Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json)
Hash identifier:          zdMTHHm0UL0LwkNBtqrFbTgrjXX9qnoq17g6y3LWBrA=
Subject key identifier:   C8:CF:3F:7A:C2:D0:88:03:78:64:DE:68:5B:4A:5C:33:77:E2:65:35
Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Certificate issuer:       /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
Certificate serial:       362998169C830824D25F9EC1919FA71E220887F9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
Manifest number:          C6
Signing time:             Sun 04 Oct 2026 19:50:31 +0000
Manifest this update:     Sun 04 Oct 2026 19:45:31 +0000
Manifest next update:     Mon 05 Oct 2026 22:30:31 +0000
Files and hashes:         1: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=)
                          2: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=)
                          3: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=)
                          4: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: +yut8e1r6qhTC6rKUS18ETkrrBUQ+aNoG/jB8SyTmYE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl
                          rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 22:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:98:16:9c:83:08:24:d2:5f:9e:c1:91:9f:a7:1e:22:08:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Validity
            Not Before: Oct  4 19:45:31 2026 GMT
            Not After : Oct  5 22:30:31 2026 GMT
        Subject: CN=C8CF3F7AC2D088037864DE685B4A5C3377E26535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:44:c4:36:84:12:6e:93:58:e4:dd:e7:09:
                    c8:31:d9:13:9d:36:f3:94:71:2d:80:75:82:45:17:
                    01:b8:7b:4f:d1:8c:66:dc:22:ab:4e:b3:a6:8c:44:
                    c6:7d:73:26:c7:80:08:bb:28:82:7c:44:01:5e:29:
                    33:09:8e:dd:63:b9:8f:f2:cc:01:11:d0:9d:99:78:
                    40:e8:ee:4f:59:b3:d2:4a:95:d2:34:2d:f4:3a:e6:
                    f4:5a:f0:e3:fb:84:a2:d0:5f:e9:58:84:71:c7:a7:
                    54:a2:f0:bc:32:60:6e:58:d7:57:16:23:01:f7:32:
                    7d:57:1b:42:c3:4d:3a:d4:da:3c:c0:be:84:a4:cc:
                    5f:63:ca:22:7c:0a:a1:31:b2:bf:7d:58:5d:24:70:
                    94:d2:6b:42:07:72:4a:c6:ef:bc:06:a2:f0:dc:bf:
                    d6:27:94:a5:7a:70:0f:66:69:5a:64:ca:d1:e8:5a:
                    a2:1d:06:59:a1:17:c8:8c:0c:45:85:d6:d6:d1:46:
                    37:4f:f1:44:ec:e9:f9:35:8d:30:4b:5b:c9:0c:1f:
                    99:44:04:bb:6f:82:5b:18:10:b2:58:ac:f9:5d:a3:
                    6e:8a:2d:2b:c8:d1:b6:ee:47:c0:04:4f:f8:fb:51:
                    7c:a7:06:bb:d8:e6:37:a3:27:4c:a8:ba:7e:31:dc:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:3F:7A:C2:D0:88:03:78:64:DE:68:5B:4A:5C:33:77:E2:65:35
            X509v3 Authority Key Identifier:
                keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:9c:4e:03:b7:32:7c:3e:55:05:d6:36:3a:75:10:03:a2:
         c6:d6:34:88:0b:32:a1:8b:df:3b:f4:ee:64:7b:49:46:a7:fb:
         09:ec:48:2d:cf:06:5d:86:88:58:bd:4b:95:90:9d:01:67:eb:
         9c:58:c4:ba:ff:be:04:0f:bb:09:90:ee:23:a9:d6:40:6c:06:
         e1:1f:28:a7:8e:fd:85:b9:d2:3a:f3:5f:5c:77:58:5f:43:4a:
         88:06:9c:ff:73:8b:72:48:4c:85:e5:12:d8:10:d6:34:5d:de:
         6f:5c:b8:ea:6c:6f:58:45:cc:b0:ab:5c:53:78:b0:e8:4b:88:
         79:59:cc:cd:39:7a:d3:57:7e:52:e6:f1:fe:2d:25:00:31:ab:
         55:5f:30:fb:90:53:a1:f1:a7:32:4f:25:7e:bf:d8:43:b1:c0:
         e9:de:e1:09:9c:7c:10:31:77:fc:88:3d:f4:0a:59:6e:c5:e1:
         e7:ea:76:82:97:b7:52:4c:cd:8d:23:83:83:33:d4:b8:d1:5c:
         c6:b4:f7:ba:82:2c:d5:68:57:54:2c:92:54:70:62:45:f6:b2:
         b9:76:ab:a7:a7:a7:f7:53:f4:2b:8a:69:f1:05:82:73:5b:44:
         d9:df:48:ce:af:5b:02:59:36:41:e1:02:13:1a:4d:fb:7f:a6:
         87:85:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:48 2026 by rpki-client