Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier:          iMQaPKuVFf3c6fg9hTfKdsr1bhT6kJpFYFRniXLUkrM=
Subject key identifier:   F7:47:C0:34:75:EE:82:E2:D4:1A:12:90:E1:2B:C9:C3:03:EF:D1:9A
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       4D396C90A3AD1A6A460344CD8AC8C7A4CFBF5042
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number:          D4
Signing time:             Wed 07 Oct 2026 18:13:24 +0000
Manifest this update:     Wed 07 Oct 2026 18:08:24 +0000
Manifest next update:     Thu 08 Oct 2026 19:47:24 +0000
Files and hashes:         1: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: PRJb7TJoQMapVvKjuAmCzwfRlwhT/HTTqNA14Vk/xMg=)
                          2: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
                          3: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
                          4: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
                          5: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
                          6: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
                          7: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
                          8: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
                          9: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
                          10: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
                          11: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
                          12: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
                          13: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
                          14: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
                          rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 14:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:39:6c:90:a3:ad:1a:6a:46:03:44:cd:8a:c8:c7:a4:cf:bf:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: Oct  7 18:08:24 2026 GMT
            Not After : Oct  8 19:47:24 2026 GMT
        Subject: CN=F747C03475EE82E2D41A1290E12BC9C303EFD19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:5f:97:b7:ff:2c:06:ea:b3:cf:4f:f0:43:
                    6e:7d:77:8d:c1:6c:bf:91:8d:b6:66:76:a0:f4:81:
                    6e:bc:44:90:fd:cc:b5:89:c8:84:c9:4e:89:69:9e:
                    5b:bb:2c:f1:cb:d9:b8:ee:78:12:8d:47:ba:d2:d1:
                    1e:d2:ed:79:8c:56:a2:d4:89:c5:75:0a:03:eb:45:
                    6c:fe:af:88:13:1b:fb:27:6d:81:c0:62:3d:38:ab:
                    02:25:5d:cd:05:88:fb:eb:db:45:16:e4:a7:21:5b:
                    fb:e3:9c:a7:e8:fa:10:d7:bc:d6:df:a2:6a:a1:01:
                    9b:79:7c:c9:2f:1e:7e:84:42:fe:42:7d:29:f7:9b:
                    f5:2f:7c:cb:1b:be:54:08:96:8f:e9:86:d2:6d:f0:
                    98:d9:cf:ef:21:43:25:98:d3:51:01:41:68:ea:5b:
                    b4:35:9b:a0:74:1b:5f:74:e9:6c:07:d4:59:38:33:
                    16:95:31:b0:38:33:2a:06:97:34:3e:95:52:76:e0:
                    33:f8:04:b4:1e:a3:78:91:44:86:cd:49:4d:70:ce:
                    9f:29:96:7f:fd:17:4c:00:09:0d:c7:4e:69:71:82:
                    b0:1d:69:98:53:59:ed:e6:3f:1d:ed:6e:5b:57:ca:
                    ec:6b:e8:3a:d9:0d:6e:67:be:c5:df:01:87:6c:e6:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:C0:34:75:EE:82:E2:D4:1A:12:90:E1:2B:C9:C3:03:EF:D1:9A
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:ec:ca:50:63:4b:71:f7:92:68:10:8c:8e:66:98:09:97:
         e4:76:1d:6d:bc:03:fd:dc:f9:73:9a:33:07:3d:b4:74:82:1c:
         39:c1:95:f2:5a:39:48:ac:2b:e7:1c:1e:49:6b:e9:bc:69:95:
         df:13:70:eb:f8:91:44:b3:cb:7f:42:ab:21:87:d5:57:40:21:
         e1:f8:17:ee:39:a6:b1:52:24:2c:eb:72:0c:df:51:24:a0:dc:
         65:53:11:df:1a:3f:41:ac:07:67:26:ef:63:3b:ae:7d:93:a9:
         ee:c6:8c:ab:9b:4e:0d:ba:c9:de:3c:87:50:84:cc:09:c6:26:
         03:e1:13:dc:08:d0:9c:d6:f2:f9:b7:2c:56:3f:84:6a:8c:4d:
         14:9c:33:30:61:1e:f2:a3:4b:9d:f8:d8:6d:a3:11:62:4f:4e:
         f2:8d:97:c5:81:b5:40:4d:1d:d1:c0:f9:a3:17:10:7c:43:1f:
         dd:07:9a:f1:2f:a9:a0:76:d6:cf:6d:30:24:ee:51:70:80:0a:
         6b:5e:4c:02:bf:2a:d4:f7:62:57:01:66:a6:02:6f:23:e9:44:
         81:ca:0b:2c:63:5c:b9:e3:76:50:9e:d7:da:eb:5f:b5:ea:e4:
         dc:b4:01:fa:a0:ed:cd:53:53:f1:19:d0:33:51:b7:e6:48:30:
         6a:6f:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:42 2026 by rpki-client