Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
File:                     F1F518BDB5085DA9DAA281C529D23491A72DA248.mft (raw, json)
Hash identifier:          ig8BfcA3QHFIoipsAhbbt7MUOip8SsRptP1ZUphMYjU=
Subject key identifier:   8D:61:16:AE:5B:28:6C:A5:B0:E2:12:58:7D:5A:5D:AB:F7:36:94:1A
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Certificate issuer:       /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial:       24D3AE9D2CF1C49396C03D02CD6827192E009D0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
Manifest number:          66
Signing time:             Thu 23 Jul 2026 19:16:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:11:33 +0000
Manifest next update:     Fri 24 Jul 2026 22:40:33 +0000
Files and hashes:         1: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (hash: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY=)
                          2: 34332e3234382e31362e302f32322d3234203d3e203138303436.roa (hash: xJeTRYFTpaj0Hh3mWQfQMb0S7i3UbraCF9VeCrKQmyI=)
                          3: F1F518BDB5085DA9DAA281C529D23491A72DA248.crl (hash: ctR2NFw8uhTFLdY4q1e0DHMR96zUUlH69cVB5tRhLac=)
                          4: 3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa (hash: IQqTvMCBIJY6Msoqpe6u+k/x2PQIXfWBUEMY1IOks9o=)
                          5: 3130332e3233332e36382e302f32322d3234203d3e203138303436.roa (hash: ORpDWMmcXvXNpOQL2dVJ9nUGlzM0OrO03KuyZerYMOU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
                          rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:ae:9d:2c:f1:c4:93:96:c0:3d:02:cd:68:27:19:2e:00:9d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
        Validity
            Not Before: Jul 23 19:11:33 2026 GMT
            Not After : Jul 24 22:40:33 2026 GMT
        Subject: CN=8D6116AE5B286CA5B0E212587D5A5DABF736941A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:19:51:7a:a0:21:9c:04:aa:9a:4e:42:72:
                    c7:dc:d3:58:3f:4c:fb:25:89:ab:0b:21:6a:29:b5:
                    ca:8c:c1:d9:0e:a5:a1:6e:b2:5a:c0:d0:36:df:d5:
                    60:f7:68:13:31:46:d9:90:62:a2:5e:c7:58:e7:9f:
                    38:4e:e2:47:a0:40:17:31:e1:29:6a:44:97:ed:69:
                    b6:4b:6f:52:f5:48:c2:33:21:9f:15:7d:e9:d7:f4:
                    35:85:cf:8c:f4:9b:aa:76:0d:dc:87:9c:7a:d1:1a:
                    6a:75:bc:64:40:87:4a:96:0a:c7:7a:58:c7:b2:9d:
                    10:f8:c1:75:41:76:71:32:39:e3:9d:7c:72:27:e7:
                    7c:9e:d0:27:02:f7:76:c3:cf:c5:63:c4:5f:2f:7b:
                    4d:81:e0:7c:e4:18:b0:04:da:46:38:10:02:fc:48:
                    ba:9d:85:67:f0:62:d9:0f:e2:df:4f:a9:e6:d7:93:
                    40:03:72:ab:b6:b5:de:d6:8e:0b:5f:0c:eb:82:35:
                    36:40:59:16:4f:8e:90:af:d3:01:97:ed:84:83:a5:
                    19:07:84:db:5a:8e:5b:e5:b9:f5:25:bc:a5:c7:65:
