Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
File:                     208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json)
Hash identifier:          g7a/NDB723ZDkXKFM5e5Ev7TnjzfptGAOP8+QeXAVVQ=
Subject key identifier:   A9:B8:62:04:6A:33:22:4B:7A:CB:AD:7B:FD:FE:C2:35:6A:7F:E5:CF
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Certificate issuer:       /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial:       42490C92E455FF80075FDC85E14AF672DEF9D0D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
Manifest number:          BF
Signing time:             Thu 01 Oct 2026 13:05:24 +0000
Manifest this update:     Thu 01 Oct 2026 13:00:24 +0000
Manifest next update:     Fri 02 Oct 2026 17:03:24 +0000
Files and hashes:         1: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: DQmtANNO6dXKS6Z0bnPYBtx3wVuZvcoH26/Auj7JnI4=)
                          2: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=)
                          3: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
                          rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 16:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:49:0c:92:e4:55:ff:80:07:5f:dc:85:e1:4a:f6:72:de:f9:d0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
        Validity
            Not Before: Oct  1 13:00:24 2026 GMT
            Not After : Oct  2 17:03:24 2026 GMT
        Subject: CN=A9B862046A33224B7ACBAD7BFDFEC2356A7FE5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:58:69:3b:a6:02:53:d3:00:5d:80:ba:13:
                    08:8c:f0:f1:9e:4a:55:89:fa:69:fb:44:80:5e:9a:
                    42:88:29:16:23:9b:9a:d5:41:57:cc:d4:c9:ad:0b:
                    27:c5:81:3a:b9:77:23:a0:bc:19:74:fd:14:53:61:
                    3b:04:8b:bf:d5:c5:08:04:28:1f:48:88:42:1e:c4:
                    f2:7a:8a:aa:e5:a2:ec:bd:2f:b8:6a:33:a1:ff:b1:
                    3d:3e:97:a1:bc:97:61:c9:a0:fe:f5:d1:42:19:f9:
                    f6:d0:49:08:6d:45:72:11:08:b0:ab:bd:d5:55:75:
                    e5:d9:01:14:f8:ba:87:0d:af:90:af:9d:bb:a2:78:
                    95:9a:d8:ac:9c:9d:69:4a:8e:84:16:9b:4a:29:0c:
                    b4:33:31:c8:7a:1a:a5:28:31:96:4e:fb:9f:f3:55:
                    be:c2:f4:23:3e:7a:50:8d:71:89:ba:52:be:02:32:
                    6b:4e:ba:d5:38:96:a4:f6:af:c4:9d:69:88:81:ce:
                    db:82:d0:79:61:ce:2d:cc:1f:08:11:31:31:e0:7d:
                    e8:ed:d4:0b:00:23:4f:c8:05:92:38:ed:cd:fb:03:
                    42:c1:52:33:3c:d8:71:d7:cf:a5:b1:9f:88:3e:14:
                    72:22:42:0e:3b:b5:a1:e8:6d:0a:ec:4d:e2:33:4a:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:62:04:6A:33:22:4B:7A:CB:AD:7B:FD:FE:C2:35:6A:7F:E5:CF
            X509v3 Authority Key Identifier:
                keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:27:21:a2:20:6d:87:b3:f3:32:1a:b5:af:da:2d:b5:80:
         a3:a7:81:6b:d4:e6:b1:ee:47:5a:bb:c5:27:ce:44:51:21:03:
         d0:e2:dd:4f:db:23:f5:be:d7:75:17:09:ce:4f:2f:6b:32:41:
         e4:15:0e:f4:7b:89:0b:1c:13:d1:17:aa:40:3f:e4:f8:57:c5:
         d1:7a:58:3d:2d:33:15:9b:b2:82:c5:7e:b5:1c:a4:1b:17:6a:
         28:37:24:7a:21:2c:f9:54:63:7e:53:de:9f:2f:08:a6:4a:4e:
         ab:82:ff:25:17:35:31:1f:3a:d1:cb:eb:f6:f5:de:fb:53:c7:
         f3:7e:15:74:cc:82:5c:af:09:da:31:46:e1:69:b4:35:07:74:
         a5:11:96:16:32:c4:73:bf:63:01:84:00:8d:69:8b:45:81:45:
         28:f6:d1:3b:56:51:5c:0e:90:a9:5b:a2:6c:43:d4:13:b9:eb:
         53:f0:d4:63:a2:a4:c9:ae:8c:d8:43:56:7b:1c:77:bd:cb:12:
         93:28:a3:44:77:08:a0:79:d0:db:50:bb:6c:4b:7d:a5:b1:aa:
         5f:0d:45:c5:0b:40:dd:86:35:19:a9:1b:b4:ee:ab:3f:f1:ae:
         f0:e7:eb:ce:52:0f:43:58:15:81:28:5e:33:28:9c:58:74:6b:
         e0:da:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 01:11:54 2026 by rpki-client