Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
File:                     6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json)
Hash identifier:          bvSAOkkYWmzSZNEUzMq2juoVQ/jaL///jjJqAj+zMjI=
Subject key identifier:   A5:75:7C:84:D8:F3:8C:4F:51:4D:58:D0:92:03:12:F8:4A:8C:43:C9
Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
Certificate issuer:       /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Certificate serial:       10053C288ED79B0AF5921F4D1B1D85F3FAF72E1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
Manifest number:          C8
Signing time:             Wed 07 Oct 2026 08:37:31 +0000
Manifest this update:     Wed 07 Oct 2026 08:32:31 +0000
Manifest next update:     Thu 08 Oct 2026 10:53:31 +0000
Files and hashes:         1: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: 0SvxHVULiU6UUOsf4VOEnW0ogYdjR0boxCb3m3r8E2I=)
                          2: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=)
                          3: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
                          rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 10:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:05:3c:28:8e:d7:9b:0a:f5:92:1f:4d:1b:1d:85:f3:fa:f7:2e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
        Validity
            Not Before: Oct  7 08:32:31 2026 GMT
            Not After : Oct  8 10:53:31 2026 GMT
        Subject: CN=A5757C84D8F38C4F514D58D0920312F84A8C43C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:74:2a:31:e0:03:8f:68:12:51:31:74:a2:
                    c2:92:fc:99:2b:93:b0:d8:72:33:df:63:11:c7:b5:
                    cf:6a:0f:d1:44:72:fe:a1:e0:af:58:1f:32:b2:8b:
                    d1:81:d7:f7:92:ae:ad:94:fe:00:8f:31:d2:44:dd:
                    55:e9:de:93:69:ac:39:96:fa:6d:7f:bf:77:41:ea:
                    f7:22:0b:79:fb:0f:73:93:44:56:09:25:8b:d6:02:
                    b5:a9:20:72:e0:cf:99:80:c8:7a:26:e4:5b:3f:71:
                    b9:2c:c6:53:ef:81:be:26:6f:bb:73:5e:82:d9:65:
                    31:12:ec:fa:4f:7b:51:75:2d:20:45:15:45:dc:90:
                    4c:3f:de:ed:a4:ea:27:da:4c:fd:4f:ba:b6:91:80:
                    48:4b:71:63:bd:27:db:e2:56:9a:f8:47:37:d1:e7:
                    7b:56:71:1d:94:5d:9d:00:3b:36:e8:29:0e:11:f5:
                    f8:56:83:41:89:97:3c:45:b2:2f:f3:d5:52:1e:02:
                    8a:75:6e:b9:7e:1d:a1:16:d1:ec:85:f4:17:1d:b8:
                    6c:b3:a4:5d:22:5b:a6:f8:9f:16:14:e7:16:31:eb:
                    86:34:51:38:cb:9a:41:41:33:61:1c:1d:29:0b:9e:
                    42:f2:35:0b:b4:ba:38:b3:fb:f8:bf:cd:60:0e:92:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:7C:84:D8:F3:8C:4F:51:4D:58:D0:92:03:12:F8:4A:8C:43:C9
            X509v3 Authority Key Identifier:
                keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bf:da:b3:45:fb:d1:94:3c:4d:cc:6e:12:9c:3e:39:19:d3:
         ff:ed:c5:ba:fc:55:57:f3:6b:f6:ac:23:90:da:e4:c4:a8:1b:
         6a:c1:e8:6c:96:2e:79:fb:ce:1c:3c:12:d9:5b:c1:e2:96:45:
         e6:1c:be:28:e7:7a:47:af:82:50:e4:70:77:61:b3:e7:a3:e1:
         f2:ae:d7:11:31:cc:26:5c:5a:94:a0:76:63:94:08:d5:e7:9c:
         df:ec:d6:be:07:be:1a:6b:29:23:54:93:66:d5:76:0d:9c:58:
         30:eb:fb:17:e4:59:41:11:8a:40:6e:1e:76:b0:2e:94:44:1f:
         01:29:d2:fc:a6:e2:12:43:e7:28:81:fb:db:b8:b5:5a:37:1c:
         20:b3:51:ee:49:a5:87:a1:52:ec:57:c4:0a:16:31:fc:da:91:
         dd:a0:8e:29:68:f1:cf:ef:5b:de:8c:ca:98:c9:c8:65:78:ba:
         24:d9:7b:96:61:e4:3c:4f:e7:1c:9f:da:20:ab:6c:2c:8d:7c:
         16:cd:3c:be:d8:2f:15:01:15:58:cb:c6:c6:c0:ee:c8:56:01:
         a5:e2:00:45:e5:11:8b:38:fa:43:c9:e6:0c:02:5d:fa:ad:e7:
         c7:05:31:f4:b6:e9:aa:46:98:7d:5e:e1:f3:ec:04:c8:ee:a7:
         1b:38:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:16 2026 by rpki-client