Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
File:                     9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json)
Hash identifier:          r29I87yDz0fKxC3y0o8GmtSncn4crCyR87igiaBAAV4=
Subject key identifier:   C5:1E:C1:B2:9B:22:8E:85:A7:3E:AF:3F:94:73:3F:1C:A5:DE:44:64
Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D
Certificate issuer:       /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
Certificate serial:       7EE9313E1BD04D80D19954B2C82BFBF2113FBEB7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
Manifest number:          FF
Signing time:             Sun 15 Nov 2026 06:26:04 +0000
Manifest this update:     Sun 15 Nov 2026 06:21:04 +0000
Manifest next update:     Mon 16 Nov 2026 08:21:04 +0000
Files and hashes:         1: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=)
                          2: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: TCyWo7Nl+rUoBahbcEUveNL2jqmJj6lkBvXNSy6yB0g=)
                          3: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=)
                          4: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl
                          rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e9:31:3e:1b:d0:4d:80:d1:99:54:b2:c8:2b:fb:f2:11:3f:be:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
        Validity
            Not Before: Nov 15 06:21:04 2026 GMT
            Not After : Nov 16 08:21:04 2026 GMT
        Subject: CN=C51EC1B29B228E85A73EAF3F94733F1CA5DE4464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:62:29:5f:01:e0:c6:5e:81:74:cd:0f:a6:
                    37:d9:e8:aa:24:be:90:5a:8d:50:e3:ad:09:ee:d6:
                    aa:d4:30:8b:c5:d1:1a:58:7c:ed:aa:a5:f1:08:8e:
                    8b:b7:d7:98:d8:0e:80:94:55:1c:07:5a:50:8b:8f:
                    db:f9:74:7e:55:3b:40:63:91:6a:eb:07:ef:a2:a4:
                    96:82:d8:ba:d8:63:48:28:ab:2a:2d:e0:44:e1:d9:
                    fb:85:74:24:e4:17:62:d7:fe:6f:81:2e:da:89:b5:
                    5c:22:36:d6:e6:c0:04:c5:a4:0c:10:cb:86:6e:55:
                    35:c4:29:87:67:9b:f9:4f:96:42:0a:e8:dc:b2:ae:
                    2c:c9:50:c2:cf:d6:a6:b0:3d:e2:e2:56:88:48:56:
                    98:29:4a:2e:cf:96:a7:59:bf:fb:23:59:04:bd:fb:
                    ce:ed:41:db:0d:9c:c4:73:34:12:2f:9c:72:96:17:
                    3d:cd:c8:ae:5b:87:2c:60:74:ea:ba:b1:ee:b0:7d:
                    9c:2a:f3:5b:35:9b:95:c0:b2:49:90:27:9a:fd:93:
                    c1:a9:42:4f:93:22:0c:7b:63:2e:d3:86:8b:02:60:
                    1b:d3:32:d3:8f:4a:f8:e1:45:3b:1c:ef:07:8d:83:
                    d5:7c:e6:e1:0b:61:25:0b:b8:b2:45:ce:63:77:30:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:C1:B2:9B:22:8E:85:A7:3E:AF:3F:94:73:3F:1C:A5:DE:44:64
            X509v3 Authority Key Identifier:
                keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:4f:3c:45:39:2f:dd:98:fb:61:4a:84:37:02:80:0b:10:
         14:c3:fd:4f:ba:69:41:22:2a:0e:b2:54:3b:be:1f:14:4d:f2:
         96:6a:bc:1b:24:e1:6d:5c:6a:07:9a:9f:dd:f5:cb:c3:df:d1:
         5f:e7:dd:dd:04:ca:59:c4:78:c5:b3:8c:15:2c:89:00:13:be:
         8c:16:c0:70:6b:df:b6:28:57:6e:95:3b:8f:cc:1d:b4:52:1f:
         61:04:fc:ad:34:68:a0:c5:56:ac:44:9e:88:cd:ee:30:30:16:
         10:96:4e:4d:55:f6:b6:e1:40:b5:6b:5b:35:8b:b5:79:ea:6d:
         e5:91:c7:8e:78:91:45:b0:3c:df:8c:c3:7d:41:1e:4c:02:44:
         8a:af:2b:c7:9d:2e:cf:15:0a:71:40:70:a7:77:af:c0:ef:04:
         49:38:53:a8:4c:1f:56:d6:b3:36:ae:c1:eb:65:4b:8f:12:1b:
         85:b2:60:28:3c:a4:5c:66:55:01:2c:11:63:79:49:bf:31:a0:
         64:53:fb:35:cf:f1:18:1b:0b:64:28:a9:13:43:8f:e2:09:80:
         31:5a:84:0d:7b:6f:a1:64:88:d6:ec:dc:68:35:7e:2b:f0:17:
         aa:b1:15:c8:fb:65:14:13:03:01:b8:31:20:7d:29:45:e5:46:
         ed:34:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:17:11 2026 by rpki-client