Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
File:                     AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json)
Hash identifier:          tdwa3CWjvlYx9VNaStrF6Awf1wFss3wIGbx54yknhCw=
Subject key identifier:   91:EC:40:2A:B0:B7:7D:29:4B:EF:54:9F:D8:09:FF:BF:CF:72:44:C7
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Certificate issuer:       /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial:       2C60CC512E13683D04CF8247C6C06AE46A87EEDA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
Manifest number:          C8
Signing time:             Sat 03 Oct 2026 13:55:14 +0000
Manifest this update:     Sat 03 Oct 2026 13:50:14 +0000
Manifest next update:     Sun 04 Oct 2026 14:10:14 +0000
Files and hashes:         1: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=)
                          2: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=)
                          3: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: 6yzyv0xJCtaFfYodA0gDSfr9TODCu0g+b9VAllKEMPU=)
                          4: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=)
                          5: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=)
                          6: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=)
                          7: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
                          rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:cc:51:2e:13:68:3d:04:cf:82:47:c6:c0:6a:e4:6a:87:ee:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
        Validity
            Not Before: Oct  3 13:50:14 2026 GMT
            Not After : Oct  4 14:10:14 2026 GMT
        Subject: CN=91EC402AB0B77D294BEF549FD809FFBFCF7244C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:ab:95:62:df:79:16:1b:9a:92:4d:69:9a:
                    60:24:5d:5a:e3:c9:27:a3:3b:7d:2f:78:00:c8:39:
                    87:22:ad:ea:19:b1:21:15:ec:82:16:93:31:d8:23:
                    19:b6:47:f5:56:aa:11:44:24:ed:b8:35:7c:fe:36:
                    1a:c3:92:e4:c1:fc:18:98:d6:48:66:cc:3c:3a:1b:
                    72:a5:db:f0:ab:95:37:fd:a5:4a:3c:be:0f:c5:4d:
                    6d:ad:34:01:9b:7f:45:37:59:e0:59:8b:5a:23:89:
                    ef:7f:40:4e:a6:2f:31:e1:f0:90:36:78:7b:72:47:
                    1e:11:1b:97:d9:9d:90:b7:fc:6e:3d:2a:fa:c4:31:
                    4d:a4:3d:3c:d7:f5:ba:5f:59:e9:c5:92:28:5f:da:
                    d4:e7:77:bc:ec:42:38:6b:13:87:d8:43:f2:0e:a0:
                    32:21:04:01:89:9c:af:55:69:c8:eb:87:ed:f6:f6:
                    54:1f:33:0d:11:19:26:25:28:7c:ed:30:58:c3:50:
                    7a:ab:80:d6:40:d7:98:76:90:56:ec:a8:dd:04:99:
                    8b:2e:b4:f5:c2:b1:62:89:c0:ea:26:1a:15:a6:87:
                    bd:51:1e:ee:8b:54:18:da:59:f6:8b:bd:d5:69:66:
                    56:ac:25:df:a9:64:f1:08:ac:d0:dd:7d:a9:a3:ab:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:40:2A:B0:B7:7D:29:4B:EF:54:9F:D8:09:FF:BF:CF:72:44:C7
            X509v3 Authority Key Identifier:
                keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:74:f1:b0:a7:ed:64:19:55:a2:8c:5a:1a:28:90:ce:47:
         5e:2e:e5:68:13:4a:ad:b4:2a:45:dc:9f:34:b0:47:da:ec:a0:
         e6:b6:9e:c1:bb:d4:f4:a5:70:12:fd:b9:3e:a4:48:f7:1c:d9:
         78:ef:1e:02:12:4e:63:41:67:37:1e:9e:fe:af:2c:7c:54:23:
         e5:89:8e:6c:38:6e:90:bd:2e:96:fe:11:2f:9d:65:e1:58:00:
         60:fc:c4:1c:33:93:41:85:70:5f:15:b1:18:13:6f:9e:71:f1:
         22:26:c5:6a:dd:1b:de:79:0b:6a:12:a6:46:5f:19:1a:d4:ee:
         56:46:6a:6b:61:82:53:96:b6:0d:fd:a6:a3:28:50:2f:ab:56:
         ec:d6:2b:62:94:db:e9:b1:ff:66:bc:c2:13:ff:ca:7f:90:36:
         57:af:07:50:c6:59:0c:bd:82:5f:eb:c9:10:1e:fe:fe:36:32:
         85:5b:4b:aa:6a:f7:d7:6b:6a:15:e5:6c:cc:c6:19:d3:da:ae:
         c1:6c:f4:40:7b:51:f8:ec:bc:d9:12:72:29:08:2c:03:9b:27:
         1c:27:6a:c2:0c:41:df:a7:72:22:5b:98:24:a3:2f:9d:2c:df:
         b0:fa:e3:c4:77:38:2c:68:e0:f2:6f:91:82:39:58:77:77:c0:
         5a:7f:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:43 2026 by rpki-client