Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
File:                     ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft (raw, json)
Hash identifier:          vSo/a6s09nU5r3cx0fHGn86MhU9zD/+IbRPJ6ctYmi8=
Subject key identifier:   86:88:A6:AF:55:7A:19:E3:5F:02:53:B4:07:3F:5D:9A:6F:C0:B4:45
Authority key identifier: AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F
Certificate issuer:       /CN=ACF64AAE08A591A2FF9B687E110069B7FA25F54F
Certificate serial:       16EA8AC605BD760211FDE2F65A25E691F3EBF26E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
Manifest number:          B5
Signing time:             Wed 23 Sep 2026 14:48:03 +0000
Manifest this update:     Wed 23 Sep 2026 14:43:03 +0000
Manifest next update:     Thu 24 Sep 2026 18:19:03 +0000
Files and hashes:         1: ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl (hash: C+rOJA29t63AJ2F56/40g11KYUs6B/awb3N1hSbp1xE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl
                          rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 18:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ea:8a:c6:05:bd:76:02:11:fd:e2:f6:5a:25:e6:91:f3:eb:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF64AAE08A591A2FF9B687E110069B7FA25F54F
        Validity
            Not Before: Sep 23 14:43:03 2026 GMT
            Not After : Sep 24 18:19:03 2026 GMT
        Subject: CN=8688A6AF557A19E35F0253B4073F5D9A6FC0B445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:25:d6:c8:ce:51:13:94:22:f3:7c:79:dd:
                    69:58:42:1f:1b:f5:74:86:b4:0c:60:e4:9b:38:97:
                    30:e4:76:d3:0f:fc:76:97:76:77:4e:c4:96:fb:25:
                    d2:b2:b6:ba:1a:37:5a:bc:cc:10:fb:4f:70:de:c0:
                    76:be:3d:21:cc:82:41:8d:f6:3a:fc:16:c6:e0:c1:
                    bc:4b:85:2d:26:f6:7a:c2:04:56:40:43:95:1f:26:
                    3c:58:a1:7a:be:13:44:54:0f:f4:e0:9b:1a:64:af:
                    3f:d1:fd:1e:ef:93:4d:7d:70:7e:d4:61:63:c5:d5:
                    6a:23:d6:98:ba:be:25:68:c0:fd:10:3c:c5:29:51:
                    dc:14:ff:a0:92:97:b2:d2:10:64:ee:83:50:1b:7e:
                    81:3e:ae:5a:73:47:17:ed:e1:58:0e:14:42:96:a9:
                    d9:fb:0c:f2:35:90:5c:4d:5c:4d:c7:94:7b:88:f7:
                    cb:af:07:48:d3:06:4d:7b:59:b3:ae:b1:be:92:20:
                    ba:e7:fa:74:a5:89:af:0b:a0:84:bd:c5:69:b5:f7:
                    23:c3:e9:8f:0c:1e:6d:d7:96:8f:19:12:5b:4f:65:
                    db:63:4b:d6:47:16:63:e8:fe:f5:81:d2:07:e6:e9:
                    db:c4:86:ed:c6:ec:cc:04:6c:f8:33:65:81:6b:e3:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:88:A6:AF:55:7A:19:E3:5F:02:53:B4:07:3F:5D:9A:6F:C0:B4:45
            X509v3 Authority Key Identifier:
                keyid:AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:ab:83:99:7f:54:7b:ca:f7:e4:79:12:8d:35:72:e1:6d:
         03:93:d5:60:47:24:08:ef:4b:5a:08:14:6e:f2:dc:ae:30:a7:
         f9:79:fe:76:50:0a:61:d5:c4:d8:b3:4f:3a:5a:da:d3:ed:67:
         05:47:58:62:9b:f0:98:28:4d:00:ae:12:55:c5:9a:9b:b7:d5:
         1f:07:be:3a:5c:1c:b8:34:87:f3:18:0e:59:19:fc:ea:52:4b:
         5e:44:44:8d:56:d8:b5:d4:22:20:dd:82:40:6f:46:e9:0a:1b:
         b2:77:de:81:ca:bf:67:ab:98:b4:2d:26:37:5e:0a:eb:8f:c7:
         3a:51:56:84:ef:43:66:9d:e1:3d:cc:97:84:64:21:48:68:a8:
         51:8d:07:1f:75:1e:62:4b:96:81:5f:db:1c:33:db:82:bb:a5:
         3b:cf:d9:e0:55:e5:86:57:dc:7b:51:d9:26:9d:a5:3e:c7:d8:
         19:da:f9:b6:5a:9c:7b:2b:53:ac:4b:67:46:23:ae:4d:10:0c:
         49:ea:44:2e:c1:7d:d9:ae:51:73:4d:3b:57:d8:19:6a:a8:99:
         90:ca:22:10:9e:3d:d8:3f:69:e4:17:a9:01:21:b7:8b:2c:2f:
         f5:13:11:51:18:8d:07:e6:04:24:f3:f3:71:33:a6:e8:f2:81:
         ff:22:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:15 2026 by rpki-client