Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
File:                     0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft (raw, json)
Hash identifier:          N8eFttbPYbFffhbCjewb6trRJFZVe3tbbYkHe326V8g=
Subject key identifier:   0E:7D:7E:C8:3C:64:8D:05:4B:5A:23:73:07:E6:88:E5:98:BF:6C:54
Authority key identifier: 08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9
Certificate issuer:       /CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
Certificate serial:       344862D99CFA964FCA497431C35FC4D78FC68F5A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 02:15:25 +0000
Manifest this update:     Thu 24 Sep 2026 02:10:25 +0000
Manifest next update:     Fri 25 Sep 2026 02:46:25 +0000
Files and hashes:         1: 3130332e3131352e3130382e302f32332d3234203d3e20313532313739.roa (hash: GnqSOqHIKRnSUe48yc8wA/3RSL3OwN91aIq6irhNf34=)
                          2: 0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl (hash: 6uwE0foghZ0muVoLGenVV6OF4N7tbBm0UF6Ld0Lrtgc=)
                          3: 323430303a656265303a3a2f33322d3332203d3e203633393038.roa (hash: yiaDMH+RG+1Oi2ZJm9NkMQbKlRz53qXOlLRWHQMDjvY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl
                          rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:48:62:d9:9c:fa:96:4f:ca:49:74:31:c3:5f:c4:d7:8f:c6:8f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
        Validity
            Not Before: Sep 24 02:10:25 2026 GMT
            Not After : Sep 25 02:46:25 2026 GMT
        Subject: CN=0E7D7EC83C648D054B5A237307E688E598BF6C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b9:84:8b:4a:9c:cd:f4:ad:34:fb:ed:02:41:
                    45:0d:b9:73:5c:ae:84:65:13:83:32:16:e7:2a:25:
                    0e:8b:ea:59:5b:56:5c:35:9e:95:d4:1e:af:2c:e2:
                    5d:d8:6e:5e:12:09:09:f3:1b:ef:35:ad:82:41:d2:
                    3e:d5:37:63:22:52:f7:27:ae:5d:ec:bd:54:56:a6:
                    b1:01:2f:3b:c2:a8:ba:5b:11:52:1e:e4:43:a4:67:
                    a8:a4:ec:9b:1e:de:d3:44:5b:9f:f0:c5:9d:64:5c:
                    14:ae:54:64:56:4b:18:2d:67:74:b2:d4:1c:a2:b4:
                    ee:a5:ee:ed:39:fe:0f:93:9c:06:d4:f7:1f:a4:cc:
                    34:87:6e:20:0b:7f:f6:6d:1e:80:fc:bf:85:77:03:
                    fb:45:de:7e:a9:67:6b:54:23:09:a2:34:be:c6:ba:
                    6c:e5:43:6d:64:7c:b7:58:84:87:6e:8d:6d:1a:16:
                    0f:1c:99:ef:5f:73:47:8c:66:35:28:74:34:5b:64:
                    92:45:00:dc:0a:9c:9e:67:a2:61:bc:b4:40:70:12:
                    bb:97:bc:eb:ac:8f:dd:eb:e1:d7:12:75:04:b2:d0:
                    a2:02:f1:5f:65:b0:6e:37:1b:c0:88:ec:08:34:10:
                    18:e6:79:b1:9b:89:fd:da:dd:8c:f0:14:1a:d3:57:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:7E:C8:3C:64:8D:05:4B:5A:23:73:07:E6:88:E5:98:BF:6C:54
            X509v3 Authority Key Identifier:
                keyid:08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:39:5f:ba:3c:31:43:eb:4e:b4:11:70:1c:8d:f7:52:fb:
         82:9b:1d:1c:37:af:01:19:e5:b3:1d:00:00:e0:7b:a8:eb:96:
         d8:0b:df:a1:9e:69:71:1e:e7:24:e0:96:72:58:d2:ba:58:0c:
         e1:c8:ad:0f:04:c3:af:09:20:b6:0c:24:e8:d1:5e:c9:47:9a:
         4d:9f:15:da:91:3c:15:43:26:8f:5b:92:fc:2e:c4:00:04:e5:
         15:22:90:85:0b:7b:c1:af:8d:36:fd:ae:91:e6:8b:2b:3e:79:
         84:33:7e:6b:19:72:cf:54:ac:65:25:52:3e:45:af:10:7c:d8:
         57:65:d5:b9:3e:01:50:4e:c8:7f:94:5a:8a:56:33:b3:77:c6:
         8a:f5:d4:78:1d:62:06:eb:f4:e6:34:fb:4a:b8:30:2d:d0:64:
         56:c9:a8:55:3d:52:7a:7e:45:22:06:33:93:5a:0b:98:35:1d:
         f1:34:78:62:99:69:e6:a8:78:c4:0f:41:80:0c:2a:da:81:3a:
         2c:cf:ec:01:ec:40:6c:10:04:41:5a:5b:0d:3f:72:29:e3:26:
         71:25:14:08:91:5e:a9:5c:8e:93:1b:8e:5c:fc:b2:38:c6:b8:
         6f:b8:85:b6:bf:71:63:0c:ed:f7:58:bd:70:45:9a:fd:97:1f:
         24:92:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:51 2026 by rpki-client