Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File:                     9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier:          okSdv7E/mL3OKk9YKR+ntkPSuy/doLuxzlt+mLkFx+U=
Subject key identifier:   48:01:A3:44:BB:10:87:CE:65:54:DB:FC:CD:D8:B2:42:18:5D:B3:F4
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer:       /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial:       4E4081935CAAE244098E15A542C3278539292063
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 15:34:12 +0000
Manifest this update:     Tue 30 Jun 2026 15:29:12 +0000
Manifest next update:     Wed 01 Jul 2026 17:13:12 +0000
Files and hashes:         1: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
                          2: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: MbGLXA6q1CPm9SvM68NAXw4q0akbq97pFNLMMZAzyDw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
                          rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:40:81:93:5c:aa:e2:44:09:8e:15:a5:42:c3:27:85:39:29:20:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
        Validity
            Not Before: Jun 30 15:29:12 2026 GMT
            Not After : Jul  1 17:13:12 2026 GMT
        Subject: CN=4801A344BB1087CE6554DBFCCDD8B242185DB3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:d2:4a:69:96:bc:ec:59:ca:bf:74:b1:c3:
                    33:e0:96:92:44:d6:d9:01:de:ab:b7:b0:03:36:26:
                    f2:a1:04:59:ad:b0:88:1b:2e:ef:b5:01:f9:0a:df:
                    64:a3:54:1d:1f:fd:68:11:6a:09:5d:1e:2b:ef:43:
                    18:75:da:23:67:5e:cb:88:88:cd:0d:91:87:12:15:
                    72:41:a4:67:16:c6:4f:8c:f0:b5:88:e3:8c:c7:a6:
                    d4:2d:73:e3:d2:51:b9:84:4c:d2:21:a7:e5:80:8f:
                    37:c5:c0:95:66:6e:c7:ce:16:90:18:6c:ec:43:73:
                    07:fc:a2:4c:5a:9e:14:1e:bf:69:e7:03:a9:5c:4e:
                    15:80:49:ae:ca:c0:43:4a:dd:89:c0:5a:a3:a2:de:
                    7c:ce:0c:f1:89:8a:8f:ce:e1:53:6f:7b:ed:6d:d8:
                    60:e2:c4:28:95:35:72:87:ef:28:9a:71:48:04:2f:
                    36:99:70:28:c9:6c:aa:ab:fc:9e:ce:60:49:48:87:
                    5c:bf:d7:f0:91:40:54:54:14:a9:2c:b8:97:fb:35:
                    09:3f:b0:9d:86:72:ba:fe:08:a5:50:99:d1:a4:7a:
                    27:8d:b9:27:60:2a:9a:2a:0b:d6:ba:d8:8a:c4:a8:
                    11:b4:4c:0e:05:3a:86:f5:38:3c:23:4d:7f:06:e4:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:A3:44:BB:10:87:CE:65:54:DB:FC:CD:D8:B2:42:18:5D:B3:F4
            X509v3 Authority Key Identifier:
                keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:cd:39:da:0d:24:e8:e8:b3:39:4e:4a:a5:5b:70:0a:2a:
         29:fe:f2:93:d1:da:27:8d:d4:6f:c0:37:cd:08:59:81:04:e5:
         0f:9b:d0:5a:c4:bb:af:16:0a:4b:9a:79:92:3f:17:d6:9b:10:
         aa:4c:0f:3e:9a:5b:b6:12:9a:4f:0c:26:d7:f2:9e:fe:a1:fe:
         7d:8c:29:92:73:af:29:ae:e8:e1:b2:e1:15:a5:a2:ea:72:98:
         35:80:97:0d:a5:c9:5b:24:ef:3c:e4:83:88:4b:10:46:ec:c6:
         9b:e7:bb:f4:bf:fa:85:4c:12:9c:a5:50:54:18:7a:0e:8c:5e:
         78:28:71:01:be:6d:c2:ca:e1:b9:bd:df:5e:de:65:14:e1:a8:
         00:cc:74:6b:4a:78:19:bc:ef:2c:d4:ab:15:63:a9:10:70:8d:
         ae:19:7f:2d:57:6c:d3:62:fe:9b:11:6f:dd:8b:81:3d:18:18:
         43:50:e8:10:ef:17:b8:43:fc:7f:5d:86:a6:e9:fd:2c:bd:b6:
         c9:91:46:df:52:d2:d1:a5:10:3c:00:00:2f:66:a3:db:76:0f:
         d5:18:7d:3e:71:45:48:29:1c:10:73:8b:3f:28:04:3a:d8:97:
         33:90:f7:49:3f:32:76:33:7d:df:e9:eb:96:eb:10:a8:29:f0:
         9d:c1:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:00 2026 by rpki-client