Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
File:                     B665897BCB13562048E484EBEDAA534EA4DF9876.mft (raw, json)
Hash identifier:          ynb27w0+xmfcmDxm5iMpV0YX4mID/XCgTg3P1GtzwPo=
Subject key identifier:   AA:68:9C:5C:E3:14:DF:F2:B0:23:2B:9B:1A:07:74:17:01:AA:3D:4B
Authority key identifier: B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76
Certificate issuer:       /CN=B665897BCB13562048E484EBEDAA534EA4DF9876
Certificate serial:       0647FB8B04A08D4092DC27588040972736A669CE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 04:37:21 +0000
Manifest this update:     Thu 24 Sep 2026 04:32:21 +0000
Manifest next update:     Fri 25 Sep 2026 08:16:21 +0000
Files and hashes:         1: B665897BCB13562048E484EBEDAA534EA4DF9876.crl (hash: K4cMWNaRzVkerrNJY/Qs6Fpaefee9O16718H+3MHyYo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.crl
                          rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:fb:8b:04:a0:8d:40:92:dc:27:58:80:40:97:27:36:a6:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B665897BCB13562048E484EBEDAA534EA4DF9876
        Validity
            Not Before: Sep 24 04:32:21 2026 GMT
            Not After : Sep 25 08:16:21 2026 GMT
        Subject: CN=AA689C5CE314DFF2B0232B9B1A07741701AA3D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:3a:8c:2d:06:34:70:71:b4:19:7b:46:db:
                    f4:f9:47:43:ba:21:7e:77:f4:7e:90:d7:b9:98:2e:
                    a3:51:f1:47:0f:e2:43:4d:38:0f:fc:65:42:f2:9b:
                    c5:82:b3:93:ff:d0:88:04:67:a8:5a:61:d8:12:24:
                    67:61:8f:63:d2:52:a7:4b:e4:1d:f0:ea:43:7d:0b:
                    c7:d4:16:f8:b4:9b:a7:a6:4a:f4:d7:ea:5a:de:9b:
                    57:56:71:21:1e:96:b5:67:a6:35:af:3a:0e:9d:1f:
                    74:a7:12:2a:bf:32:04:f6:cf:99:fb:f0:0c:18:d2:
                    f6:dc:dc:00:a9:f4:ee:99:18:2b:55:dc:10:93:e3:
                    92:72:51:5c:c0:40:5e:6e:02:17:35:e4:21:4a:1f:
                    62:ea:67:f5:f6:17:bc:91:05:37:f1:fe:e8:14:3f:
                    bc:f8:55:64:52:21:60:9c:a2:14:07:cd:52:af:58:
                    56:bf:9b:e1:09:63:12:88:06:32:1c:94:47:3e:e5:
                    0b:57:50:13:4a:94:1f:34:b9:c9:ef:87:85:05:5f:
                    88:dd:8c:e0:35:4f:9e:8b:f8:3c:3e:13:3a:82:e8:
                    03:76:95:7e:e0:2c:a1:ef:25:e3:0e:9a:9c:76:b3:
                    06:5b:80:33:39:aa:a3:62:35:be:a8:28:7d:f2:5b:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:9C:5C:E3:14:DF:F2:B0:23:2B:9B:1A:07:74:17:01:AA:3D:4B
            X509v3 Authority Key Identifier:
