Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
File:                     8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json)
Hash identifier:          NLEaavWudv+k+miToczzF0Pn0y8KkVo2Ji5sYFf3wlc=
Subject key identifier:   8C:4F:21:6E:84:E9:99:99:76:CF:92:57:B5:B9:24:E5:6A:22:68:3C
Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12
Certificate issuer:       /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312
Certificate serial:       5CBEA4A8A20AB4193FAFE5E3F7689D6CBC4A4884
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 21:14:53 +0000
Manifest this update:     Tue 28 Jul 2026 21:09:53 +0000
Manifest next update:     Wed 29 Jul 2026 21:53:53 +0000
Files and hashes:         1: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: IhSKQeyxJRLmS1z/vcv+YAMDDlJ51GPlAspRpR7+pNE=)
                          2: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=)
                          3: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl
                          rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:a4:a8:a2:0a:b4:19:3f:af:e5:e3:f7:68:9d:6c:bc:4a:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312
        Validity
            Not Before: Jul 28 21:09:53 2026 GMT
            Not After : Jul 29 21:53:53 2026 GMT
        Subject: CN=8C4F216E84E9999976CF9257B5B924E56A22683C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:29:4b:f5:e9:87:83:42:cd:75:31:6b:bc:
                    ea:a1:d4:70:c0:3d:6f:f4:89:23:ce:1e:70:bb:4a:
                    c1:aa:9c:c7:41:98:37:a7:91:74:ea:96:45:ae:37:
                    86:ee:15:6f:63:68:d1:eb:b4:61:f6:05:14:7a:25:
                    35:b5:f4:22:c5:fb:94:12:a8:c7:1e:fe:0c:72:30:
                    da:4f:07:8d:6e:ba:03:85:d5:da:c7:36:be:98:da:
                    5d:f8:b2:64:72:03:89:ba:d9:cf:b6:0d:82:d9:02:
                    ed:75:42:a8:c3:eb:31:f8:4f:40:8f:2f:e0:3b:5a:
                    95:4e:d7:db:8b:20:36:91:2b:f6:6e:e8:6a:38:ac:
                    ca:8b:89:76:cc:ef:b4:e5:ac:40:58:84:6a:e9:44:
                    84:b9:e6:6a:db:ce:a6:c6:31:e7:44:02:bf:79:6e:
                    1d:37:5b:f1:de:13:90:ba:4d:ce:89:43:70:65:25:
                    5f:14:3f:04:3e:06:41:09:0d:2e:de:f8:71:59:da:
                    6d:50:c8:08:27:39:41:3d:3c:51:b0:08:98:d7:fc:
                    d1:6f:90:79:20:b5:9a:93:02:6f:ce:31:04:bb:06:
                    db:ae:d0:1d:a9:c1:f0:07:2b:50:7b:8a:b0:e2:a1:
                    f2:c3:f9:56:97:4b:92:c0:56:5f:a1:7d:4a:de:31:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4F:21:6E:84:E9:99:99:76:CF:92:57:B5:B9:24:E5:6A:22:68:3C
            X509v3 Authority Key Identifier:
                keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cd:ef:1a:71:4e:27:0e:5c:20:69:dc:28:30:c2:a5:a6:14:
         51:15:28:48:20:39:17:45:13:24:4e:09:e2:b4:d2:5c:3c:0e:
         94:df:d0:4b:ac:1d:ce:83:a6:22:fb:67:f0:cd:b7:b4:c8:e3:
         ba:06:2c:9e:e5:44:94:9e:9a:53:80:4a:12:85:5d:56:a3:7f:
         27:43:23:19:6e:b1:56:f9:db:77:c9:34:28:8c:f6:38:19:4a:
         24:9b:a4:1a:22:62:c8:95:4d:c2:80:b4:24:58:a3:3c:74:87:
         ee:3c:dc:05:7f:ef:2d:d8:07:62:39:97:25:cb:32:ed:2b:db:
         84:0e:19:2e:48:b1:a9:d8:ed:25:d8:8c:79:38:3d:15:f0:cb:
         9d:e1:26:1f:b3:44:15:c4:d4:71:96:77:25:4c:ea:87:a5:8d:
         20:8d:a6:c7:f0:c3:b7:f2:71:39:26:19:57:ec:18:10:27:ec:
         9c:7c:c3:ea:d6:b1:95:89:11:85:3c:bf:5b:78:89:5b:b3:38:
         c2:eb:66:89:92:54:18:90:2b:e1:82:1c:30:2d:e6:12:6d:b1:
         f0:b1:6a:19:56:d7:1b:2e:6c:a5:75:ed:54:40:a5:a4:5e:6e:
         b0:17:2f:a6:32:4c:45:02:6c:4a:30:ca:38:99:b0:f0:50:52:
         c3:6a:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:46 2026 by rpki-client