                    15:17:b7:ce:e9:54:4b:4d:81:84:1c:e7:fa:ce:a6:
                    38:5a:95:b2:35:ba:02:44:f6:98:3c:fe:c0:67:cc:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:16:AE:5B:28:6C:A5:B0:E2:12:58:7D:5A:5D:AB:F7:36:94:1A
            X509v3 Authority Key Identifier:
                keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:ca:40:4c:29:0f:e0:55:c9:05:e5:f0:b4:44:d6:e8:f1:
         1b:35:e0:d1:db:36:11:c7:9b:80:a8:09:af:15:b2:94:14:7b:
         bf:9e:80:de:25:1e:44:c0:8b:5d:81:4d:3d:3c:fb:ae:0c:4a:
         7a:50:7b:59:f3:53:b3:f6:5d:47:20:35:df:b7:86:e7:60:0b:
         7d:a4:6a:b5:cb:0d:c9:bc:67:08:e0:ec:59:25:34:45:2b:49:
         0e:0c:d9:97:fc:77:65:3a:3a:c2:78:56:12:f4:92:35:74:aa:
         1c:9a:57:f6:1b:fe:d1:e1:b2:b1:ad:55:42:7b:ae:30:7c:16:
         fa:a9:76:fe:9e:b9:21:b9:e2:dc:69:fc:e5:e0:ea:92:1b:3a:
         e9:7e:52:68:71:0e:62:9e:79:e3:34:1a:86:6f:04:32:59:3a:
         5b:f8:28:4e:c0:f1:43:65:d6:98:17:75:51:dd:29:7c:7e:15:
         c7:1b:77:d8:24:f7:d7:9a:e9:d1:41:03:e2:ca:aa:44:2b:37:
         48:38:c7:c9:5c:72:96:8d:1d:12:0a:9c:6f:98:d6:72:5e:e4:
         49:7d:37:91:68:05:bd:78:57:13:19:16:17:24:ba:9f:c6:90:
         97:56:29:9c:64:41:24:0f:71:ef:4c:15:6b:7c:3a:bd:54:03:
         31:a3:53:b2
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUJNOunSzxxJOWwD0CzWgnGS4AnQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlEMjM0OTFB
NzJEQTI0ODAeFw0yNjA3MjMxOTExMzNaFw0yNjA3MjQyMjQwMzNaMDMxMTAvBgNV
BAMTKDhENjExNkFFNUIyODZDQTVCMEUyMTI1ODdENUE1REFCRjczNjk0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNRlReqAhnASqmk5Ccsfc01g/
TPsliasLIWoptcqMwdkOpaFuslrA0Dbf1WD3aBMxRtmQYqJex1jnnzhO4kegQBcx
4SlqRJftabZLb1L1SMIzIZ8VfenX9DWFz4z0m6p2DdyHnHrRGmp1vGRAh0qWCsd6
WMeynRD4wXVBdnEyOeOdfHIn53ye0CcC93bDz8VjxF8ve02B4HzkGLAE2kY4EAL8
SLqdhWfwYtkP4t9PqebXk0ADcqu2td7WjgtfDOuCNTZAWRZPjpCv0wGX7YSDpRkH
hNtajlvlufUlvKXHZRUXt87pVEtNgYQc5/rOpjhalbI1ugJE9pg8/sBnzFXDAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUjWEWrlsobKWw4hJYfVpdq/c2lBowHwYDVR0j
BBgwFoAU8fUYvbUIXanaooHFKdI0kactokgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUVklT
UC8wL0YxRjUxOEJEQjUwODVEQTlEQUEyODFDNTI5RDIzNDkxQTcyREEyNDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlE
MjM0OTFBNzJEQTI0OC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NBVFZJU1AvMC9GMUY1MThCREI1
MDg1REE5REFBMjgxQzUyOUQyMzQ5MUE3MkRBMjQ4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKrKQEwp
D+BVyQXl8LRE1ujxGzXg0ds2EcebgKgJrxWylBR7v56A3iUeRMCLXYFNPTz7rgxK
elB7WfNTs/ZdRyA137eG52ALfaRqtcsNybxnCODsWSU0RStJDgzZl/x3ZTo6wnhW
EvSSNXSqHJpX9hv+0eGysa1VQnuuMHwW+ql2/p65Ibni3Gn85eDqkhs66X5SaHEO
Yp554zQahm8EMlk6W/goTsDxQ2XWmBd1Ud0pfH4Vxxt32CT315rp0UED4sqqRCs3
SDjHyVxylo0dEgqcb5jWcl7kSX03kWgFvXhXExkWFyS6n8aQl1YpnGRBJA9x70wV
a3w6vVQDMaNTsg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:46 2026 by rpki-client