Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
File:                     6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft (raw, json)
Hash identifier:          QwsKp+Cdls1E5oRpUCj6u3HXLg3+HxmRHIlZ6yCqCSE=
Subject key identifier:   E6:E7:28:24:A8:EC:9B:1B:D9:53:F5:8A:7D:84:D0:03:28:2F:0E:14
Authority key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
Certificate issuer:       /CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
Certificate serial:       37644C2585530BCF0696903A1EB3C755AE275AFB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
Manifest number:          C4
Signing time:             Sun 04 Oct 2026 09:04:47 +0000
Manifest this update:     Sun 04 Oct 2026 08:59:47 +0000
Manifest next update:     Mon 05 Oct 2026 10:06:47 +0000
Files and hashes:         1: 3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa (hash: P5QLHoBtt6SbxYucP/7Z4dIJgiwE8f3I3JbpUYs0g0M=)
                          2: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl (hash: h2J2NEQ2127l6JI+LIQvvWxfGgU54DHtAh/DavBPpEY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl
                          rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 10:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:64:4c:25:85:53:0b:cf:06:96:90:3a:1e:b3:c7:55:ae:27:5a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
        Validity
            Not Before: Oct  4 08:59:47 2026 GMT
            Not After : Oct  5 10:06:47 2026 GMT
        Subject: CN=E6E72824A8EC9B1BD953F58A7D84D003282F0E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:e9:25:4a:8a:25:61:97:ff:1d:fe:d2:d0:
                    bc:27:95:0d:f3:23:ad:29:8c:54:4e:1d:f3:98:a7:
                    16:4a:ec:41:1c:1a:bb:f4:2d:32:f9:db:61:31:aa:
                    cb:c0:9c:a6:4a:56:4c:d1:4b:9b:c1:6b:25:4e:30:
                    c6:82:c8:ab:6d:b2:d4:ff:9b:e8:2a:2f:78:bd:3b:
                    e6:89:45:fc:af:b6:93:66:5a:e4:4a:34:f1:2e:77:
                    53:c9:9f:2d:b5:59:86:86:7e:c0:76:b2:be:6a:8a:
                    7d:c8:24:f9:a1:c0:eb:f9:e7:68:87:4f:ad:58:b1:
                    2d:22:eb:e3:87:e4:c9:7a:04:04:69:49:99:46:54:
                    d7:50:bc:ae:64:68:61:de:0a:c6:9c:e3:21:93:bc:
                    ae:bf:bf:b4:7a:5c:b8:dd:04:59:73:1b:cd:21:a2:
                    bf:22:69:e0:a4:e7:5f:b8:e8:34:bd:53:f3:63:c7:
                    93:e1:29:cd:30:e1:98:f7:d5:4c:cc:e8:de:48:82:
                    11:b7:96:22:6f:b1:37:b4:c3:c6:0e:da:8b:c4:c9:
                    1b:bb:61:cb:ba:bd:6d:36:1c:37:6a:06:2b:50:f5:
                    8a:0c:51:e7:95:9d:d9:f6:73:9b:0c:14:9e:66:62:
                    3b:ee:c5:95:f2:96:a8:8a:b9:f9:86:5a:78:f3:3e:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:28:24:A8:EC:9B:1B:D9:53:F5:8A:7D:84:D0:03:28:2F:0E:14
