Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File:                     9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier:          yUpYKM6JLC0Y6AWhu8tu8B7W0TGq771XY4kfwpvdgL8=
Subject key identifier:   2B:98:16:7C:9B:A9:91:7F:6D:5E:C5:4D:B7:85:6F:30:32:26:53:27
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer:       /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial:       117A1DB254761E0B6CBFBF1B0538262C078254C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number:          C6
Signing time:             Mon 05 Oct 2026 23:55:30 +0000
Manifest this update:     Mon 05 Oct 2026 23:50:30 +0000
Manifest next update:     Wed 07 Oct 2026 01:04:30 +0000
Files and hashes:         1: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
                          2: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: i6lI3ZqXcFJU1qS7CIZY62cCwrfOCUygj1dvE2USa9s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
                          rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:1d:b2:54:76:1e:0b:6c:bf:bf:1b:05:38:26:2c:07:82:54:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
        Validity
            Not Before: Oct  5 23:50:30 2026 GMT
            Not After : Oct  7 01:04:30 2026 GMT
        Subject: CN=2B98167C9BA9917F6D5EC54DB7856F3032265327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:36:46:a2:74:34:75:bd:64:de:f9:0c:8d:
                    a9:92:73:98:20:f8:a9:01:6f:77:ad:84:cb:ea:32:
                    47:cd:00:af:ef:fe:a2:86:ef:22:08:84:fc:24:f9:
                    5a:d7:cd:cf:af:71:b3:70:c2:d4:ba:29:99:ea:c8:
                    49:0e:37:00:b0:ab:c8:23:c9:b4:71:3e:3d:ff:f3:
                    68:eb:f0:85:03:70:d0:c0:b7:21:00:46:b8:c6:99:
                    c0:b1:17:65:dd:9f:e3:5b:72:d0:47:77:9b:e8:c0:
                    e0:da:cf:26:64:ce:ee:25:15:79:7e:10:9c:a5:6c:
                    2d:0b:4f:ed:bb:da:3d:a6:15:da:7a:04:2e:1b:06:
                    4c:7a:68:3d:92:af:29:e2:4c:43:23:f9:3f:6f:87:
                    09:71:09:bd:9e:52:d5:55:13:d0:26:6b:8c:b5:06:
                    e2:63:69:00:29:ad:c4:32:06:c5:85:a0:44:cf:82:
                    83:ae:bf:d8:a1:ee:98:55:18:38:ae:db:7b:d0:86:
                    a3:74:b8:cc:97:10:0b:75:6d:89:63:c2:96:2f:34:
                    8c:ef:e0:73:10:79:ab:a3:fe:b6:1f:4b:e4:fd:33:
                    3f:a2:91:b5:7c:e7:8a:3a:5c:c5:dc:cb:f8:8e:5e:
                    27:42:65:6e:59:d3:36:4b:0c:5d:92:5d:2a:b5:f3:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:98:16:7C:9B:A9:91:7F:6D:5E:C5:4D:B7:85:6F:30:32:26:53:27
            X509v3 Authority Key Identifier:
                keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:ed:04:44:67:e5:55:2f:72:c7:24:1c:a6:1e:62:1a:b3:
         21:c0:b0:01:d8:f0:6b:af:41:f7:ff:4e:71:ac:f9:10:9a:5f:
         0a:ae:b2:df:c7:1e:9f:4c:aa:91:5e:ba:d5:03:58:38:a9:61:
         c3:13:66:c3:5a:e7:a8:2c:aa:49:67:9b:1c:26:15:fd:c8:c6:
         9c:e5:d2:fc:9d:42:4d:74:56:61:c0:f1:15:02:43:7d:a0:02:
         6f:cd:2a:a7:00:40:a4:92:18:dd:f5:68:01:9e:bc:bf:f3:3e:
         5a:63:9e:78:7e:e4:3e:ff:b2:0f:d8:1a:18:5f:1b:da:84:d2:
         3b:57:42:bf:d4:38:f4:c3:0b:d2:d4:d2:2e:f4:e2:49:9a:f9:
         57:69:07:45:d6:4d:55:b9:20:6e:ea:e1:ba:aa:98:8f:4a:5c:
         fd:9c:ac:f3:0a:2b:08:5d:5e:42:7e:8e:4e:99:e7:89:7a:b8:
         2f:f9:23:f2:9c:dc:24:8f:1f:05:29:6b:76:7e:65:f6:cc:8d:
         b5:28:aa:65:98:87:ac:16:c7:af:57:10:88:08:e5:ab:56:d6:
         29:fa:f3:32:5f:6d:72:a7:46:31:69:8b:a1:09:7e:b7:a0:a5:
         1e:cd:c1:ff:d3:2d:1d:43:7f:72:4d:fa:c9:9a:c0:c5:a3:ec:
         5f:59:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:52:06 2026 by rpki-client