Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
File:                     A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json)
Hash identifier:          G/VLGEzQiBTiaaXJ18E8SHXCijbwziZV0zfj210Uhxc=
Subject key identifier:   62:4D:5E:BC:01:30:7E:8B:B7:F8:FC:EE:DB:9D:1F:B1:5F:EC:AA:02
Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48
Certificate issuer:       /CN=A67F7A72FC031B1A33774C937883F79C7342B848
Certificate serial:       7688825AEAC017B6C03986785030987BF6951095
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
Manifest number:          C7
Signing time:             Tue 06 Oct 2026 13:44:21 +0000
Manifest this update:     Tue 06 Oct 2026 13:39:21 +0000
Manifest next update:     Wed 07 Oct 2026 15:48:21 +0000
Files and hashes:         1: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: QCnulTTgQV2kCXd3Jzq/VEWM5xKbsBciboXIvYsiM8w=)
                          2: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl
                          rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:88:82:5a:ea:c0:17:b6:c0:39:86:78:50:30:98:7b:f6:95:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848
        Validity
            Not Before: Oct  6 13:39:21 2026 GMT
            Not After : Oct  7 15:48:21 2026 GMT
        Subject: CN=624D5EBC01307E8BB7F8FCEEDB9D1FB15FECAA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f6:e5:25:ae:fb:e4:f0:59:ac:b4:52:9b:81:
                    d0:8b:81:a4:2b:0f:20:fb:e3:7d:48:54:7a:0f:14:
                    c1:d2:60:b0:1a:6d:cf:49:71:07:5d:cd:a3:07:e2:
                    fc:d2:01:b9:62:0a:66:3f:26:b2:df:7e:37:b9:ad:
                    f3:4f:b5:25:53:00:75:d1:53:d9:ef:ed:07:8a:bb:
                    ae:8d:e6:c4:ae:bc:1c:fc:a4:65:c6:20:28:32:b4:
                    4d:df:82:5b:ac:4f:1e:30:8a:9c:5d:57:4d:8e:6a:
                    40:6c:ef:59:6a:7e:53:80:44:fd:47:b1:08:ab:34:
                    71:2d:de:f8:61:91:37:f6:91:ad:0a:7e:63:48:d9:
                    f5:dd:83:9a:de:6e:84:48:a1:e6:b8:ad:34:be:4d:
                    c3:c1:85:ab:ab:86:c5:d5:b4:ed:d8:b3:74:8c:49:
                    6c:66:66:e0:39:cc:a4:96:77:82:6d:5f:ec:73:41:
                    c9:bd:bc:eb:56:56:b6:4d:9a:52:8c:2a:d0:53:71:
                    9a:c9:14:5f:37:21:fd:67:6f:92:a2:84:b6:4a:e6:
                    7f:da:b3:0d:64:c8:13:b7:4e:fd:b9:f8:8d:b0:4a:
                    24:58:ce:b0:35:63:bc:54:84:7b:dc:ea:1a:65:03:
                    34:51:69:17:b9:8f:9c:12:68:7f:68:8f:99:d6:3d:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4D:5E:BC:01:30:7E:8B:B7:F8:FC:EE:DB:9D:1F:B1:5F:EC:AA:02
            X509v3 Authority Key Identifier:
                keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:64:8d:4f:ec:e0:59:96:b7:ad:75:70:2c:5a:8b:60:3e:
         54:22:fe:30:c0:6c:16:0e:31:2d:0c:94:3c:52:42:2a:8b:01:
         24:72:ad:c0:9c:50:52:bf:08:ef:1e:27:7e:5a:c2:2a:bc:b6:
         cf:32:21:12:d1:46:0d:ea:2b:69:0f:25:82:a3:26:43:3d:08:
         dd:37:6d:a7:5b:d0:a9:19:2f:b4:95:2b:dd:25:d7:96:86:43:
         52:f7:bb:8a:78:1c:63:f7:b5:9a:14:e6:5c:91:09:6b:05:f0:
         84:4e:fa:8b:0f:9c:b5:5d:95:03:94:c1:e3:e0:0b:06:fd:3c:
         c9:43:bc:0b:b3:8f:78:39:66:c7:4b:db:5d:dc:fa:70:63:a0:
         55:9c:a6:b2:a2:42:a7:17:53:54:ba:20:57:d7:bc:8e:cd:cb:
         e2:51:31:5c:b7:0e:9a:71:61:86:f6:d6:ef:58:76:8a:47:93:
         e5:3e:17:47:a1:b1:fa:65:b2:c5:94:85:c9:b7:90:22:b5:a5:
         e5:59:5f:7b:ba:95:31:da:fe:ec:a6:89:9b:3e:87:75:03:11:
         2e:4b:af:24:8f:34:91:bf:01:fe:60:50:7d:77:68:e2:dc:9e:
         ed:3c:a5:6f:29:01:14:8e:66:34:c2:c3:42:db:95:06:f8:06:
         bf:c1:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:06:53 2026 by rpki-client