Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
File:                     F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json)
Hash identifier:          PgUcg2FHCXRv4fPf5ancf3UkboqZykTUiQzQo15/3V4=
Subject key identifier:   99:84:5A:73:AE:88:DC:8E:9A:3A:64:DF:D7:87:1F:59:C8:94:14:43
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Certificate issuer:       /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial:       4AA928C3E386F1E2BB56DD659C6D5463BA8C3ECD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
Manifest number:          6A
Signing time:             Thu 23 Jul 2026 20:26:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:21:40 +0000
Manifest next update:     Fri 24 Jul 2026 23:05:40 +0000
Files and hashes:         1: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=)
                          2: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=)
                          3: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=)
                          4: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=)
                          5: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=)
                          6: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=)
                          7: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=)
                          8: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: RUc1UAPsFTdtEuwdkSZBBFms9Vdot4bOeUMeJFQ0d8k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
                          rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 12:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:28:c3:e3:86:f1:e2:bb:56:dd:65:9c:6d:54:63:ba:8c:3e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
        Validity
            Not Before: Jul 23 20:21:40 2026 GMT
            Not After : Jul 24 23:05:40 2026 GMT
        Subject: CN=99845A73AE88DC8E9A3A64DFD7871F59C8941443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:b5:19:a5:d9:56:de:bc:c2:0d:74:2d:3a:
                    ec:fe:94:5d:ff:ad:f7:73:2d:27:e7:28:2b:ce:26:
                    cd:20:10:79:e6:5e:c0:5b:ad:82:99:60:8b:dd:b0:
                    42:ee:9b:da:7e:00:74:f6:51:a5:30:e3:5c:9e:4d:
                    3d:04:04:e2:81:83:d4:02:81:91:78:c8:25:bc:99:
                    01:5b:48:48:f5:f0:dc:01:c9:e2:31:8a:01:6a:4e:
                    dc:7d:6e:4c:37:ad:88:92:f2:92:7e:d3:0d:9b:f7:
                    fa:66:4b:78:4c:f4:8d:90:e0:10:32:af:70:78:7e:
                    ba:00:2c:14:ff:9e:16:f5:06:3c:e3:15:11:4d:fe:
                    b9:53:5f:ae:92:9a:33:b4:aa:7f:44:c6:d6:9d:fd:
                    5b:ed:8c:62:f2:1e:56:91:31:81:c5:79:b0:9d:26:
                    e2:c0:df:03:41:00:2f:be:ad:67:7f:e4:92:16:72:
                    6c:03:47:bb:d8:7f:d1:81:d6:df:d9:1f:ff:d0:4c:
                    30:db:e2:e2:bf:7c:d5:f8:2b:88:d6:5f:29:cf:60:
                    86:be:9e:02:03:f8:db:a6:34:aa:a9:c5:f0:57:d6:
                    6f:12:4f:75:fa:99:39:02:5c:99:7b:5e:5c:a4:21:
                    f1:5a:b5:b9:a6:0e:f1:3f:c5:20:cb:af:1f:22:30:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:5A:73:AE:88:DC:8E:9A:3A:64:DF:D7:87:1F:59:C8:94:14:43
            X509v3 Authority Key Identifier:
                keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:33:ac:6b:15:e4:b8:81:d8:0e:d3:09:03:34:c9:0b:58:
         0b:6b:2b:d0:05:36:3e:08:06:a8:8a:66:ee:4e:eb:f8:a4:30:
         bf:a9:8f:fa:41:0f:17:b1:18:e7:8d:3e:e2:8b:3f:84:63:3a:
         94:da:0d:ce:93:fa:41:3c:f7:20:8a:63:2b:89:ee:e0:a4:c9:
         8a:e2:e6:47:c2:25:b6:f5:15:fd:3e:e5:b7:bb:d0:05:43:9a:
         a9:28:00:b5:62:2e:ad:d1:48:42:9f:8b:aa:f8:98:bf:37:e6:
         74:4e:8b:de:cf:00:cd:54:7e:b5:b7:63:d0:eb:3b:12:01:6a:
         fe:a9:af:2d:4a:b5:b7:97:93:5f:91:91:0d:05:9a:6a:6a:dd:
         35:2a:b3:47:92:8f:01:64:08:a6:69:56:08:f3:23:1b:ff:93:
         74:38:d8:53:16:f0:dd:5c:ae:0d:f5:16:a7:71:f8:68:78:5a:
         80:78:5d:45:be:f5:68:43:3d:c8:26:0b:3b:2b:e8:2f:57:13:
         94:3d:c5:20:a2:88:ab:9e:ba:21:a3:ba:63:18:ea:83:36:55:
         f6:87:30:09:e7:2e:51:50:fb:d6:21:74:73:38:ad:57:81:b7:
         87:48:35:6c:a1:60:a0:a0:e0:04:29:30:72:33:e5:1f:68:3e:
         b1:f1:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:07 2026 by rpki-client