Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File:                     DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier:          6az2XdY1rOPlg44nfr3EjI5ibKpq75K744qkbqEhajE=
Subject key identifier:   15:DE:85:42:39:F4:BF:B7:10:9E:17:35:76:A6:E4:E5:29:31:E6:21
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       2F357172F640FAB09685D552B4FC3D52FEAEFBD2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number:          0101
Signing time:             Sun 25 Oct 2026 17:26:11 +0000
Manifest this update:     Sun 25 Oct 2026 17:21:11 +0000
Manifest next update:     Mon 26 Oct 2026 18:54:11 +0000
Files and hashes:         1: 3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa (hash: YnpfP1IY3Vl8PX3NftJuZv3w6OU/wLlp+t4Hb1Ri/Ek=)
                          2: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
                          3: 3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa (hash: DlmTrH0HWP82INqSmtsVtIWlfyhVreq2AQXQztnDoMc=)
                          4: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
                          5: 3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (hash: /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=)
                          6: 3138372e37392e3230302e302f32342d3234203d3e203137393939.roa (hash: Ms8KWMiqHBUeweg6G85Jzg70gg1CWi1Nsi+XQu4djsw=)
                          7: 3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa (hash: 3+dW9wI0EjgqQpXg6HhrskIvYJ2q/OO48C7Pc+fjGww=)
                          8: 3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa (hash: JI4So8ZhAPE0PToBNtuSCn4oQjqoqDXKjENSD5r0Aa8=)
                          9: 3138372e37392e3234382e302f32342d3234203d3e20313331363738.roa (hash: GPyZaSlRW0uZ9rINXF8kV4fuvB+9dJcD8GVRMaJQrtg=)
                          10: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
                          11: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: 7z5DXeV37Lf31lD/bIrCKiMWo8M+1rxiOSrn/pf/jjI=)
                          12: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
                          13: 3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa (hash: KA0OUMP7ljY4AzOV5ZHcM5DuWTOfHvm6pZOogffe2ro=)
                          14: 3138372e37392e3139342e302f32332d3234203d3e20323037353530.roa (hash: CFYijgrVe9thQn2UPKNNnCd1WKmnT7yKY7hnrYCMKzw=)
                          15: 3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (hash: AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=)
                          16: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
                          17: 3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa (hash: NOssyf0cVbehU0NIrpbuxzGDevbFBHHPuCiEoYJfVaI=)
                          18: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 18:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:71:72:f6:40:fa:b0:96:85:d5:52:b4:fc:3d:52:fe:ae:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Oct 25 17:21:11 2026 GMT
            Not After : Oct 26 18:54:11 2026 GMT
        Subject: CN=15DE854239F4BFB7109E173576A6E4E52931E621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:de:c0:23:39:68:5e:f2:ec:da:7c:21:dd:
                    ed:8b:9b:e5:14:ad:c3:4e:b4:a5:e9:c9:27:8a:a7:
                    05:c4:0d:04:8c:6f:ca:ef:fe:d8:e9:51:55:17:5e:
                    88:4c:fa:9c:4a:1c:f9:bd:a6:3a:87:60:eb:66:1a:
                    1a:b8:55:e4:59:af:a1:48:ca:ee:51:96:05:dc:0f:
                    45:2c:04:d8:fa:81:ec:4d:3c:a5:85:82:f2:43:37:
                    f2:c9:f0:77:6a:0c:85:eb:2a:e4:30:61:89:d8:e9:
                    35:c5:9f:22:fb:1f:0b:fa:c2:93:46:5e:e2:17:b8:
                    e4:af:5c:bc:94:2c:34:db:3c:cd:ce:05:7b:20:e5:
                    27:f8:a9:3b:b3:66:73:91:08:af:34:87:11:75:4a:
                    67:77:7d:bd:fb:f7:8a:f2:3f:f3:09:e5:37:43:a8:
                    67:db:06:0b:96:45:cc:ca:03:2b:82:e1:78:b0:96:
                    36:f8:ca:3e:9f:0e:ef:ef:38:b9:34:65:b6:bf:29:
                    1a:e9:53:92:24:40:12:af:f6:78:80:7b:d2:da:35:
                    9e:d1:3d:b1:7f:db:c4:1c:8b:8c:e9:0c:9b:58:27:
                    5b:cf:ba:31:61:ad:d4:9f:e4:6e:de:b2:44:7f:99:
                    f2:5c:bd:20:70:3b:90:8b:7a:59:84:a7:99:2f:62:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:85:42:39:F4:BF:B7:10:9E:17:35:76:A6:E4:E5:29:31:E6:21
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:0a:4a:f3:a4:a0:6e:b1:bb:44:4f:36:f3:47:4f:af:42:
         84:c9:a1:db:50:fc:55:23:ef:b7:95:d9:5c:f1:4b:84:3b:b4:
         94:8c:d8:af:ea:77:94:8d:db:9c:12:29:bb:3c:b2:83:b3:0b:
         7b:57:4f:49:c8:34:a6:f1:1f:31:4e:ef:1a:84:bd:a8:a5:6a:
         3e:e8:a1:5b:c7:3d:54:22:6d:72:a3:85:07:b9:b9:ad:64:35:
         72:3e:64:17:3a:47:f0:be:7a:b9:06:e0:16:1a:18:3e:a9:90:
         69:ab:89:68:3b:31:16:17:cb:f1:76:93:b3:b5:4a:e9:c3:b5:
         44:07:f1:be:1a:94:33:3d:b8:92:71:78:f7:5b:5b:65:81:6e:
         65:55:47:61:41:e3:c1:8a:8b:d5:b9:db:18:df:6c:ed:87:85:
         cc:7e:4c:e4:f6:05:b8:b7:15:54:d5:c7:b9:69:40:32:4d:49:
         24:f4:32:fd:d2:fa:c9:b1:b8:8b:41:db:64:62:49:05:3e:0b:
         41:af:d1:77:4b:82:83:96:9e:6b:b8:d1:8a:dd:d1:54:ff:62:
         76:a9:da:65:bd:40:93:b5:ff:1d:37:a1:bb:67:1a:dc:44:29:
         8b:8f:3a:64:cb:fa:14:a0:49:c6:eb:86:dd:05:6b:72:2d:1a:
         75:01:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:02:32 2026 by rpki-client