Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
File:                     F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft (raw, json)
Hash identifier:          jOGN3hg1xQ5UTxQ7DJshxnG9InWGLA0TYcoJhrl60I4=
Subject key identifier:   B8:55:1B:44:18:2B:FF:9E:D0:18:BB:1B:78:8D:FE:3B:F1:9D:5A:96
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       557565DF9E62ED4AE51D40AB51B12F43722BC0DD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
Manifest number:          CD
Signing time:             Fri 02 Oct 2026 09:41:24 +0000
Manifest this update:     Fri 02 Oct 2026 09:36:24 +0000
Manifest next update:     Sat 03 Oct 2026 13:00:24 +0000
Files and hashes:         1: F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl (hash: IdKz5+dqyKa9FJn8FyB5M/GvSCA/zyvDaEFn/vW2r9M=)
                          2: 33362e35302e3232392e302f32342d3332203d3e20313530373636.roa (hash: h8gyFFvDIAX3bMa9Tnsi5Lv1Sog1AR7udxjaRncAT3E=)
                          3: 323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa (hash: OOzMbXIJoHykIR4RwkZcCsJU45So7OmTmyIPk1uKG1o=)
                          4: 33362e35302e3232382e302f32342d3234203d3e20313530373636.roa (hash: SUrSFVSUHhqaQXbs2yThamUfc3SnEtpbEFNj4so4KsM=)
                          5: 323430313a356461303a3a2f33322d3438203d3e20313530373636.roa (hash: yQrMfYe7IzxIC5rJr8YojtADOcobJOqjQ8VtQ4u/b44=)
                          6: 323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa (hash: 7WqQWTj//FEHw5O7ojAG9FzQ18cgyaGKpJXreC70Wvo=)
                          7: 323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa (hash: OuqYERdV1bVJFr1rcLxzR5JbOTcvxxSn6vkHoQjVfvg=)
                          8: 323430313a356461303a323a3a2f34382d3438203d3e20313530373636.roa (hash: lEwiWh3b97qcBl1MP11L8Yk1/V0XcGX11KGQ3anRooU=)
                          9: 323430313a356461303a3a2f33322d3332203d3e20313530373636.roa (hash: j1+WzthZrOuZj7vc+dnX2QxBk/WOSNrujStbD4fbrXc=)
                          10: 33362e35302e3232382e302f32342d3332203d3e20313530373636.roa (hash: Xto8WQ73Mhkh2z7HSkXwb/iQ3rWZE6pzzPgj47AnR7w=)
                          11: 323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa (hash: 5TUA2SXMLAmP0ZYVxlurx0SWantZ3oV/H15YGJH3LH8=)
                          12: 33362e35302e3232382e302f32332d3234203d3e20313530373636.roa (hash: emRiNbWcurw19wqPIYoDTM7LbbPSDfryR3r14LWnVzg=)
                          13: 33362e35302e3232392e302f32342d3234203d3e20313530373636.roa (hash: QA6gIv34WHyKVbKDu+Uyz8ziRCtvHKvl1DseR9U5Wj8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 10:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:65:df:9e:62:ed:4a:e5:1d:40:ab:51:b1:2f:43:72:2b:c0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: Oct  2 09:36:24 2026 GMT
            Not After : Oct  3 13:00:24 2026 GMT
        Subject: CN=B8551B44182BFF9ED018BB1B788DFE3BF19D5A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:e6:e9:8f:26:cd:54:fe:d5:34:7f:8e:cb:
                    d5:bc:e8:7a:9f:cc:3f:6e:89:af:82:ae:32:1d:0c:
                    27:df:90:5c:23:bf:73:58:07:38:14:7a:72:ad:6f:
                    b6:aa:a2:6b:fb:0a:e5:03:61:d6:88:db:b8:ba:a0:
                    49:22:a7:64:9d:54:76:bb:e3:e1:f9:13:5f:16:ee:
                    49:6d:62:0e:06:fc:d8:29:f9:ba:90:22:01:99:6c:
                    b0:49:00:ad:8c:ce:d2:bf:39:c5:c6:45:8f:39:b1:
                    71:aa:50:18:e7:a2:b4:a4:60:83:e6:1b:de:2f:a8:
                    55:82:a2:71:1b:e8:3a:dc:62:11:be:19:80:54:80:
                    b6:3f:e6:e8:3a:4d:1c:60:fb:84:01:ac:cb:01:25:
                    21:0d:4d:a9:c5:0d:19:1c:db:30:eb:1f:69:57:74:
                    8f:f6:b8:a9:e4:fd:d1:1f:ec:6d:92:fd:a9:f8:9e:
                    4b:2b:f5:67:3f:c9:18:e4:d2:2f:4e:88:77:00:4f:
                    2d:4e:b1:76:c5:d7:51:27:1c:a0:5b:9a:2e:a5:33:
                    4d:9d:8b:8a:a5:18:a5:bd:43:03:7d:d0:e8:90:38:
                    0a:e8:05:cb:89:04:23:8d:47:4a:eb:0b:7d:c1:91:
                    50:6b:25:a2:fd:f5:ac:3e:d0:09:4b:ee:22:33:18:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:55:1B:44:18:2B:FF:9E:D0:18:BB:1B:78:8D:FE:3B:F1:9D:5A:96
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:62:46:fb:31:6f:17:72:8d:76:43:46:e1:f9:e7:21:95:
         08:dc:74:f2:69:79:52:9b:d3:4e:98:bf:1d:1f:74:00:08:a6:
         54:5b:5e:71:6e:80:fb:0a:4c:bb:22:fa:9d:7e:b0:55:8c:19:
         14:b1:fd:a6:a7:bd:af:56:a3:a6:c6:e4:75:7a:f1:f8:b1:27:
         c7:80:04:e0:fc:0c:6b:32:63:81:1e:da:a6:d6:52:c9:5e:b6:
         94:3f:ec:b3:45:04:89:3c:08:a0:b1:97:16:b9:43:25:ed:80:
         6c:fc:cf:e9:0d:cb:ff:81:22:39:b5:7e:87:6b:1d:40:db:96:
         3d:39:8a:a1:67:a8:a7:f9:dd:81:7a:4c:7e:9f:e3:74:ee:d9:
         3c:0b:6f:17:09:e5:2b:9a:78:6e:30:ec:99:1d:51:92:b7:ba:
         42:0a:4d:78:75:ab:3b:fb:98:43:63:fb:9f:ec:3f:93:b4:2c:
         d0:d2:c9:75:12:d5:b9:9e:39:93:a7:4d:e7:15:34:f6:3d:11:
         d6:21:e0:59:65:5c:67:cb:3d:00:cc:15:8f:24:a6:ed:3e:b7:
         bc:12:a2:43:76:ca:31:e4:31:36:65:a7:9e:e4:86:2b:6a:05:
         61:74:c0:c9:d3:40:5f:bb:79:44:db:b1:67:35:20:9b:7c:5c:
         dd:14:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 00:46:34 2026 by rpki-client