Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File:                     9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier:          ViLy17sdZdAulCv5u/IPQDLSq/03Umu0gZSX0tdHqoo=
Subject key identifier:   D6:1A:F9:58:ED:A5:F5:05:CC:BD:50:2A:DC:50:87:0B:09:49:93:02
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer:       /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial:       73023E9FF3B368BB32D87112933CDAF819146B5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number:          67
Signing time:             Thu 23 Jul 2026 14:07:37 +0000
Manifest this update:     Thu 23 Jul 2026 14:02:37 +0000
Manifest next update:     Fri 24 Jul 2026 14:43:37 +0000
Files and hashes:         1: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
                          2: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
                          3: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
                          4: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
                          5: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: ESvVw35Tjy14lrBmw94xTLUFhJe6cP0+UGYw3Adb9fM=)
                          6: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
                          7: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
                          rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:02:3e:9f:f3:b3:68:bb:32:d8:71:12:93:3c:da:f8:19:14:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
        Validity
            Not Before: Jul 23 14:02:37 2026 GMT
            Not After : Jul 24 14:43:37 2026 GMT
        Subject: CN=D61AF958EDA5F505CCBD502ADC50870B09499302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:82:64:8f:67:b3:cb:48:0d:49:ce:f9:ae:
                    22:1b:63:54:01:b7:27:a9:2a:ae:73:67:ca:86:49:
                    71:6d:cd:6f:cd:d8:83:de:48:46:2e:65:e6:25:38:
                    0d:5d:a9:be:e1:fc:13:a1:24:15:6d:a2:7e:72:08:
                    72:2a:cd:0f:a9:66:f2:82:50:e1:83:09:0d:7b:0d:
                    ae:d0:83:2e:2f:37:6e:61:19:61:b5:fa:0e:0e:2b:
                    02:e4:73:40:70:29:61:51:4e:6e:1e:70:fd:6e:36:
                    70:d6:2f:17:79:0c:94:73:d1:d1:ce:df:5d:09:29:
                    2a:a6:bb:e6:c5:40:ce:4f:db:b1:75:3c:a2:f7:23:
                    f9:ae:cb:27:d5:50:e9:2b:f9:8e:87:ac:a8:38:5f:
                    54:7b:c7:db:6a:91:39:ab:b5:21:c2:94:4e:d5:d3:
                    74:e4:f3:f0:35:ce:32:21:6b:50:49:85:c3:e9:68:
                    cf:bb:db:de:91:7d:d4:49:21:8e:76:cd:64:40:9c:
                    34:1a:81:48:fd:c8:6a:c1:7d:d5:c8:27:50:7b:31:
                    dc:e6:17:76:bb:fd:b6:bb:ba:f4:a9:4d:a9:6c:ea:
                    9d:d9:d6:08:95:b0:86:63:86:e0:b8:bc:2b:fb:f3:
                    a8:a9:bd:18:46:4f:0a:12:4d:26:82:6b:d4:65:6f:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1A:F9:58:ED:A5:F5:05:CC:BD:50:2A:DC:50:87:0B:09:49:93:02
            X509v3 Authority Key Identifier:
                keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:ab:3e:04:6f:d5:02:6c:7c:19:30:67:07:b4:8b:dc:78:
         8d:95:a0:7d:e8:67:a9:34:42:37:d7:c5:19:a4:b5:dd:b6:ec:
         b6:a7:04:6f:cc:3c:f8:68:b1:88:46:5d:8b:34:8a:c3:53:86:
         d3:cd:5e:05:50:9c:94:29:5b:9c:cf:7b:ae:cf:de:62:fb:92:
         b5:b8:36:47:8f:45:18:36:6f:ba:69:1d:c0:be:86:b3:10:da:
         7e:6e:2e:cf:25:3a:15:08:5a:26:f3:dc:3e:b6:f4:72:58:58:
         c0:8c:3e:ae:66:3f:68:b6:96:83:74:95:b5:77:be:04:e6:b3:
         ee:c8:c1:0e:f7:b0:58:b1:93:4c:92:50:b4:16:5d:1d:89:af:
         01:21:bb:5f:40:a7:f9:18:4e:8a:bd:56:5a:65:3a:0b:f6:b1:
         81:0d:32:fc:95:78:58:f1:b1:ed:52:f9:4e:4d:bd:a1:e8:3a:
         32:c1:b2:bd:f0:e8:b6:af:8e:ed:64:24:50:28:f6:e6:26:e4:
         cd:07:db:4e:1c:85:19:d9:d4:d9:db:64:ca:ed:d0:6d:c7:9a:
         f1:b2:55:3a:35:dc:be:2a:2f:d4:fc:c3:20:8c:b8:37:0c:a1:
         b6:83:6e:f7:3d:2f:6e:37:74:98:69:11:48:af:5e:00:34:ba:
         b2:62:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:30 2026 by rpki-client