Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
File:                     A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json)
Hash identifier:          ILvh53q7ZpGVHaC0/wgyRPesx3qfTvMskP4xZJlKscg=
Subject key identifier:   92:A9:FA:64:3B:19:BD:13:B3:9A:E5:E1:A0:52:41:15:E7:E7:22:1E
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Certificate issuer:       /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial:       2A4BFE60DCEBF1C37E5B1517D4CDDA173114F470
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
Manifest number:          C6
Signing time:             Sun 04 Oct 2026 22:55:53 +0000
Manifest this update:     Sun 04 Oct 2026 22:50:53 +0000
Manifest next update:     Tue 06 Oct 2026 00:49:53 +0000
Files and hashes:         1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=)
                          2: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: ykcO5JDt/Ls93ySSr7r9npnFPC3zjB+q5sSQloaK0ic=)
                          3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
                          rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:fe:60:dc:eb:f1:c3:7e:5b:15:17:d4:cd:da:17:31:14:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
        Validity
            Not Before: Oct  4 22:50:53 2026 GMT
            Not After : Oct  6 00:49:53 2026 GMT
        Subject: CN=92A9FA643B19BD13B39AE5E1A0524115E7E7221E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:b3:70:ae:b3:31:4f:f8:95:6d:00:0e:79:
                    e9:aa:7d:32:0b:86:87:11:08:3a:e5:c2:ac:26:ef:
                    5d:25:25:cb:f9:0f:79:53:6f:fd:2f:3f:67:4f:45:
                    85:ae:8d:54:9c:10:3c:b2:d6:91:e6:ad:21:8c:7a:
                    96:2e:d6:ec:5d:c9:3a:cc:cf:42:af:42:cc:5c:c1:
                    a4:51:f0:e8:8c:32:d1:9d:69:27:f5:8c:18:f8:6a:
                    9c:0b:66:47:64:82:e2:53:81:13:54:77:c1:eb:c7:
                    26:00:d3:76:2a:87:36:ed:44:23:40:08:30:9a:8e:
                    6c:98:b6:a7:03:43:29:89:43:7b:cd:57:fb:52:72:
                    6e:61:9f:16:74:b3:98:bf:59:c5:3c:a0:68:b6:0a:
                    78:52:e6:5f:ff:f8:86:cd:e0:04:68:9e:78:d8:72:
                    e5:58:dd:a0:39:32:99:2f:4f:fe:0c:fb:a6:69:43:
                    d9:eb:17:a9:58:cc:73:32:3a:e8:a2:60:12:27:bc:
                    ca:73:1c:f7:d2:c5:86:17:86:f7:3a:ea:55:ab:08:
                    b9:b8:c5:76:85:78:26:5e:d4:78:8b:31:9f:e8:75:
                    6c:90:4f:da:cd:24:29:cb:eb:db:50:58:e1:a7:7f:
                    cd:73:fd:15:b3:70:4b:92:af:4d:a8:c4:73:72:70:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:FA:64:3B:19:BD:13:B3:9A:E5:E1:A0:52:41:15:E7:E7:22:1E
            X509v3 Authority Key Identifier:
                keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:2a:d1:cc:d1:24:d2:a7:c6:69:34:62:02:fd:d0:5a:f5:
         1e:e3:32:3f:88:fa:b2:6e:db:5d:2e:65:5c:08:2e:5a:42:56:
         23:35:b5:0b:c4:9c:5f:19:4d:70:31:09:93:4d:43:a7:a4:e8:
         cd:59:2e:40:6b:11:db:d8:05:c4:6b:51:1c:1a:06:e5:02:16:
         a8:07:7a:f8:4c:ed:94:4b:94:6a:6a:9b:c2:bb:c2:45:d5:e9:
         75:30:fe:51:8b:cf:27:30:89:b6:c4:66:35:00:00:52:8e:61:
         9a:a6:4c:51:51:98:4c:64:7c:c6:af:c6:16:4d:73:54:15:2f:
         fa:b4:06:6d:2a:fe:f5:4f:18:d5:a4:38:c8:86:dd:fa:3f:93:
         88:f9:d1:61:82:df:0e:21:d4:78:f7:b0:30:1e:f4:e2:47:c6:
         3d:04:be:c7:b1:54:84:0b:e1:bb:fd:d4:24:93:69:30:5d:ca:
         da:7b:59:34:17:b2:10:8e:45:38:79:10:c1:7c:64:87:43:69:
         31:42:5d:79:9b:d3:16:90:43:f5:f1:1c:23:0f:ff:f0:f5:b0:
         68:3c:9e:b3:ed:8f:98:35:9f:2d:87:fc:86:ee:44:d4:da:fd:
         49:56:0d:e3:d7:31:d4:8d:bb:6d:c2:f1:7e:1d:44:a2:d6:1f:
         5c:75:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:24:44 2026 by rpki-client