            X509v3 Authority Key Identifier:
                keyid:62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:aa:6e:88:07:cd:90:bf:80:40:8b:82:23:37:d7:b3:d9:30:
         82:5e:aa:d2:6d:90:a3:ea:88:41:57:44:f4:1d:16:2b:89:8e:
         2d:f3:90:88:35:1f:43:96:99:be:b0:b0:9e:64:3c:d7:74:a1:
         e2:f6:85:99:c5:97:c6:aa:87:67:d7:7a:43:83:d4:3c:6d:cc:
         e2:6a:ce:c6:2f:54:0a:bf:d6:0c:2a:99:af:45:e2:8a:8f:46:
         9a:e3:08:e5:7d:82:f3:16:fe:93:ca:6a:86:15:68:16:12:48:
         37:b7:e7:b2:0e:ac:a0:47:9e:55:35:95:56:60:34:33:d9:26:
         ac:4b:86:0f:9d:08:df:0c:48:a9:cc:1a:a1:9f:10:75:59:2a:
         55:50:18:91:3d:36:62:0b:d0:67:31:6b:b5:1d:9b:44:86:22:
         e2:ca:60:b8:5f:ad:96:7b:17:8b:b7:60:aa:3b:84:36:55:4d:
         ad:b7:ff:82:ae:1d:0d:e1:96:6f:f8:cb:58:64:1b:d2:f9:3b:
         52:44:46:ee:0c:52:c1:23:b1:31:99:9e:69:49:f2:13:11:89:
         f6:7f:db:5d:0a:f8:a4:b1:77:9d:9b:75:8a:01:99:71:bd:a8:
         f0:1f:e1:d1:0c:8c:f4:96:a1:19:fe:ad:8c:02:cd:16:de:4a:
         9e:f6:d7:63
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUN2RMJYVTC88GlpA6HrPHVa4nWvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI3NkU5QTkxMTdDNkJEQjVGMzcyRDQ0RDBCQjlBQ0RD
NUYyQ0FENjAeFw0yNjEwMDQwODU5NDdaFw0yNjEwMDUxMDA2NDdaMDMxMTAvBgNV
BAMTKEU2RTcyODI0QThFQzlCMUJEOTUzRjU4QTdEODREMDAzMjgyRjBFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPeklSoolYZf/Hf7S0LwnlQ3z
I60pjFROHfOYpxZK7EEcGrv0LTL522ExqsvAnKZKVkzRS5vBayVOMMaCyKttstT/
m+gqL3i9O+aJRfyvtpNmWuRKNPEud1PJny21WYaGfsB2sr5qin3IJPmhwOv552iH
T61YsS0i6+OH5Ml6BARpSZlGVNdQvK5kaGHeCsac4yGTvK6/v7R6XLjdBFlzG80h
or8iaeCk51+46DS9U/Njx5PhKc0w4Zj31UzM6N5IghG3liJvsTe0w8YO2ovEyRu7
Ycu6vW02HDdqBitQ9YoMUeeVndn2c5sMFJ5mYjvuxZXylqiKufmGWnjzPiPrAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU5ucoJKjsmxvZU/WKfYTQAygvDhQwHwYDVR0j
BBgwFoAUYnbpqRF8a9tfNy1E0LuazcXyytYwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkVST09O
RUlORi8wLzYyNzZFOUE5MTE3QzZCREI1RjM3MkQ0NEQwQkI5QUNEQzVGMkNBRDYu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjI3NkU5QTkxMTdDNkJEQjVGMzcyRDQ0
RDBCQjlBQ0RDNUYyQ0FENi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pFUk9PTkVJTkYvMC82Mjc2
RTlBOTExN0M2QkRCNUYzNzJENDREMEJCOUFDREM1RjJDQUQ2Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
HqpuiAfNkL+AQIuCIzfXs9kwgl6q0m2Qo+qIQVdE9B0WK4mOLfOQiDUfQ5aZvrCw
nmQ813Sh4vaFmcWXxqqHZ9d6Q4PUPG3M4mrOxi9UCr/WDCqZr0Xiio9GmuMI5X2C
8xb+k8pqhhVoFhJIN7fnsg6soEeeVTWVVmA0M9kmrEuGD50I3wxIqcwaoZ8QdVkq
VVAYkT02YgvQZzFrtR2bRIYi4spguF+tlnsXi7dgqjuENlVNrbf/gq4dDeGWb/jL
WGQb0vk7UkRG7gxSwSOxMZmeaUnyExGJ9n/bXQr4pLF3nZt1igGZcb2o8B/h0QyM
9JahGf6tjALNFt5KnvbXYw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:55 2026 by rpki-client