Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          3PErLyDobLTzkbQ3FZh8jPN9JFgXykKu2ZSGZqcXbco=
Subject key identifier:   72:FC:4D:BB:B2:91:16:C0:2F:8C:F0:18:7C:AB:25:A7:4B:E6:93:0B
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       30A563EE0FCF10E457A3715BA555898B4DBE3877
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          010A
Signing time:             Sat 14 Nov 2026 06:50:40 +0000
Manifest this update:     Sat 14 Nov 2026 06:45:40 +0000
Manifest next update:     Sun 15 Nov 2026 10:10:40 +0000
Files and hashes:         1: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          2: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: xHixTNCkj61NqElrVw9eyNrn+qXnnFcBv6R4vo16dd8=)
                          3: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          4: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          5: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          6: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          7: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          8: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          9: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          10: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          11: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          12: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          13: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 10:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a5:63:ee:0f:cf:10:e4:57:a3:71:5b:a5:55:89:8b:4d:be:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Nov 14 06:45:40 2026 GMT
            Not After : Nov 15 10:10:40 2026 GMT
        Subject: CN=72FC4DBBB29116C02F8CF0187CAB25A74BE6930B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:8d:dc:a8:44:42:7d:fd:5d:15:49:39:64:
                    1a:2c:8f:3a:e9:3b:89:cb:cf:6e:dc:1c:99:1e:5d:
                    2e:29:ce:94:87:0a:35:fd:cf:4a:83:b6:c0:33:16:
                    f5:b8:6a:ef:3a:59:49:44:1e:e1:15:5a:14:7f:5a:
                    3f:86:b8:38:11:9e:50:f1:9e:cb:47:a7:67:e7:69:
                    b3:7e:e7:e7:f6:2d:c3:6d:93:99:ec:99:a8:4c:02:
                    75:40:a9:43:ef:8a:c2:7c:f7:ae:5c:54:f2:13:4b:
                    0a:07:d3:c1:57:b5:60:4c:50:52:47:36:3a:71:0b:
                    07:23:6f:c8:0b:a9:1d:7f:9f:b3:80:ab:be:e3:f6:
                    1c:95:60:7e:d9:19:db:15:ab:15:98:92:7b:bb:ff:
                    b1:34:93:33:f1:27:5f:3d:39:b9:ce:62:93:0d:5d:
                    72:bd:f6:6c:fd:76:3d:f2:45:7b:28:c5:45:72:2b:
                    6b:36:f2:ae:6c:ab:a2:5e:2c:05:44:7d:81:f7:6a:
                    9a:06:95:fd:65:bf:1c:41:d7:82:e6:c6:ca:5b:f4:
                    48:5d:62:c4:b5:c5:ef:38:04:8f:9f:89:02:32:f5:
                    94:ef:0c:04:b5:d0:17:aa:54:6e:7a:24:c0:4b:89:
                    d0:bd:cc:15:a1:33:36:60:95:0d:5e:1c:6b:9c:c2:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:4D:BB:B2:91:16:C0:2F:8C:F0:18:7C:AB:25:A7:4B:E6:93:0B
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:38:df:9c:87:91:37:31:07:24:4c:f4:75:60:1a:52:38:
         d6:3b:b3:dc:f8:67:5f:5a:71:69:bd:df:6d:fa:a8:11:c5:09:
         bb:52:d4:d8:61:db:14:50:9d:14:ab:36:34:62:28:09:fd:8b:
         ac:4a:8f:e8:d9:40:af:03:04:bd:15:13:e7:52:03:10:07:11:
         da:6c:b9:b4:c7:30:f5:fa:aa:c3:e3:d2:2a:e7:da:78:94:1f:
         4e:6f:2e:e1:da:67:b6:c0:a6:32:bf:01:4b:74:83:89:ba:0d:
         40:77:eb:7f:dd:f4:5a:52:bc:4f:3e:80:6d:6d:df:92:24:82:
         32:7a:8f:d6:bb:b8:b0:3c:78:26:d8:79:f7:c7:7a:7c:76:85:
         e3:ae:db:89:cc:08:8e:d5:2a:3d:8d:0a:c3:21:43:33:d3:4e:
         87:92:d7:3a:be:b5:18:4c:c3:56:b0:66:e4:ff:75:6e:5f:de:
         98:90:b2:57:f2:92:25:6f:d7:e3:f9:f9:a1:9b:19:39:41:12:
         e5:6e:a4:b7:28:3f:7f:a3:df:9c:05:d4:f9:8e:36:5c:2c:8e:
         e6:19:13:80:4b:cf:b2:69:0f:02:54:fe:c8:2c:0f:fe:fd:b8:
         17:e7:79:c5:98:28:2a:0c:7f:3d:7a:50:f8:fd:a9:53:d8:5e:
         05:3a:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:40 2026 by rpki-client