a7:f0:f6:af:fc:f4:8b:9d:c9:fe:c2:88:25:df:fc:
         49:94:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:41 2026 by rpki-client