Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
File:                     ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft (raw, json)
Hash identifier:          uCl9OWKjfSc6bBxK0YHLGQVUg76WntvZhj9cMD8OysQ=
Subject key identifier:   3B:20:3C:17:A9:C7:72:1E:F4:EF:0D:5D:A8:65:67:75:3C:3E:DA:F6
Authority key identifier: AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F
Certificate issuer:       /CN=ACF64AAE08A591A2FF9B687E110069B7FA25F54F
Certificate serial:       78B7AE42FC4616319AE70BF450E1375AC77019F8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
Manifest number:          BA
Signing time:             Sun 27 Sep 2026 07:38:22 +0000
Manifest this update:     Sun 27 Sep 2026 07:33:22 +0000
Manifest next update:     Mon 28 Sep 2026 07:56:22 +0000
Files and hashes:         1: ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl (hash: TfdepqL/W4IJN/SksLzV66mj70veoGCap3VeWGJHhxg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl
                          rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:ae:42:fc:46:16:31:9a:e7:0b:f4:50:e1:37:5a:c7:70:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF64AAE08A591A2FF9B687E110069B7FA25F54F
        Validity
            Not Before: Sep 27 07:33:22 2026 GMT
            Not After : Sep 28 07:56:22 2026 GMT
        Subject: CN=3B203C17A9C7721EF4EF0D5DA86567753C3EDAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:4e:f2:15:75:b1:82:e5:93:45:da:4c:e9:
                    09:70:14:31:61:17:25:fc:a0:62:79:5d:c8:85:05:
                    a0:d6:0c:9d:9b:73:b2:a3:02:67:3b:9e:af:a4:23:
                    90:90:95:1f:1b:75:80:ca:23:e0:b7:96:ae:60:e7:
                    ef:bd:fe:48:e0:84:5d:70:79:16:4c:2e:73:a4:38:
                    79:a4:9a:0f:0f:e2:9a:41:46:82:cc:fd:13:8d:2c:
                    c7:c8:e3:86:d7:f1:4a:f4:d5:d3:80:f4:70:f6:b9:
                    d2:34:90:33:0d:f6:b9:9f:4b:a9:14:9d:7f:11:b2:
                    f0:ae:34:6c:12:15:29:98:86:9f:a2:2a:6b:80:ed:
                    cc:8d:1a:fd:3b:e6:1e:d7:46:4d:a9:ca:3a:de:ab:
                    dd:d8:7a:7a:80:f3:85:10:57:5f:ef:81:f1:c9:09:
                    cd:d9:4a:fe:e4:33:c8:9e:3e:5f:b9:0e:1f:0b:25:
                    b7:59:df:bd:4e:d6:27:51:9d:5e:41:19:aa:7f:a1:
                    1d:f0:08:65:f3:90:bc:d8:a1:f4:23:d2:7b:7c:33:
                    6b:38:ad:80:38:bf:0c:64:69:68:8e:5a:f0:c4:b4:
                    da:28:c2:a0:1c:e2:6d:aa:12:56:c8:01:77:70:4e:
                    e0:16:a9:a4:28:ab:db:7e:57:36:d3:91:7e:89:71:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:3C:17:A9:C7:72:1E:F4:EF:0D:5D:A8:65:67:75:3C:3E:DA:F6
            X509v3 Authority Key Identifier:
                keyid:AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:44:1a:00:8d:95:46:e5:5b:fd:bf:41:5a:97:cd:c7:30:
         52:e4:40:04:8b:69:96:48:5d:a8:23:b7:96:9f:ac:2b:17:4d:
         2e:a3:c3:4c:90:49:12:33:d9:b5:07:e3:39:5d:06:be:c4:a1:
         ab:90:d7:f0:17:8b:b8:9c:5e:e8:79:e2:b5:f2:2d:6b:5b:3c:
         0a:1d:b3:19:c1:8b:76:a6:28:a1:63:47:a3:b7:84:3f:33:1f:
         ea:e5:b9:94:e6:17:ea:ee:5e:65:75:de:41:2a:c3:09:34:2f:
         53:e2:85:43:aa:3f:d7:fc:06:a7:49:f4:f9:33:24:c2:60:c6:
         ed:18:2c:27:7e:0b:fc:23:07:21:f6:7b:db:2d:9d:72:54:c8:
         70:ca:46:fe:13:b5:29:b2:ba:86:87:f5:85:dd:4e:f9:d6:65:
         cb:37:cc:4f:45:16:bf:4a:41:68:4a:ce:a0:12:23:07:d1:2d:
         64:31:1f:e5:c8:c9:3d:59:13:47:3a:4c:9c:2a:98:4e:f8:f0:
         d7:e1:f0:59:ca:bc:86:b5:8b:b3:cf:a6:4d:07:7d:79:d4:f4:
         ab:a9:dc:e6:c7:31:23:44:4c:40:ba:56:35:85:fd:a4:7e:5f:
         7e:4a:20:f4:22:d8:d6:95:7a:c0:41:44:94:78:79:dc:65:8e:
         22:a7:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:05:22 2026 by rpki-client