Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File:                     DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier:          YSgUgVGhDxVXiUkrOeSYFrwlw+pJNUlC6zUTOEH6JfM=
Subject key identifier:   F5:0A:02:97:0B:34:39:01:33:6F:08:2F:80:B8:2D:CC:1C:E7:84:E3
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       059655244FA5D1C2D636D4B0E38C61DB82D7E766
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number:          D4
Signing time:             Thu 24 Sep 2026 11:34:39 +0000
Manifest this update:     Thu 24 Sep 2026 11:29:39 +0000
Manifest next update:     Fri 25 Sep 2026 12:11:39 +0000
Files and hashes:         1: 3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa (hash: JI4So8ZhAPE0PToBNtuSCn4oQjqoqDXKjENSD5r0Aa8=)
                          2: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
                          3: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: 38c/WXpY6M1anG7GfRWwLxdrMnAUVKkPcsIRgFc8w0g=)
                          4: 3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa (hash: DlmTrH0HWP82INqSmtsVtIWlfyhVreq2AQXQztnDoMc=)
                          5: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
                          6: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
                          7: 3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (hash: AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=)
                          8: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
                          9: 3138372e37392e3234382e302f32342d3234203d3e20313331363738.roa (hash: GPyZaSlRW0uZ9rINXF8kV4fuvB+9dJcD8GVRMaJQrtg=)
                          10: 3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa (hash: KA0OUMP7ljY4AzOV5ZHcM5DuWTOfHvm6pZOogffe2ro=)
                          11: 3138372e37392e3230302e302f32342d3234203d3e203137393939.roa (hash: Ms8KWMiqHBUeweg6G85Jzg70gg1CWi1Nsi+XQu4djsw=)
                          12: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
                          13: 3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (hash: /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=)
                          14: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 12:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:96:55:24:4f:a5:d1:c2:d6:36:d4:b0:e3:8c:61:db:82:d7:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Sep 24 11:29:39 2026 GMT
            Not After : Sep 25 12:11:39 2026 GMT
        Subject: CN=F50A02970B343901336F082F80B82DCC1CE784E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:57:89:b3:8b:53:8f:d7:76:e0:00:f6:2a:
                    5c:21:08:8d:36:12:ad:4a:ad:bb:3b:cd:7e:8d:d9:
                    ca:ff:68:47:dc:c7:81:a1:cf:87:a5:ab:3f:d9:88:
                    92:4a:b9:0b:6c:3e:20:83:5c:da:9a:b7:b4:54:a6:
                    27:d4:62:5a:71:20:99:22:2b:6f:47:2b:85:e6:ae:
                    97:6d:45:f0:25:98:4e:82:3e:cd:c9:9e:23:2d:ee:
                    f9:da:ef:b3:65:1d:1e:b6:0e:9d:a2:a5:f5:ab:ed:
                    a1:e8:7f:2c:0b:05:95:05:18:93:8f:e3:a2:da:7c:
                    18:38:21:df:20:ca:79:4a:ea:41:93:21:2f:b1:1e:
                    b4:0a:92:76:89:f0:43:05:65:47:fc:5b:07:42:94:
                    e6:27:f8:6d:6e:83:5d:b2:77:e6:7e:ff:2e:40:d2:
                    c7:28:dc:75:59:c9:54:15:8c:45:cc:67:82:90:61:
                    f9:24:65:df:8e:db:f7:bb:b4:c1:67:32:cb:7d:d3:
                    7f:a1:ee:6e:7e:37:2a:f1:b2:ba:11:07:d6:61:1f:
                    8e:ac:d3:7c:c7:ed:b4:7f:3c:22:ce:02:41:7e:d7:
                    86:0c:64:e9:82:56:7c:b5:4a:d5:aa:06:61:dc:3b:
                    7f:c8:cf:99:85:1e:f5:21:bb:12:02:f9:f7:9b:cf:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0A:02:97:0B:34:39:01:33:6F:08:2F:80:B8:2D:CC:1C:E7:84:E3
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:30:a1:40:d1:61:70:b6:f1:28:a4:ef:df:8c:2b:d3:3e:
         e0:6c:23:79:98:c2:43:f1:a6:2e:c3:27:e4:1a:f8:67:f1:b0:
         ba:69:84:d4:ce:c5:c1:12:27:17:4e:fb:01:ac:d4:50:64:73:
         08:4b:aa:c0:9e:fd:52:d6:c0:b9:64:57:59:47:e2:ad:8c:d1:
         08:31:70:75:f0:8e:9b:b3:18:0f:75:76:84:c0:42:e7:4b:fe:
         97:87:a5:f2:ec:81:f1:20:1f:dd:fa:7d:24:8c:f7:00:a3:13:
         6e:f5:2a:75:5c:c4:15:0f:19:39:df:3b:ad:d3:5b:ca:9a:5c:
         81:e5:68:06:f6:d5:07:20:13:73:c0:32:df:74:6a:ca:ad:a2:
         1c:74:a7:b6:a0:a9:91:f1:df:64:6d:21:43:f3:0c:83:3b:a3:
         08:ae:9d:2a:5f:45:06:c9:1b:a6:5d:fa:7d:e4:07:c8:ca:29:
         d9:c7:77:ee:f1:be:8d:44:0c:41:5f:30:3d:74:12:31:59:d2:
         fd:e4:85:08:36:fd:69:ff:a3:3a:06:8d:40:a3:87:c3:ca:af:
         64:ea:39:e1:8a:ed:43:c1:a0:29:66:85:8e:54:3f:11:9e:15:
         7a:9f:34:38:94:aa:af:4e:f4:03:46:7d:10:57:fd:a5:38:71:
         34:69:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:55 2026 by rpki-client