Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
File:                     A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft (raw, json)
Hash identifier:          SoU0Jaau3ZR8tGtLWkR1A08qRbOJYYTnoX8X3vyNUbo=
Subject key identifier:   68:AD:78:3F:63:DF:72:FA:FC:70:0B:5D:52:EA:59:5A:19:39:68:40
Authority key identifier: A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23
Certificate issuer:       /CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623
Certificate serial:       4F3824D7758C369523F1510BABCD5F4F3BFCDB73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
Manifest number:          C6
Signing time:             Tue 06 Oct 2026 12:13:23 +0000
Manifest this update:     Tue 06 Oct 2026 12:08:23 +0000
Manifest next update:     Wed 07 Oct 2026 12:23:23 +0000
Files and hashes:         1: A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl (hash: 7uxTi7vdeXQ8ecU3THpbBpmWVE1Xdfc0G0TXaHjGhy0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl
                          rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:38:24:d7:75:8c:36:95:23:f1:51:0b:ab:cd:5f:4f:3b:fc:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623
        Validity
            Not Before: Oct  6 12:08:23 2026 GMT
            Not After : Oct  7 12:23:23 2026 GMT
        Subject: CN=68AD783F63DF72FAFC700B5D52EA595A19396840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:4c:28:6e:66:6e:58:b5:4a:a7:2b:b3:81:
                    b9:95:9a:75:36:db:d1:23:4f:4f:53:4d:d3:65:df:
                    dc:09:58:87:42:40:9b:c7:8d:7b:1e:aa:f9:05:ab:
                    7a:7f:b0:6d:76:8b:e2:26:e0:3b:08:e0:d7:3d:39:
                    d4:df:fb:c8:85:f2:31:35:00:ab:da:7a:2f:9a:77:
                    3b:b0:53:32:4a:16:48:20:ec:48:a8:02:af:d8:07:
                    1f:34:33:ac:57:2d:30:df:0d:b4:71:28:af:e1:02:
                    46:4f:6f:72:01:23:56:b9:35:2f:ab:07:cb:41:ad:
                    08:be:09:8d:bb:06:cc:f8:58:b5:68:14:60:00:54:
                    ec:fd:2d:f4:78:6b:71:8f:e3:c5:c6:d6:44:f0:30:
                    82:ce:e2:fb:94:ec:3b:39:6d:8a:aa:0d:99:f4:be:
                    2e:26:1f:ca:68:63:25:08:6c:4f:5e:21:f0:cc:30:
                    1b:ec:84:96:f3:4b:f9:f1:fc:d6:28:da:60:2d:db:
                    0d:55:1d:07:5d:81:92:e5:39:18:9d:a9:1d:f8:66:
                    8c:c6:d2:cb:58:b9:5c:05:47:14:b1:d3:04:5a:c9:
                    92:c8:b1:ed:12:4b:2a:96:d3:be:1d:36:46:52:86:
                    a3:cb:f6:45:15:b1:b0:87:0f:57:95:da:a4:e2:2c:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AD:78:3F:63:DF:72:FA:FC:70:0B:5D:52:EA:59:5A:19:39:68:40
            X509v3 Authority Key Identifier:
                keyid:A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:fb:85:4f:2d:05:18:63:78:c1:14:6d:7a:fb:9f:90:6d:
         ea:cf:c5:f0:00:09:21:27:70:fa:84:76:1b:38:ca:83:99:4a:
         1d:4e:14:23:38:a6:0a:29:db:7b:15:c4:d2:5f:9c:63:70:4c:
         18:e2:5c:98:a0:ef:54:ad:e4:d2:55:4f:bf:3b:2c:3c:34:e2:
         e4:1b:82:a0:02:29:e9:85:5b:40:db:a4:fc:ea:11:cd:28:59:
         e1:5e:3d:ea:5d:e1:29:f5:9c:98:31:ca:81:14:31:2b:db:6c:
         a2:c8:5f:91:5a:0e:3d:6f:01:55:ca:79:b4:83:7a:c1:8e:ab:
         e6:69:f1:b3:43:59:df:83:aa:7d:e4:f5:c2:ed:56:b3:b5:13:
         8a:0b:df:59:a8:0b:af:97:54:1c:24:f4:e5:bd:a3:22:ee:9c:
         41:e9:06:fb:a0:e2:7f:78:af:1e:0a:3b:a5:aa:4a:f0:3f:d7:
         66:27:56:fe:47:2c:27:9e:d2:36:7b:28:bd:31:04:c0:4c:97:
         f3:83:04:46:08:20:f4:b7:20:b9:43:31:7c:77:d4:50:ca:4a:
         a8:c0:a3:03:0a:e1:63:94:4b:de:d8:23:3d:c5:e2:ea:38:be:
         88:97:45:e7:c1:f2:81:c0:78:a6:a4:50:e8:e7:cd:db:89:72:
         b9:ec:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:52:46 2026 by rpki-client