Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
File:                     A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json)
Hash identifier:          91PQ8qIX2adIqxO53AfLmHHRSD9OdUY9Nj4YOr40oLk=
Subject key identifier:   91:ED:F8:3B:1D:1D:9A:3F:57:A0:05:FA:6C:B0:A6:23:BB:91:51:69
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Certificate issuer:       /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial:       47425B93AFFDD0CFE050DCD5F3C348D212B44DD7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
Manifest number:          B6
Signing time:             Tue 22 Sep 2026 17:26:06 +0000
Manifest this update:     Tue 22 Sep 2026 17:21:06 +0000
Manifest next update:     Wed 23 Sep 2026 19:19:06 +0000
Files and hashes:         1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=)
                          2: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=)
                          3: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: gzIS7/C+NJlGJrkHRZxCtK6ZL5HCnmssnOJwRjaNXa8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
                          rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 12:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:42:5b:93:af:fd:d0:cf:e0:50:dc:d5:f3:c3:48:d2:12:b4:4d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
        Validity
            Not Before: Sep 22 17:21:06 2026 GMT
            Not After : Sep 23 19:19:06 2026 GMT
        Subject: CN=91EDF83B1D1D9A3F57A005FA6CB0A623BB915169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:20:0d:c4:bf:f5:2b:c2:ce:ac:c2:9a:ad:
                    06:16:14:2c:d1:80:7f:9b:c7:39:b8:d2:bd:96:d1:
                    35:86:46:3a:b5:8b:74:04:34:f4:4d:fe:5d:1b:63:
                    10:52:e8:75:45:ed:7e:fd:70:37:cd:bc:df:64:d8:
                    a4:7d:0a:2c:c8:10:92:a4:44:6c:d6:3d:0f:e3:fc:
                    a0:84:d5:98:90:61:9a:16:58:56:e7:b3:00:70:b9:
                    89:2c:2a:c5:ed:c0:82:99:9e:d1:4f:cf:21:44:90:
                    71:31:e6:0d:86:25:c3:9e:e7:87:b4:98:76:7f:7f:
                    41:f0:9b:25:96:aa:6b:04:5c:f1:8d:62:68:da:91:
                    fb:34:34:4d:b0:5a:1e:ba:dc:23:ee:bc:72:d3:fd:
                    4e:d1:94:5d:bc:02:3a:cc:8f:0b:96:4f:bd:eb:5d:
                    05:38:10:75:9e:51:75:4a:05:95:6e:37:08:c0:6a:
                    d7:3d:de:50:7d:5d:68:2c:e8:3b:be:18:62:f4:3d:
                    76:3a:ec:3c:75:80:fb:2d:d0:e5:7f:65:e5:9e:07:
                    78:b9:ed:ef:56:9e:ad:1e:12:fe:b3:d2:e9:5f:28:
                    4c:62:de:2d:2c:44:43:f9:29:f5:c5:22:38:d8:fe:
                    4a:06:80:86:d5:4c:dd:4f:47:f5:60:ca:90:4d:c0:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:ED:F8:3B:1D:1D:9A:3F:57:A0:05:FA:6C:B0:A6:23:BB:91:51:69
            X509v3 Authority Key Identifier:
                keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:66:e3:49:e7:be:c8:27:17:4a:94:53:35:c5:32:ef:83:ff:
         48:fc:51:e2:dd:59:02:4d:eb:cf:47:c1:58:3c:dd:63:2d:79:
         1a:81:a5:34:e9:68:d0:04:6d:a6:27:09:e2:c0:e0:a9:c7:b4:
         06:d1:62:43:a8:be:8d:b1:54:5a:9e:3c:85:5c:da:17:05:0e:
         e4:2a:31:69:37:96:90:77:0d:d0:e7:39:0e:d3:d0:17:71:63:
         bd:63:6b:0a:4d:a1:a8:a2:62:c5:45:24:7b:bf:ab:1c:19:f8:
         a4:0b:39:44:f7:ee:9b:86:57:99:5b:0e:2f:c7:25:41:c4:1d:
         d5:67:98:22:33:46:43:2f:a0:0c:63:f4:01:ef:9e:f0:96:d9:
         72:c6:e2:22:fd:3c:b0:2e:04:c2:54:cc:40:53:06:1b:4d:b8:
         96:27:0a:0f:73:32:fa:b9:aa:ed:a7:b4:6c:eb:b7:a5:57:a0:
         28:62:db:bb:35:9c:d2:39:84:4b:db:2b:c5:c2:2a:19:81:65:
         0b:9e:3a:22:4a:0b:50:92:81:e6:29:a0:b5:39:57:d5:0c:5b:
         b7:d3:77:5d:3a:b1:eb:61:2b:5a:7b:7d:27:cb:3a:ce:63:53:
         b4:77:9e:5f:a0:f2:58:98:09:97:7d:43:01:8e:94:a1:8e:aa:
         d6:f6:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:09:57 2026 by rpki-client