Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File:                     9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier:          aBQq0x/NICtCxGHpjen3I7AA8WnARW70RquEMsss/CY=
Subject key identifier:   9C:09:ED:B7:F1:DC:18:07:20:28:8E:D0:D2:67:7D:B4:EB:BE:7D:D9
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer:       /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial:       9DB3B417EFEE9334B7BFAC55518A926CA0DE7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number:          C8
Signing time:             Sun 04 Oct 2026 10:55:15 +0000
Manifest this update:     Sun 04 Oct 2026 10:50:15 +0000
Manifest next update:     Mon 05 Oct 2026 12:55:15 +0000
Files and hashes:         1: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
                          2: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
                          3: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
                          4: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
                          5: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: bJYQ7twaoa1Iz5Ev4gHw7XLor3pk01sAAKdVLA0ptr0=)
                          6: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
                          7: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
                          rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 12:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9d:b3:b4:17:ef:ee:93:34:b7:bf:ac:55:51:8a:92:6c:a0:de:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
        Validity
            Not Before: Oct  4 10:50:15 2026 GMT
            Not After : Oct  5 12:55:15 2026 GMT
        Subject: CN=9C09EDB7F1DC180720288ED0D2677DB4EBBE7DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:99:39:d1:d3:1a:30:53:82:a3:9a:8b:cd:
                    db:b6:d9:a8:1a:98:c1:7b:2a:c4:e4:45:89:7b:33:
                    9c:f1:60:35:d1:32:8b:65:2e:ba:7c:07:ea:00:1f:
                    68:53:14:d7:4a:6b:8b:ee:33:2b:ca:32:9d:17:5c:
                    6c:56:07:7e:48:6c:e9:38:f0:6c:8e:d8:0a:a6:2b:
                    65:c4:28:8d:52:08:f0:d4:fc:91:47:c4:e8:2f:5d:
                    fc:0f:2d:27:82:b5:90:c3:d7:d6:fb:2e:1d:38:fb:
                    65:40:1d:c2:5e:2e:c2:8a:33:09:a4:96:da:62:e0:
                    61:bc:e1:8e:ed:92:c4:a4:06:26:ff:a6:97:88:c0:
                    9a:a4:d9:1c:bd:95:58:e8:85:c0:41:e1:97:5e:a6:
                    aa:f6:cf:9c:ad:bd:6e:9b:20:55:5f:09:a0:01:82:
                    98:a3:05:06:3c:2b:c6:70:04:6b:0b:3a:bd:57:c6:
                    76:11:b5:d9:01:93:f1:45:ac:8a:8d:ce:61:80:d6:
                    49:77:ba:ec:fe:3e:2d:7f:59:0d:dc:7c:8e:66:66:
                    1b:71:6e:41:84:30:17:75:9e:a2:ec:52:a3:94:4b:
                    20:3c:e4:b2:c8:43:b9:5d:6e:59:ee:45:b3:da:7b:
                    7e:75:99:2a:70:7d:4b:0f:41:db:d0:b5:fc:83:17:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:ED:B7:F1:DC:18:07:20:28:8E:D0:D2:67:7D:B4:EB:BE:7D:D9
            X509v3 Authority Key Identifier:
                keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:00:97:17:ae:d7:95:31:10:75:03:89:91:3d:58:d5:c6:
         c1:fe:80:bf:2a:0e:9a:a1:63:75:b8:0a:c6:b4:83:64:7d:97:
         08:9e:09:a4:8c:16:1d:55:ab:ec:63:c6:dd:89:52:90:78:1e:
         c1:6d:5b:96:bf:4c:24:c9:dd:80:6e:40:e3:a8:09:00:33:08:
         0b:99:53:6b:cc:7c:1f:a0:49:72:86:02:35:03:36:82:3f:04:
         a0:48:cb:7d:5e:d3:68:47:87:e0:19:67:ad:cd:ea:8f:d7:1d:
         4a:fd:0a:48:61:b6:f2:0b:00:a4:a1:1c:d0:94:71:0f:07:8d:
         5a:d3:96:45:62:1e:d7:b2:ed:bf:75:2c:47:db:cc:72:f5:c3:
         1d:56:9f:60:03:ad:b9:15:64:ea:ce:56:e6:20:9f:c8:a6:22:
         46:cb:de:f6:3d:00:9a:15:19:d6:ed:3a:91:61:7a:d0:d0:dc:
         9e:a8:cf:62:48:dd:63:00:c5:b6:67:b8:7e:42:ed:fa:91:0d:
         6d:b4:64:ae:9c:32:32:7a:ad:d9:c9:5b:e1:2b:51:cf:a8:04:
         11:99:69:00:43:0f:21:24:ab:a4:3e:89:fa:13:b3:85:d2:68:
         54:95:c9:14:12:c5:c9:df:1e:14:f7:9d:20:00:6c:f5:a3:3f:
         75:89:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:34 2026 by rpki-client