Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          ShZtRU1g2ruKpHEwksyi/IZgkcV7hxkKrXQW9gE36vY=
Subject key identifier:   67:A3:14:75:F0:D3:F0:D3:81:30:79:6A:EA:D4:E9:92:67:15:B9:10
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       4576810EE6E9F588C55F728FEB898F0FC8502A3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          D8
Signing time:             Wed 07 Oct 2026 13:23:10 +0000
Manifest this update:     Wed 07 Oct 2026 13:18:10 +0000
Manifest next update:     Thu 08 Oct 2026 16:19:10 +0000
Files and hashes:         1: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          2: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          3: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          4: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          5: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          6: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          7: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          8: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          9: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          10: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          11: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          12: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          13: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: zxDYJpgRVSmxPwOMYWWLbgHuF4YkQw/vhzcF70dv5DU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 14:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:76:81:0e:e6:e9:f5:88:c5:5f:72:8f:eb:89:8f:0f:c8:50:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Oct  7 13:18:10 2026 GMT
            Not After : Oct  8 16:19:10 2026 GMT
        Subject: CN=67A31475F0D3F0D38130796AEAD4E9926715B910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:77:7b:58:b1:dd:ed:31:f3:43:6e:45:e1:
                    9d:da:47:06:ac:ef:a9:fe:ff:27:f0:f8:87:09:d8:
                    23:ef:61:77:c6:df:ec:98:6d:66:10:d8:e7:07:07:
                    62:f4:ed:70:37:bf:6e:96:53:c0:a1:94:f5:d2:ff:
                    86:7a:9c:69:40:4b:65:e2:9d:46:f8:fa:d9:da:aa:
                    5d:f6:77:14:d7:37:69:d9:fd:06:87:68:1a:2c:99:
                    f3:c8:ac:5d:1a:70:e4:7a:9d:e2:7a:4c:ca:36:73:
                    9e:f1:9a:5e:0c:24:31:65:44:db:84:10:16:9e:8e:
                    6b:85:7d:3d:e5:a2:0c:ea:10:40:8f:d8:c7:d2:63:
                    59:e1:ad:a1:11:38:0d:f3:a4:57:8f:69:d3:37:5f:
                    95:23:d1:ba:83:e5:e9:3d:5e:b1:32:f3:9e:fa:7c:
                    2b:b5:b2:16:77:b4:37:91:17:97:af:88:3f:6a:81:
                    c3:f7:0c:32:6e:46:8c:2b:58:7a:d7:64:0f:73:a5:
                    8f:3b:88:ad:33:0b:d5:dc:2c:3c:a7:c7:cc:2c:87:
                    9c:56:1a:72:71:42:8a:24:fd:bf:21:69:e9:82:e8:
                    af:58:72:98:d3:95:a8:29:89:8d:63:83:d4:e4:93:
                    1e:8a:1a:44:3d:1e:f6:1f:61:5f:b5:0d:89:6b:8c:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A3:14:75:F0:D3:F0:D3:81:30:79:6A:EA:D4:E9:92:67:15:B9:10
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:f7:c9:c0:b4:f9:fa:3e:f2:f0:22:29:1a:ed:f5:2f:e5:
         99:bd:f9:8e:1a:2d:65:71:65:1d:9b:fa:49:80:42:f8:2d:c9:
         09:d3:4f:82:be:28:13:1e:c5:78:07:e5:3b:13:64:e1:03:fc:
         8f:6e:5a:ad:c9:fc:39:86:15:ca:dd:f6:8a:ab:3d:83:2d:16:
         0c:cc:78:ed:e4:f4:96:e3:32:fc:63:db:27:02:aa:99:bc:8d:
         80:07:f1:8f:6f:91:4c:dc:85:73:2e:42:c1:b7:42:05:82:c8:
         d8:1b:e2:c6:eb:45:f6:e3:9e:99:af:60:ad:cd:0c:d4:75:0f:
         cb:6e:da:6f:15:e1:5e:68:b9:fb:41:cb:da:2d:98:a1:4d:46:
         02:0e:c2:85:7b:53:81:5a:12:4b:63:a7:f7:9b:06:c1:a1:eb:
         5a:fc:9a:6c:6b:16:cb:e4:ea:e4:50:5e:f6:51:32:da:f7:ff:
         ed:d8:e7:d7:9a:ed:e3:f4:e3:d3:11:65:ec:c1:59:f7:d7:43:
         22:6e:ea:da:3f:5e:21:4b:96:06:78:3f:90:f5:7a:ec:4b:b9:
         91:c5:c6:64:3f:b8:be:3a:68:c3:43:49:02:16:3b:e3:d3:17:
         9f:cb:39:00:b0:15:d3:36:9b:fc:ad:76:fa:4c:c8:2e:7f:c0:
         c8:9c:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:43:50 2026 by rpki-client