Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
File:                     C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft (raw, json)
Hash identifier:          xUgJnf1mXI6GV33l7YeLItqIFF5c6fOg29I2apUUtk8=
Subject key identifier:   F8:8F:F1:AA:26:1D:DF:33:FC:DC:7A:98:95:5D:B1:02:5C:38:83:B5
Authority key identifier: C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
Certificate issuer:       /CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
Certificate serial:       63D8564FB004551F8838BC71B816E2196F76DFC2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
Manifest number:          CA
Signing time:             Wed 07 Oct 2026 20:49:12 +0000
Manifest this update:     Wed 07 Oct 2026 20:44:12 +0000
Manifest next update:     Thu 08 Oct 2026 21:31:12 +0000
Files and hashes:         1: C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl (hash: shk++DKUchzVKNgXYfnBU4f7ZDT4sfilt6ug3pyPbrc=)
                          2: 3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa (hash: MEZepMjSWeC8G0zF/GV1Y6LcbJJpDd1poBASMpA+lY0=)
                          3: 3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa (hash: 5cIOw3g/g20yz7r/SJ1iESfORTQzMExyZEDbDIUjIdA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 15:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d8:56:4f:b0:04:55:1f:88:38:bc:71:b8:16:e2:19:6f:76:df:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
        Validity
            Not Before: Oct  7 20:44:12 2026 GMT
            Not After : Oct  8 21:31:12 2026 GMT
        Subject: CN=F88FF1AA261DDF33FCDC7A98955DB1025C3883B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:59:26:03:bd:a3:dd:bc:df:67:e1:f3:82:cb:
                    08:6a:a4:5b:8e:bd:ac:8a:00:1a:90:1a:e1:f4:1d:
                    7a:0e:94:bc:91:76:03:f0:b8:20:87:45:2b:11:e2:
                    69:27:49:ed:05:54:21:ad:62:9f:57:0f:d6:d3:08:
                    3d:0c:03:89:4f:d7:60:6f:71:fe:c8:71:42:09:bb:
                    a9:5d:d9:36:bc:9e:24:c5:b3:ff:ba:66:71:6e:2d:
                    03:ae:75:21:be:c2:26:2e:16:f7:4b:c7:f5:8f:1b:
                    6d:ff:a7:b5:90:d9:c3:1b:5f:9c:e7:fb:3e:e7:53:
                    75:a5:30:c1:d9:b8:91:54:76:06:b9:0d:a4:51:95:
                    0a:b7:78:46:e1:5f:d6:e2:6d:68:a2:d6:4f:41:a1:
                    5a:43:3d:05:45:db:c0:34:fa:7a:41:81:51:78:32:
                    6d:80:30:4a:2b:ce:8b:f9:4c:63:23:3f:c7:41:77:
                    ef:64:f9:3a:15:f8:25:9f:04:e1:1c:c2:1c:ad:01:
                    37:25:e0:40:d4:ca:e2:03:6b:a3:0d:9d:6e:9e:ee:
                    74:cf:35:ab:4f:26:76:2c:ea:42:8d:4c:0d:5b:0f:
                    b6:bf:fd:a9:70:40:59:6a:36:5a:1a:50:7e:5d:f0:
                    6a:ff:6c:07:85:de:8b:d8:38:41:ff:ac:ef:0b:e9:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:F1:AA:26:1D:DF:33:FC:DC:7A:98:95:5D:B1:02:5C:38:83:B5
            X509v3 Authority Key Identifier:
                keyid:C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:af:ef:bf:d4:16:30:a6:c6:75:2c:0b:1d:59:00:79:3e:72:
         5d:05:af:f6:d4:42:45:38:44:b7:d9:0b:39:e6:aa:1d:99:2b:
         56:a9:aa:b8:e7:a2:93:ed:35:2e:5c:bc:09:24:01:0f:d3:68:
         10:cd:8c:33:fb:6a:04:71:2d:43:5e:01:61:2e:fa:38:57:5d:
         8a:58:90:ad:37:d8:a6:47:c5:11:28:fc:58:7c:c6:40:c8:0f:
         eb:9d:4a:b3:25:be:7d:85:91:bf:ed:85:20:56:0e:36:66:33:
         6b:cf:87:53:0d:d6:17:db:24:b3:7b:ff:5f:70:d6:b5:33:c3:
         30:8c:b8:41:04:2a:57:d9:95:6a:00:6d:6a:10:b8:d3:66:b7:
         71:d7:51:8c:ed:d0:99:b1:48:fb:c6:ac:40:06:12:b3:70:52:
         0d:8a:3e:22:25:61:b6:1b:f4:e8:33:a2:52:40:d9:3a:a7:bb:
         f6:7b:22:33:23:d6:64:3a:de:e1:b8:ec:b8:e9:bf:30:98:73:
         2a:fa:59:c5:7f:df:2c:08:57:24:18:ed:78:8e:0c:88:f1:8d:
         a6:80:4d:35:16:8b:1e:ac:1a:b1:ee:db:2d:c0:b2:c2:8c:2e:
         29:71:f3:9d:2d:eb:28:43:8e:d1:1d:c5:73:82:5b:30:11:40:
         60:84:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:37:59 2026 by rpki-client