Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
File:                     208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json)
Hash identifier:          S3IqnjBSGMyDN3fcojCoeI1eoobAv95f6f+8W0dI7Po=
Subject key identifier:   7B:CB:41:26:63:66:C7:54:17:08:26:A3:12:88:96:D5:50:4B:33:11
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Certificate issuer:       /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial:       24E6E7EA800948EC2750C62000199CB98DDF86E3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
Manifest number:          B9
Signing time:             Sat 26 Sep 2026 21:47:12 +0000
Manifest this update:     Sat 26 Sep 2026 21:42:12 +0000
Manifest next update:     Mon 28 Sep 2026 00:17:12 +0000
Files and hashes:         1: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=)
                          2: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: oPKPuCSxXhWB8ynKJCLi7tLJ2VLbFKg+aTZhfuNb7jQ=)
                          3: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
                          rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:e7:ea:80:09:48:ec:27:50:c6:20:00:19:9c:b9:8d:df:86:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
        Validity
            Not Before: Sep 26 21:42:12 2026 GMT
            Not After : Sep 28 00:17:12 2026 GMT
        Subject: CN=7BCB41266366C754170826A3128896D5504B3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:3b:4b:5c:df:07:70:3c:b0:61:75:03:c5:
                    6f:4a:b0:6b:fb:9e:fe:59:88:f5:9c:d3:8b:37:a4:
                    3d:27:b5:31:a1:c1:20:0e:10:ac:9c:ee:36:42:89:
                    65:7f:ce:89:8a:ef:78:85:c6:f0:2d:b2:2e:29:ba:
                    1b:70:73:3e:d4:0c:4b:7c:3d:d5:ac:cd:ec:08:fc:
                    68:65:43:b1:c8:99:e9:0e:e8:cb:89:f3:92:8d:7c:
                    61:7a:c7:e4:a7:23:c8:bc:7d:3d:1c:b2:27:c7:52:
                    7c:df:b3:51:cd:c6:77:6c:0f:f2:d3:97:69:c1:2e:
                    08:b9:aa:05:81:9b:c3:76:12:20:3b:05:67:97:6a:
                    60:c4:1e:ff:cc:0c:25:61:57:9d:0c:80:8d:06:05:
                    ff:aa:af:ff:bd:16:06:7e:68:4c:30:12:ac:45:f2:
                    a6:96:76:b3:53:44:f1:e2:a7:cb:37:55:f2:a9:27:
                    42:6d:4a:4e:61:02:0f:a5:1e:03:15:33:c4:1a:a6:
                    92:e3:a5:a5:16:aa:6b:34:7a:ec:3f:6b:d1:77:9a:
                    be:28:81:b4:1e:ef:a8:de:3a:bd:34:ae:6e:5d:6f:
                    a6:ba:d6:b7:8b:de:48:ca:3d:24:31:a9:68:f6:5a:
                    0d:78:b8:72:fe:f1:16:d6:f6:27:c1:f1:03:8d:09:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CB:41:26:63:66:C7:54:17:08:26:A3:12:88:96:D5:50:4B:33:11
            X509v3 Authority Key Identifier:
                keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:5a:7d:7d:74:f2:e5:c6:7c:fe:1c:29:f1:c4:9a:29:d3:
         5c:dd:21:b8:24:55:3a:1c:4d:18:59:ab:d9:1f:04:fd:22:7c:
         3c:34:a5:ad:8c:d7:8e:69:96:dc:c4:82:df:60:cc:9f:98:3b:
         71:59:13:7d:7f:ce:06:d7:12:49:8b:8f:7c:4a:30:52:9a:4a:
         c1:f2:dd:61:8a:77:29:7e:08:23:4d:a1:e1:85:4a:83:33:c0:
         3a:89:34:5f:af:c3:1f:5a:29:18:1d:57:a2:7e:c6:ad:b1:de:
         54:09:85:4a:ca:a0:05:ee:99:5d:6d:54:16:48:2d:8c:d6:48:
         0e:56:94:bb:32:75:d5:f4:41:f7:fa:70:9b:6b:bf:55:25:b7:
         df:a6:f0:8f:64:51:da:b2:8f:2d:1c:5a:0f:7f:ed:6d:bc:c8:
         49:47:0a:94:f4:b7:ac:7d:c2:da:e7:32:51:68:24:bb:96:62:
         24:45:45:38:06:b7:bc:37:b3:aa:40:8d:85:cb:11:27:2b:f3:
         e9:ce:11:7f:28:96:48:fd:42:a9:db:3b:9a:14:51:c6:de:2b:
         ac:87:70:24:e6:a8:17:e9:88:2d:e9:29:09:ba:c0:1b:35:91:
         ee:bc:2c:76:c8:41:5e:a9:95:9b:96:33:aa:52:ea:bf:dc:18:
         27:6a:3e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:12:29 2026 by rpki-client