Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File:                     9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier:          ZheyqEOQqLB6q1dVmrVSbpLO+Hxa/tsePRJvnaxgQqI=
Subject key identifier:   D6:C3:BE:30:C5:2B:9C:09:EE:87:85:C1:13:66:0F:96:23:8B:BC:CF
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer:       /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial:       3CBDA1EE0223E68BF43437728080556346DC27C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number:          B8
Signing time:             Fri 25 Sep 2026 20:34:06 +0000
Manifest this update:     Fri 25 Sep 2026 20:29:06 +0000
Manifest next update:     Sat 26 Sep 2026 20:36:06 +0000
Files and hashes:         1: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: hufBKVQVHbVk8U28MZE2ZdxqG6gvPYsWuTHPywTZJEc=)
                          2: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
                          rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bd:a1:ee:02:23:e6:8b:f4:34:37:72:80:80:55:63:46:dc:27:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
        Validity
            Not Before: Sep 25 20:29:06 2026 GMT
            Not After : Sep 26 20:36:06 2026 GMT
        Subject: CN=D6C3BE30C52B9C09EE8785C113660F96238BBCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0d:d4:f9:8c:3e:e9:ec:39:a3:ff:d8:96:23:
                    bf:b0:ce:75:c8:84:8b:f7:b6:79:07:79:9f:47:13:
                    a1:ee:18:31:45:a6:9a:12:0b:36:46:41:de:d8:d0:
                    78:78:94:bf:87:4a:42:70:41:f1:36:2c:88:62:89:
                    df:80:5e:a1:75:f8:85:f0:e5:2c:0d:9f:e7:70:00:
                    b4:2f:e1:25:1d:2d:35:17:a1:1a:21:66:bd:f9:15:
                    80:dd:5d:07:93:5d:dc:fc:b2:0a:66:fb:d6:30:ee:
                    9a:29:f5:7f:a9:31:cd:03:7e:75:ff:26:aa:d4:83:
                    c0:15:66:73:36:84:14:46:e8:f3:61:ac:71:56:60:
                    90:ce:45:2e:5c:a6:77:74:9e:e2:64:1f:e1:82:ea:
                    24:f8:8d:a1:87:d7:1e:ca:91:5c:6c:2d:aa:8a:16:
                    92:df:d5:eb:76:7f:fa:12:d3:05:39:c4:7d:b3:be:
                    01:39:d3:cd:02:ba:bc:04:a2:eb:b4:d3:bc:f2:31:
                    28:b1:da:33:a1:07:f1:7f:60:2d:d2:d9:67:78:de:
                    55:f9:49:54:2a:0d:0b:1c:e3:0b:6c:18:a0:1d:2d:
                    be:46:f0:26:db:93:59:59:c9:db:7f:7e:23:36:21:
                    5c:b3:dd:cc:e3:d4:50:da:ed:08:76:88:26:e4:64:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:BE:30:C5:2B:9C:09:EE:87:85:C1:13:66:0F:96:23:8B:BC:CF
            X509v3 Authority Key Identifier:
                keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:72:96:24:b4:62:11:28:43:13:d6:b6:86:c1:66:63:06:9a:
         42:a2:72:52:4e:0d:54:cb:a6:59:17:11:3b:82:3f:30:d3:73:
         e4:d6:9a:5b:bd:54:08:79:32:bd:54:17:09:79:09:1b:79:09:
         03:42:e0:03:15:d8:01:55:d6:91:a4:c5:68:42:06:22:78:99:
         43:4b:68:be:10:63:d9:4a:ae:e1:b2:f1:65:e5:55:f7:62:23:
         8b:83:8b:40:2d:22:7d:22:35:23:b2:d1:33:36:72:86:1e:e7:
         7b:ec:a1:83:5a:50:78:dc:90:65:1f:2a:81:17:ba:29:3f:b9:
         a8:0d:e6:7d:9c:10:de:08:0e:c3:50:e2:a5:fe:f4:0d:8b:45:
         56:79:f7:87:a2:d5:de:5c:08:70:77:91:9e:06:41:c8:f4:43:
         89:37:ba:97:b9:bf:c0:55:84:7c:ae:35:49:f6:b6:e6:8d:6d:
         ac:b7:a0:ba:a9:04:b3:98:cc:a5:a4:87:82:bd:62:f7:0a:de:
         e1:a1:5d:71:2f:b9:ec:84:9c:66:7c:2c:a2:8a:0b:ae:44:47:
         78:0b:7e:81:bc:37:39:52:9c:dd:b6:06:c2:7c:49:85:b9:b7:
         12:c0:f5:a4:c1:9b:d7:fa:ee:74:e6:dc:44:b8:88:49:b8:11:
         4c:2b:59:eb
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUPL2h7gIj5ov0NDdygIBVY0bcJ8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2QzQwNEQ5NkJCMTEyOTg0RUIxNEM0NkJFMDUyNjUx
NEI2QkZCRjAeFw0yNjA5MjUyMDI5MDZaFw0yNjA5MjYyMDM2MDZaMDMxMTAvBgNV
BAMTKEQ2QzNCRTMwQzUyQjlDMDlFRTg3ODVDMTEzNjYwRjk2MjM4QkJDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuDdT5jD7p7Dmj/9iWI7+wznXI
hIv3tnkHeZ9HE6HuGDFFppoSCzZGQd7Y0Hh4lL+HSkJwQfE2LIhiid+AXqF1+IXw
5SwNn+dwALQv4SUdLTUXoRohZr35FYDdXQeTXdz8sgpm+9Yw7pop9X+pMc0DfnX/
JqrUg8AVZnM2hBRG6PNhrHFWYJDORS5cpnd0nuJkH+GC6iT4jaGH1x7KkVxsLaqK
FpLf1et2f/oS0wU5xH2zvgE5080CurwEouu007zyMSix2jOhB/F/YC3S2Wd43lX5
SVQqDQsc4wtsGKAdLb5G8Cbbk1lZydt/fiM2IVyz3czj1FDa7Qh2iCbkZCj3AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQU1sO+MMUrnAnuh4XBE2YPliOLvM8wHwYDVR0j
BBgwFoAUnGxATZa7ESmE6xTEa+BSZRS2v78wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUNLLzAv
OUM2QzQwNEQ5NkJCMTEyOTg0RUIxNEM0NkJFMDUyNjUxNEI2QkZCRi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS85QzZDNDA0RDk2QkIxMTI5ODRFQjE0QzQ2QkUwNTI2
NTE0QjZCRkJGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUNLLzAvOUM2QzQwNEQ5NkJCMTEyOTg0
RUIxNEM0NkJFMDUyNjUxNEI2QkZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADJyliS0YhEoQxPWtobB
ZmMGmkKiclJODVTLplkXETuCPzDTc+TWmlu9VAh5Mr1UFwl5CRt5CQNC4AMV2AFV
1pGkxWhCBiJ4mUNLaL4QY9lKruGy8WXlVfdiI4uDi0AtIn0iNSOy0TM2coYe53vs
oYNaUHjckGUfKoEXuik/uagN5n2cEN4IDsNQ4qX+9A2LRVZ594ei1d5cCHB3kZ4G
Qcj0Q4k3upe5v8BVhHyuNUn2tuaNbay3oLqpBLOYzKWkh4K9YvcK3uGhXXEvueyE
nGZ8LKKKC65ER3gLfoG8NzlSnN22BsJ8SYW5txLA9aTBm9f67nTm3ES4iEm4EUwr
Wes=
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:48:05 2026 by rpki-client