Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File:                     9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier:          46HzA8+uLFdZD9E2Sg651MvUJydTsq6J7kvFWuKbv1M=
Subject key identifier:   AC:51:E0:7E:38:91:07:79:E0:98:AB:D7:A8:E3:DB:0D:28:34:7A:1D
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer:       /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial:       2BFE4E97862B544B7C8911959F7525F2A3DE0967
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number:          81
Signing time:             Sat 15 Aug 2026 03:34:13 +0000
Manifest this update:     Sat 15 Aug 2026 03:29:13 +0000
Manifest next update:     Sun 16 Aug 2026 06:13:13 +0000
Files and hashes:         1: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
                          2: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: U3QyXvivevWwmE5IV+8YaRKdgzOB6KNJido4goAvT7M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
                          rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fe:4e:97:86:2b:54:4b:7c:89:11:95:9f:75:25:f2:a3:de:09:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
        Validity
            Not Before: Aug 15 03:29:13 2026 GMT
            Not After : Aug 16 06:13:13 2026 GMT
        Subject: CN=AC51E07E38910779E098ABD7A8E3DB0D28347A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:ee:f2:7e:00:99:e2:62:10:fe:fc:fd:97:
                    43:f5:52:d0:b0:40:c8:7e:cd:18:65:29:29:85:a7:
                    9e:a2:4e:9c:4d:7f:95:ee:05:c9:c8:91:b2:20:6d:
                    fe:a9:64:66:44:ad:36:b6:9b:57:ac:97:5d:1e:0c:
                    eb:7b:33:81:58:55:86:8e:79:94:71:f5:90:60:87:
                    8a:a6:96:29:7c:58:7e:68:ba:c5:56:c2:27:d9:09:
                    e0:2c:50:5d:71:be:7d:fd:5b:0a:66:fd:0e:d4:27:
                    20:a0:69:0f:0b:6a:43:f1:6b:8a:dd:20:1e:7a:0a:
                    63:04:93:b3:76:d9:c7:5c:0e:05:93:a7:21:9f:27:
                    24:1e:cc:58:5d:cc:15:8c:a8:41:f2:ed:bb:38:1e:
                    10:ab:4d:4c:52:a8:98:29:53:c1:e4:26:af:df:9c:
                    01:ef:c3:9d:70:67:10:b1:86:60:b4:c2:ef:1e:92:
                    d4:71:b8:8d:4c:8a:0e:80:e2:9d:5c:77:e1:9f:cd:
                    47:c5:88:5c:59:ef:da:0b:7d:4d:f7:6b:f9:31:97:
                    f2:a1:11:4b:5e:84:95:18:6b:d2:ce:0d:b8:f6:a3:
                    b7:70:16:d4:02:07:bd:54:3e:cc:11:c2:9a:ab:2c:
                    80:df:c5:56:33:96:86:47:cc:05:09:7e:04:25:41:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:51:E0:7E:38:91:07:79:E0:98:AB:D7:A8:E3:DB:0D:28:34:7A:1D
            X509v3 Authority Key Identifier:
                keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:22:c5:1b:c6:2f:59:0e:db:27:93:03:55:b2:3f:ac:fe:86:
         6e:21:6c:27:a8:7d:d3:5e:dd:fd:7f:e9:b5:97:0d:b4:41:c7:
         72:36:6d:4f:3b:bf:37:4e:d5:0c:17:3d:23:44:38:a1:6f:ac:
         ba:90:2e:00:91:ff:9f:d5:d0:e0:c8:d6:c7:79:7f:12:63:45:
         61:e2:bd:3f:de:ea:95:19:fd:b1:ff:31:9d:fd:54:89:99:fb:
         e9:a7:ff:60:e7:e8:82:6a:65:6d:80:50:e3:76:43:bc:34:b4:
         58:1e:6e:82:0c:35:21:17:34:53:e1:48:c5:d3:a4:97:85:e8:
         4b:96:01:24:5d:09:aa:5a:e0:72:5a:58:ca:22:93:e6:15:30:
         df:9d:4d:1f:d1:79:73:88:c7:de:7b:f5:8f:5a:11:6d:b2:02:
         b0:46:10:41:cf:78:ad:2a:30:68:15:da:8f:6f:44:3c:a8:fd:
         f6:7b:e2:b4:ab:30:60:8f:c4:60:f9:9e:d5:1d:fb:4e:c2:1c:
         0e:93:23:29:1a:b2:60:2f:18:66:3e:2b:cb:20:bd:1d:ed:88:
         45:df:09:97:7c:07:6e:a6:e9:9b:be:f5:e4:f2:a5:de:53:4b:
         3f:d1:78:d2:da:e7:5a:cc:c7:67:8e:bd:f4:0f:97:c2:fe:b9:
         bf:68:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:19 2026 by rpki-client