Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
File:                     C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft (raw, json)
Hash identifier:          iXfKg9Ntw4BVwSz/0K4tW2ebgwFJqOn2dWg7T/8yon4=
Subject key identifier:   5E:65:58:2E:A1:3F:8A:0F:C8:60:87:D8:DE:06:93:FB:5D:B8:0F:8E
Authority key identifier: C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
Certificate issuer:       /CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
Certificate serial:       660C67024A0986A07E2F205C46A4E2E53CFF1B5D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
Manifest number:          BD
Signing time:             Mon 28 Sep 2026 10:38:12 +0000
Manifest this update:     Mon 28 Sep 2026 10:33:12 +0000
Manifest next update:     Tue 29 Sep 2026 11:32:12 +0000
Files and hashes:         1: 3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa (hash: MEZepMjSWeC8G0zF/GV1Y6LcbJJpDd1poBASMpA+lY0=)
                          2: C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl (hash: GT+/SFTDqiE6QM35qP8nlH2ieUSkIt83oabDZUC7dTQ=)
                          3: 3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa (hash: 5cIOw3g/g20yz7r/SJ1iESfORTQzMExyZEDbDIUjIdA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 11:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:67:02:4a:09:86:a0:7e:2f:20:5c:46:a4:e2:e5:3c:ff:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
        Validity
            Not Before: Sep 28 10:33:12 2026 GMT
            Not After : Sep 29 11:32:12 2026 GMT
        Subject: CN=5E65582EA13F8A0FC86087D8DE0693FB5DB80F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:d0:c0:89:45:4a:a3:ac:15:fb:02:b8:76:
                    dd:63:53:2f:5e:b9:11:2c:e1:d1:f3:22:8a:42:43:
                    ed:e3:d4:6d:23:4b:ff:3f:f8:3d:7a:02:9b:c4:cd:
                    0d:d4:c4:83:34:fa:42:95:c3:f4:e1:66:2d:13:dc:
                    29:f5:d5:9f:c6:2a:47:6c:7b:40:5a:ef:a3:4c:70:
                    63:d0:a6:46:55:7f:80:c9:4b:52:32:19:83:50:2c:
                    b2:4d:15:3a:a7:95:91:a7:c3:b0:b6:58:2f:25:46:
                    eb:7d:63:18:08:e1:7a:c9:a7:e4:e8:b2:bc:c3:2c:
                    85:7b:4f:a3:53:83:c6:33:93:f5:40:c3:f2:34:16:
                    cd:d2:13:6f:de:40:7e:78:d4:b5:7f:c5:29:f5:61:
                    c9:66:12:dd:65:95:ba:51:54:78:42:1f:6d:67:3d:
                    d4:25:80:e4:e5:a5:75:10:0c:d9:6e:9a:c5:85:3e:
                    5f:b6:92:a4:49:e2:1e:cb:a4:ba:80:86:10:e8:49:
                    27:95:38:c3:9e:03:07:30:c9:be:f9:85:9a:8c:d2:
                    9a:6a:7f:94:f3:e5:7c:1e:2e:9f:97:d8:7a:5f:42:
                    6a:13:5a:a9:05:9e:67:81:f2:5c:40:44:a7:39:8a:
                    d5:f6:16:f3:08:9f:a5:53:54:aa:d0:e9:17:e4:f7:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:65:58:2E:A1:3F:8A:0F:C8:60:87:D8:DE:06:93:FB:5D:B8:0F:8E
            X509v3 Authority Key Identifier:
                keyid:C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:73:9d:a8:ff:ca:20:34:91:b3:78:c6:fe:13:e2:cd:b3:
         33:93:ab:40:59:ab:a0:1c:f2:85:a9:9d:e9:ed:e1:57:dd:18:
         ec:92:e6:2b:3a:79:5a:15:2e:8a:d7:77:9e:02:17:08:e8:45:
         be:bd:b6:12:f2:b7:a1:a9:1f:20:7b:f4:1e:b7:95:f7:93:b7:
         f7:19:69:f9:69:6a:01:f2:f8:d4:5b:d8:13:38:1d:51:b2:e2:
         ab:51:79:79:96:6a:9c:c0:fb:f2:08:ba:05:6b:b5:dd:3f:fa:
         74:75:a3:9d:a1:98:0c:d6:ab:01:cf:a9:1c:b0:44:ab:eb:85:
         10:7a:e3:1a:74:e2:13:b6:78:5a:c0:42:57:68:50:55:f7:d1:
         79:e3:19:f1:3d:3b:90:d1:b9:f6:c3:fd:4c:c2:de:ad:c4:2a:
         74:a6:d3:96:69:eb:9d:02:b9:02:fa:e0:d4:7c:01:f5:0a:72:
         9a:9e:de:6c:34:47:14:ef:76:53:49:28:5d:4d:54:6b:44:3b:
         3a:86:0a:aa:45:9e:ca:d7:00:07:bd:fd:0d:f8:f1:6f:fa:9e:
         cf:4c:dc:1a:9d:c6:50:bb:10:d2:63:37:36:2c:d6:db:1e:3a:
         d1:f3:c5:86:5f:40:59:b9:04:ce:b6:77:9b:45:0a:ed:60:e1:
         92:27:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:14 2026 by rpki-client