Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
File:                     7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json)
Hash identifier:          mUPp/7eFKpTifdPk2+GM3H8qvcKciEKBlqZ0qZMQRgo=
Subject key identifier:   52:A8:25:3E:C7:B8:9B:9D:70:FC:A2:5C:E1:9A:C0:F2:5F:7E:7E:57
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       582601A9853C0B57A93B754DE331A9CEF09B8CE0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
Manifest number:          3A
Signing time:             Sun 04 Oct 2026 21:00:38 +0000
Manifest this update:     Sun 04 Oct 2026 20:55:38 +0000
Manifest next update:     Mon 05 Oct 2026 23:19:38 +0000
Files and hashes:         1: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=)
                          2: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=)
                          3: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=)
                          4: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=)
                          5: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: wPbB7CBztxCGBGNE9DH4y6O+IHmmCpBK685qCiRFUtw=)
                          6: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=)
                          7: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=)
                          8: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=)
                          9: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=)
                          10: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=)
                          11: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=)
                          12: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=)
                          13: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=)
                          14: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=)
                          15: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=)
                          16: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=)
                          17: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=)
                          18: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=)
                          19: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=)
                          20: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=)
                          21: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=)
                          22: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=)
                          23: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 23:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:01:a9:85:3c:0b:57:a9:3b:75:4d:e3:31:a9:ce:f0:9b:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Oct  4 20:55:38 2026 GMT
            Not After : Oct  5 23:19:38 2026 GMT
        Subject: CN=52A8253EC7B89B9D70FCA25CE19AC0F25F7E7E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:1f:46:40:2d:34:f2:07:a9:cd:97:03:d8:
                    cf:2b:ea:d9:02:4a:4d:83:cb:4f:6c:ed:b4:78:8e:
                    6c:10:46:2a:16:91:21:12:a0:23:68:d4:2a:a6:a9:
                    21:39:27:d8:9f:da:4a:8b:61:0a:71:fe:be:e8:38:
                    49:37:49:3c:90:14:fe:e5:96:73:f8:08:ba:2a:ae:
                    4e:89:9d:f4:82:aa:fe:21:15:9a:c6:e2:76:d1:a1:
                    68:41:2a:ed:51:b2:0f:a0:3b:fa:6f:e6:1a:5b:02:
                    39:c6:ac:b5:69:f0:d7:58:92:3a:da:1a:85:a3:e6:
                    da:6f:9e:10:75:26:68:f4:fa:47:d1:0a:17:c6:eb:
                    91:c3:49:36:60:60:e0:b2:e0:88:68:c3:c0:7a:25:
                    b7:da:b7:27:4c:57:24:90:c4:99:cb:5c:c2:48:cb:
                    6d:4a:93:c2:36:b1:0b:36:7e:1b:dc:23:c5:dc:04:
                    db:a7:4c:12:95:52:6e:ca:02:6b:c9:65:1b:f9:7a:
                    ef:b9:67:fa:47:7e:fe:fe:74:60:4f:26:d2:8a:ff:
                    b7:49:e2:09:b5:3e:8b:92:48:47:e4:42:18:e0:cf:
                    66:91:09:01:3d:fb:4e:03:57:21:95:48:7e:f6:72:
                    89:02:f5:69:f4:a4:ff:75:22:f3:63:4d:78:af:54:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:25:3E:C7:B8:9B:9D:70:FC:A2:5C:E1:9A:C0:F2:5F:7E:7E:57
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:9e:da:c4:70:de:4a:b5:c8:94:9b:af:35:87:c5:e5:a7:
         17:c3:55:28:b1:19:11:ed:bd:dc:29:72:f7:9c:52:9f:66:b5:
         db:f4:99:d0:61:f2:f8:42:71:d8:7f:4e:a9:08:75:66:20:16:
         84:c2:dd:48:42:1e:5d:f0:86:74:9d:c9:10:47:c6:6d:8b:5d:
         47:25:a8:41:ef:16:2f:18:c8:57:79:90:45:65:ba:36:e8:40:
         3c:62:7d:d1:d9:41:f1:61:69:c2:82:d5:d1:d0:a3:16:19:b0:
         d5:c1:ae:d6:68:76:30:1f:e7:cb:ef:b8:e0:37:29:6d:9c:fc:
         8d:82:33:9c:7f:c8:e1:64:37:72:9e:1e:8b:7f:99:3f:8c:cc:
         0a:7b:4a:25:ce:a4:44:c4:c9:8f:63:3f:5f:ab:6f:87:14:a3:
         9d:49:76:32:c0:6b:90:47:f2:9c:06:a2:d5:a4:e9:49:51:df:
         49:da:41:93:cc:f9:05:ff:5c:75:8c:5b:67:eb:c7:d3:51:63:
         dd:a2:05:29:ae:3d:51:88:59:c9:92:24:44:29:8d:35:49:c2:
         0f:b8:05:a7:51:d6:bf:d6:10:2f:9b:34:75:58:fa:c1:17:01:
         4c:9f:67:e7:08:68:6b:d5:ec:a6:07:ab:e9:0c:e7:1a:17:66:
         a1:74:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:28 2026 by rpki-client