Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          ysK9NTOOhLyNm+YQrZAZtEsiJ1QXwFNFf35et1FOML4=
Subject key identifier:   B7:1C:D6:F9:7E:94:D2:73:6F:17:A7:47:34:74:07:4E:D8:3F:C3:0A
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       65A4F238E55D0C57967D7554F04D6BC933F87EF1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          D7
Signing time:             Tue 06 Oct 2026 21:04:12 +0000
Manifest this update:     Tue 06 Oct 2026 20:59:12 +0000
Manifest next update:     Wed 07 Oct 2026 21:19:12 +0000
Files and hashes:         1: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          2: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          3: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          4: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          5: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          6: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          7: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: gzKtIRcf18mGRPnnEZKvToQ/1UqtOQQY7m6CVPkpG4w=)
                          8: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          9: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          10: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          11: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          12: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          13: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 19:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a4:f2:38:e5:5d:0c:57:96:7d:75:54:f0:4d:6b:c9:33:f8:7e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Oct  6 20:59:12 2026 GMT
            Not After : Oct  7 21:19:12 2026 GMT
        Subject: CN=B71CD6F97E94D2736F17A7473474074ED83FC30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:4e:1f:9f:e9:4d:08:f9:d8:7d:76:04:39:
                    15:6b:72:74:71:a0:66:a0:a7:55:8a:ca:8f:0a:15:
                    6b:d2:a4:1b:70:8b:bc:45:91:7d:6d:45:0e:93:88:
                    a4:1e:3d:8e:55:39:87:8c:93:ed:d8:f2:65:0f:96:
                    d0:7d:fa:79:bc:15:f4:78:e5:1b:9a:a5:bc:0c:47:
                    18:38:fe:58:4d:35:c8:1b:2a:36:33:26:9a:0c:0b:
                    f1:b5:69:ce:5a:f7:94:cc:04:b7:8d:da:4b:e7:e7:
                    ec:bb:47:30:8b:a9:33:e3:be:74:2f:7e:ef:20:43:
                    bc:d4:8a:c6:ff:02:71:3c:8d:ae:ee:91:da:dc:e4:
                    95:34:66:11:60:11:9b:4b:c7:c9:29:92:29:af:bd:
                    ef:fe:57:79:b9:fc:a0:f5:51:ac:c3:c3:70:93:d2:
                    35:a2:d2:41:87:be:9d:0b:11:4e:c0:f0:c4:a6:5b:
                    31:57:ae:ae:a5:dc:d3:3b:61:a5:0c:8f:42:45:55:
                    95:b5:8e:71:60:1a:ea:7a:94:4e:32:cc:c2:c9:9f:
                    a2:3a:d5:e0:bd:aa:e6:28:8c:d9:b0:c7:51:a8:0b:
                    0e:cc:f1:61:dc:bc:30:c1:ce:51:d1:3a:1e:66:ba:
                    41:6e:c7:3f:e8:45:df:a5:6c:ce:51:0d:1b:e1:6f:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:D6:F9:7E:94:D2:73:6F:17:A7:47:34:74:07:4E:D8:3F:C3:0A
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:b7:36:62:25:34:93:08:a9:0a:c3:cd:0d:ca:3f:65:08:
         2f:6b:1e:47:88:16:fd:81:4f:a9:0f:bb:4e:d5:9b:79:40:c5:
         a1:1d:3b:bc:ef:e7:92:d7:28:94:45:8f:57:b3:74:56:f6:f3:
         f6:40:7a:0a:03:a1:d2:a8:c9:e7:32:6e:e9:be:0e:7e:c6:54:
         3f:cb:1a:e6:1a:a8:29:ba:b1:2f:1f:dc:0b:f3:62:13:8d:55:
         df:5e:d7:c3:21:d4:0c:7c:cf:3c:f4:9b:3f:3a:97:ad:84:fd:
         9d:50:fe:4a:6e:36:2d:d1:2e:89:f0:67:7f:e2:61:b1:4e:06:
         af:18:7a:7e:f8:c2:8a:c9:33:95:86:91:d6:0a:1f:f4:4b:72:
         9a:a5:d1:ab:c6:2f:20:98:da:6a:36:80:63:30:42:35:2b:96:
         60:fe:50:2b:60:20:d5:50:64:2b:38:d2:a9:21:af:5c:89:c7:
         b7:06:36:48:e1:6f:33:ac:81:5f:3a:47:4b:25:48:6f:4a:11:
         3d:1c:3a:fe:98:e0:9f:5c:8f:38:ab:3e:73:52:49:e5:1e:57:
         9c:1f:9c:a0:08:e3:14:0d:43:9a:dc:e9:3b:ce:56:0e:98:4b:
         11:72:43:f9:c2:38:32:45:f6:f9:2c:77:a5:a4:0e:ab:ee:89:
         85:2a:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:12:03 2026 by rpki-client