Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
File:                     6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft (raw, json)
Hash identifier:          xuICSaR5pDfXs+1M/ulaplL447tY1RCDGQRV2s9JKUE=
Subject key identifier:   4F:C1:4B:4B:3C:53:59:99:05:5D:9B:B6:7C:D4:29:07:28:6C:AB:A9
Authority key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
Certificate issuer:       /CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
Certificate serial:       2CC82F36123235DFDEE42CAB9403913B37EF0EA1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 11:04:34 +0000
Manifest this update:     Thu 24 Sep 2026 10:59:34 +0000
Manifest next update:     Fri 25 Sep 2026 14:30:34 +0000
Files and hashes:         1: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl (hash: BNrWe8GMNsCCa/v6x1A681Xa2rtm30tVEWs8TsAYJik=)
                          2: 3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa (hash: P5QLHoBtt6SbxYucP/7Z4dIJgiwE8f3I3JbpUYs0g0M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl
                          rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 14:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c8:2f:36:12:32:35:df:de:e4:2c:ab:94:03:91:3b:37:ef:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
        Validity
            Not Before: Sep 24 10:59:34 2026 GMT
            Not After : Sep 25 14:30:34 2026 GMT
        Subject: CN=4FC14B4B3C535999055D9BB67CD42907286CABA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:06:17:af:8b:49:5f:30:a3:b7:e9:ce:ea:
                    1e:c7:bd:e1:ab:41:c2:3c:3b:bb:93:34:d0:b1:8d:
                    7c:87:7f:91:42:80:7a:ab:94:ac:f6:0e:e1:26:c4:
                    dc:0a:b7:d7:9a:e1:53:27:ad:d5:a9:22:af:e6:37:
                    9a:aa:87:6b:15:b3:c0:57:11:96:3b:9e:bc:25:ca:
                    65:d7:31:b0:90:d4:1b:f8:87:66:2b:be:94:37:06:
                    b2:d7:6a:38:d3:d8:a7:98:a4:8c:06:5e:b0:26:8d:
                    63:9a:49:c5:a1:42:72:1b:6c:a3:99:df:24:e5:d5:
                    e5:63:c2:66:4a:d3:0a:00:43:5c:d3:66:a5:44:15:
                    b9:49:03:a5:c9:3c:0a:c3:76:17:c6:1b:fe:d5:9f:
                    c4:e1:40:19:5d:6d:fe:e1:ee:86:51:be:20:c3:1f:
                    7d:7c:64:c2:e9:13:15:97:c4:34:46:96:18:31:87:
                    92:1a:d0:09:60:d4:1b:59:75:e7:61:84:43:2d:84:
                    7c:f6:3d:fd:fd:00:75:06:fc:10:ac:fd:f8:a7:b9:
                    72:ae:a4:7a:e9:c9:7e:0e:7b:6f:59:14:e8:30:40:
                    80:e0:49:36:34:52:0d:7e:7c:a6:be:b0:dd:ec:9f:
                    ce:ce:03:ef:49:76:c2:3c:6b:69:a1:fb:58:72:fc:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C1:4B:4B:3C:53:59:99:05:5D:9B:B6:7C:D4:29:07:28:6C:AB:A9
            X509v3 Authority Key Identifier:
                keyid:62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:7a:4a:05:5a:1a:f0:ef:d7:58:ec:5b:50:67:08:a0:70:
         0c:43:cd:53:76:18:68:2b:6b:12:e1:00:b2:42:35:e1:86:49:
         af:6a:c1:e6:33:38:a4:b9:8b:07:9e:c2:b9:03:dd:a3:aa:f0:
         2d:dc:0b:72:67:45:c5:41:50:c3:c1:2c:86:b7:ef:a7:71:82:
         4e:ac:0d:4d:42:a4:10:eb:81:24:6f:7e:15:b0:a0:ca:d4:06:
         49:31:02:ed:68:35:a5:c9:00:59:ed:80:c6:2d:4d:51:d0:fe:
         ff:a4:3f:d7:50:b9:39:bf:fa:1b:61:7c:a5:78:09:ae:e2:3e:
         71:e5:41:c1:68:ab:20:71:90:6b:9e:8c:87:db:1d:ed:d3:c7:
         78:ff:61:ce:f9:3d:78:a3:f3:58:33:81:b7:fd:5b:16:ad:3d:
         82:f5:28:95:d5:0a:1d:a8:58:a3:de:65:67:96:bb:32:9e:16:
         e0:a5:91:aa:58:39:62:a7:92:81:13:85:d5:c3:53:99:30:f5:
         41:f8:4c:f1:64:a1:e8:be:95:06:de:ce:15:30:b2:b9:aa:81:
         e4:57:46:33:2a:06:14:2f:d9:5f:d6:29:58:41:a5:57:cf:26:
         93:52:31:13:c8:65:a5:2b:f0:78:27:9e:fd:a4:6f:83:d6:92:
         ae:04:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:49:03 2026 by rpki-client