                keyid:B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:1c:78:e4:c7:b8:cc:05:b8:76:b6:16:ce:2b:c2:b6:f0:
         74:3f:fc:5f:ed:af:4a:43:fc:d0:04:d9:78:0e:86:af:95:37:
         62:15:df:a3:ec:5b:ee:f5:3c:2a:da:87:67:71:67:ca:b8:25:
         db:89:f9:cd:b5:4f:22:38:6a:59:ce:f1:1c:d2:02:c4:52:c5:
         32:c6:ae:b8:91:b1:80:ba:bd:3f:9a:c4:e8:84:5c:46:9d:c4:
         b0:7d:1d:b4:1c:33:39:d2:12:cf:b5:37:47:5f:3b:e6:11:6e:
         9d:51:a3:16:f0:18:59:32:36:79:98:d1:c1:2a:43:74:7a:4b:
         f6:17:55:99:5d:a9:7c:17:16:78:c2:3f:4c:81:28:96:44:9b:
         1e:39:4a:eb:b0:27:a0:57:1c:89:c8:c3:f3:05:ec:9d:88:88:
         f8:fd:87:d2:44:41:6e:99:2d:d4:fd:7d:c3:0b:f8:91:28:b1:
         32:4b:cf:0a:92:22:1a:87:9e:84:34:b6:cb:01:73:c9:f9:b3:
         aa:3d:8b:21:c6:64:ba:de:81:31:0b:89:83:17:c2:57:36:33:
         26:eb:bc:16:25:c3:1c:7a:02:a0:a2:cc:6d:5b:b0:de:03:c3:
         31:3d:3c:35:6d:fe:a9:00:a5:bb:76:fa:b5:03:c6:d6:b3:65:
         ca:75:1d:29
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUBkf7iwSgjUCS3CdYgECXJzamac4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY2NTg5N0JDQjEzNTYyMDQ4RTQ4NEVCRURBQTUzNEVB
NERGOTg3NjAeFw0yNjA5MjQwNDMyMjFaFw0yNjA5MjUwODE2MjFaMDMxMTAvBgNV
BAMTKEFBNjg5QzVDRTMxNERGRjJCMDIzMkI5QjFBMDc3NDE3MDFBQTNENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVLjqMLQY0cHG0GXtG2/T5R0O6
IX539H6Q17mYLqNR8UcP4kNNOA/8ZULym8WCs5P/0IgEZ6haYdgSJGdhj2PSUqdL
5B3w6kN9C8fUFvi0m6emSvTX6lrem1dWcSEelrVnpjWvOg6dH3SnEiq/MgT2z5n7
8AwY0vbc3ACp9O6ZGCtV3BCT45JyUVzAQF5uAhc15CFKH2LqZ/X2F7yRBTfx/ugU
P7z4VWRSIWCcohQHzVKvWFa/m+EJYxKIBjIclEc+5QtXUBNKlB80ucnvh4UFX4jd
jOA1T56L+Dw+EzqC6AN2lX7gLKHvJeMOmpx2swZbgDM5qqNiNb6oKH3yW73jAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUqmicXOMU3/KwIyubGgd0FwGqPUswHwYDVR0j
BBgwFoAUtmWJe8sTViBI5ITr7apTTqTfmHYwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9UX1RG
Tl9DTy8wL0I2NjU4OTdCQ0IxMzU2MjA0OEU0ODRFQkVEQUE1MzRFQTRERjk4NzYu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQjY2NTg5N0JDQjEzNTYyMDQ4RTQ4NEVC
RURBQTUzNEVBNERGOTg3Ni5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PVF9URk5fQ08vMC9CNjY1
ODk3QkNCMTM1NjIwNDhFNDg0RUJFREFBNTM0RUE0REY5ODc2Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
WV0ceOTHuMwFuHa2Fs4rwrbwdD/8X+2vSkP80ATZeA6Gr5U3YhXfo+xb7vU8KtqH
Z3Fnyrgl24n5zbVPIjhqWc7xHNICxFLFMsauuJGxgLq9P5rE6IRcRp3EsH0dtBwz
OdISz7U3R1875hFunVGjFvAYWTI2eZjRwSpDdHpL9hdVmV2pfBcWeMI/TIEolkSb
HjlK67AnoFccicjD8wXsnYiI+P2H0kRBbpkt1P19wwv4kSixMkvPCpIiGoeehDS2
ywFzyfmzqj2LIcZkut6BMQuJgxfCVzYzJuu8FiXDHHoCoKLMbVuw3gPDMT08NW3+
qQClu3b6tQPG1rNlynUdKQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:41 2026 by rpki-client