Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File:                     68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier:          v6cgndw8Rw/XEtfnTogB4NwwZG8NTF8m8FxrK2yGKLQ=
Subject key identifier:   4B:8D:78:55:56:FE:33:14:36:0D:3B:C6:69:D8:0C:A8:05:D1:48:B8
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer:       /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial:       047A3853BA664E023F69C157373C475CBB661D21
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number:          C6
Signing time:             Sun 04 Oct 2026 23:46:00 +0000
Manifest this update:     Sun 04 Oct 2026 23:41:00 +0000
Manifest next update:     Tue 06 Oct 2026 03:24:00 +0000
Files and hashes:         1: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: rmQvNQVcbN0SbELNT5VySfwyrK5XXpaI13l655j34lQ=)
                          2: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
                          3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
                          4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
                          rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7a:38:53:ba:66:4e:02:3f:69:c1:57:37:3c:47:5c:bb:66:1d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
        Validity
            Not Before: Oct  4 23:41:00 2026 GMT
            Not After : Oct  6 03:24:00 2026 GMT
        Subject: CN=4B8D785556FE3314360D3BC669D80CA805D148B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:13:97:40:63:1b:4c:6d:91:de:97:9a:f3:
                    8a:df:4f:27:c0:64:df:b7:a4:d9:13:f3:66:17:4d:
                    47:66:41:fc:e3:df:16:0d:38:ef:fc:fa:33:2d:e7:
                    88:8f:aa:20:59:e6:f8:ae:9e:07:89:ce:ee:8f:5f:
                    53:0e:cd:5d:1e:88:80:98:90:20:21:cd:c5:32:2f:
                    f9:98:d8:26:3a:69:3f:51:87:78:56:06:f6:1d:04:
                    67:c2:74:7b:d1:e5:3c:45:bc:67:f5:76:f9:c1:8f:
                    ff:b2:3e:f1:f0:10:a4:a8:ea:7e:41:42:e4:6a:ec:
                    e3:3f:42:78:f7:b3:aa:c0:f9:e2:d2:bd:c4:63:a5:
                    c5:3d:30:8f:b6:38:2c:ba:1b:95:b2:be:7f:55:b8:
                    30:89:74:4b:20:df:af:a0:f3:34:d9:35:59:85:b7:
                    fc:d4:c4:1a:a6:93:a1:3e:37:dd:66:f6:e1:db:55:
                    e1:e8:7e:20:d7:20:4a:4f:01:58:2e:80:fa:b5:60:
                    c1:63:5f:2e:92:9e:51:fe:d3:e7:e3:fa:a8:e7:eb:
                    a2:ba:9e:c7:e8:20:e8:36:c6:f4:ba:3d:5e:98:c1:
                    98:07:f6:af:fd:a7:96:77:30:5a:9a:3c:77:74:16:
                    41:1c:93:7c:a1:08:dd:01:a3:de:24:d2:fd:85:9c:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:78:55:56:FE:33:14:36:0D:3B:C6:69:D8:0C:A8:05:D1:48:B8
            X509v3 Authority Key Identifier:
                keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:0b:ea:5e:bb:92:52:46:84:3d:2c:7c:06:68:9a:e5:f9:
         6b:60:44:fb:d8:b9:b8:9b:07:7c:6c:3a:86:52:0f:15:90:7a:
         8f:aa:c8:c0:91:b4:49:24:d1:d1:22:9a:71:10:59:4f:02:c6:
         17:8d:12:24:9a:48:50:13:30:7e:33:49:70:a6:47:ed:0f:f5:
         d0:23:7d:4e:e1:24:96:c9:7a:ac:c9:72:de:a5:5c:a8:ff:b0:
         24:93:8d:68:5c:c1:c2:1a:1a:52:c4:5c:c3:84:79:ca:65:30:
         79:97:f6:99:5f:e4:52:4f:86:c9:d1:65:4a:c4:ad:d1:d8:c8:
         5a:dd:4c:58:5b:6f:d1:1e:6c:7c:41:30:5d:b9:27:19:d6:19:
         62:73:9e:3e:c4:d6:94:3a:9c:15:93:61:ea:49:00:f0:f1:a0:
         e7:ea:33:8c:2c:fb:de:18:32:e8:42:a0:43:95:8a:b1:b1:6b:
         b9:af:02:86:e1:f6:b1:df:c8:fa:54:83:b9:95:a5:b6:f3:10:
         d2:b8:60:f8:ba:84:fe:4f:1b:47:aa:b5:c0:7c:97:ae:19:76:
         c0:5e:c9:69:a3:e7:a2:1d:1d:34:2b:8e:82:60:87:dd:de:07:
         7c:9b:b1:cc:93:27:93:bc:21:af:d0:d1:ef:ee:7e:dd:bb:da:
         15:84:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:17:46 2026 by rpki-client