Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          T6JySpHhgcGFFC0u6IOVmuJBhnyKLcRox+ecdFVE9ts=
Subject key identifier:   67:AB:15:23:E7:E3:8C:97:42:9B:9C:5F:30:A7:07:76:F1:1E:7B:DD
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       4665AC63835F8A6810FE398BD8A610B6B4D203B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          C6
Signing time:             Sun 04 Oct 2026 10:35:15 +0000
Manifest this update:     Sun 04 Oct 2026 10:30:15 +0000
Manifest next update:     Mon 05 Oct 2026 13:17:15 +0000
Files and hashes:         1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: MSiwpNdm0fInuimJBcnGbBUFlE/ZS+3tYhPB7Zw6X4A=)
                          2: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
                          3: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:65:ac:63:83:5f:8a:68:10:fe:39:8b:d8:a6:10:b6:b4:d2:03:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: Oct  4 10:30:15 2026 GMT
            Not After : Oct  5 13:17:15 2026 GMT
        Subject: CN=67AB1523E7E38C97429B9C5F30A70776F11E7BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:ca:e7:b5:fc:96:fa:b5:1b:2e:06:8a:61:
                    eb:09:6a:8c:6f:b5:9c:52:ab:de:f7:45:d9:9f:f5:
                    12:be:7c:90:ec:fb:ca:46:93:41:65:33:e8:65:c4:
                    e0:7a:b7:a5:dc:af:57:27:b9:39:89:6e:2b:d5:e1:
                    9d:c4:71:eb:12:06:98:c0:f6:a2:4a:df:73:2f:17:
                    9e:b8:5e:e3:12:09:d5:92:fa:85:b6:5d:79:da:15:
                    d0:70:9a:9c:23:ec:ee:1b:18:db:f4:db:e3:e7:c2:
                    e1:82:ff:ab:8c:e8:07:9e:bd:1c:d1:24:0b:5b:31:
                    c0:d0:bf:67:56:72:d4:a9:cc:fe:31:dc:25:3a:40:
                    f1:26:d7:b6:2e:43:86:35:58:7e:35:e2:87:5c:1a:
                    fe:a3:2d:48:29:a8:1d:bd:0d:0c:97:94:57:fd:30:
                    4d:5c:a7:b2:42:d5:77:55:cc:af:d2:ae:58:a5:74:
                    be:34:5c:ab:85:eb:42:99:30:a0:46:ac:ca:2e:12:
                    dd:98:d2:95:bb:cd:a8:21:ee:90:a9:21:e1:65:4c:
                    ea:57:b7:e8:d9:ec:1e:e7:cd:63:7d:50:e3:b6:ac:
                    11:2c:23:10:ca:27:0b:8b:18:63:01:e9:37:df:3e:
                    5a:ea:d4:2b:32:8b:f7:66:8a:b3:4f:24:8f:42:26:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:15:23:E7:E3:8C:97:42:9B:9C:5F:30:A7:07:76:F1:1E:7B:DD
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:de:71:0e:b8:31:22:4b:ca:0f:98:2d:29:f7:8d:20:9a:
         50:3d:d9:8a:35:95:80:1b:82:7d:80:3f:c2:78:58:1a:88:6a:
         a5:f4:3b:54:13:af:a0:e7:01:67:c8:65:8a:8f:17:d5:6f:a4:
         5b:29:74:29:92:49:f4:97:e6:00:f6:f3:07:90:05:19:02:2c:
         a9:42:01:05:5a:a0:27:4a:90:fe:c6:6f:ef:74:fd:17:94:c3:
         8f:fd:00:7f:63:43:bd:ac:14:25:a3:be:1e:1d:89:6a:e5:99:
         2c:13:af:d4:df:4f:aa:57:e7:08:ff:84:01:87:72:af:6c:3d:
         a4:79:19:78:12:fa:5f:87:9b:02:64:3b:a7:83:55:56:2e:50:
         66:d4:76:c3:47:91:51:55:a7:27:c7:1a:d8:c7:ce:bf:01:d4:
         b1:0c:12:11:80:8f:83:5b:8a:28:c2:6d:d6:84:e6:8f:a0:e0:
         96:d7:7a:d0:47:c0:c2:92:5d:bf:76:ea:7b:55:ba:03:5c:65:
         c6:7d:d0:55:d8:36:ae:fe:26:45:98:d9:86:fc:1e:91:18:37:
         eb:4a:42:8c:5c:34:a1:7b:7a:76:59:40:b5:9a:ba:e1:ad:7e:
         27:c0:cb:18:2a:fa:8d:07:92:9f:d3:83:5f:73:54:5b:c9:f8:
         32:bd:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:04 2026 by rpki-client