Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File:                     33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier:          U/Oh2Nvh13Hm8Od/xfEMhtsAbKh0ECcai3fmjVDGM/M=
Subject key identifier:   94:CE:08:0B:44:12:07:AF:5A:04:A3:15:7E:43:AF:3B:43:9A:4B:B8
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer:       /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial:       765A29E6B58ED2954A4C08901A2235B04109D16C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number:          DE
Signing time:             Thu 23 Jul 2026 14:58:01 +0000
Manifest this update:     Thu 23 Jul 2026 14:53:01 +0000
Manifest next update:     Fri 24 Jul 2026 16:42:01 +0000
Files and hashes:         1: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
                          2: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
                          3: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
                          4: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
                          5: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=)
                          6: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
                          7: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
                          8: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
                          9: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
                          10: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
                          11: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
                          12: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
                          13: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
                          14: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
                          15: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
                          16: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
                          17: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
                          18: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
                          19: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: SFWPjcmCz+5vVO8hRnwF5s/sSEm2ISHhXLMW8sdZAow=)
                          20: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
                          21: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
                          22: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
                          23: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
                          24: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
                          25: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
                          26: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
                          rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5a:29:e6:b5:8e:d2:95:4a:4c:08:90:1a:22:35:b0:41:09:d1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
        Validity
            Not Before: Jul 23 14:53:01 2026 GMT
            Not After : Jul 24 16:42:01 2026 GMT
        Subject: CN=94CE080B441207AF5A04A3157E43AF3B439A4BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:aa:42:af:e7:ab:22:1a:46:88:a3:96:4f:
                    f2:d0:39:c1:0f:ca:74:12:ae:c5:e7:9d:fa:74:da:
                    cf:9e:7a:81:e9:e1:06:b3:b9:e9:e7:6e:6b:ed:fa:
                    ee:1e:9a:61:7e:65:3a:76:d0:81:a3:da:33:1c:f8:
                    11:17:5a:8e:bd:db:14:65:8a:cd:7f:82:73:ef:f0:
                    c6:10:da:be:2b:32:86:23:67:71:9b:c8:d4:d1:98:
                    9d:79:a4:49:ce:43:41:71:60:38:4a:a2:26:4a:f8:
                    2a:81:c2:c2:c6:cf:43:3c:30:20:49:c5:f2:bb:be:
                    2f:3d:cf:80:4b:08:14:12:a1:29:ea:c9:df:fc:f5:
                    d3:ce:9d:d8:c1:6d:0b:a2:6c:0e:5c:14:85:ae:45:
                    43:b5:01:ec:9e:08:5c:0f:c6:c5:b7:6a:64:ed:f2:
                    94:25:af:ca:3d:5c:b2:d5:6c:49:af:9f:71:1b:b6:
                    a5:13:cb:95:0f:88:fe:3a:ef:07:ad:93:57:3d:04:
                    de:2b:91:3b:51:a1:5e:18:9e:fa:9d:01:f5:eb:89:
                    22:02:16:54:a3:99:61:76:e5:a1:69:4e:4f:21:59:
                    6a:77:fc:e3:9f:72:e0:fb:4f:0f:52:e4:5e:bd:79:
                    cf:d9:17:33:10:69:9d:bb:49:53:e8:10:8c:f1:27:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:08:0B:44:12:07:AF:5A:04:A3:15:7E:43:AF:3B:43:9A:4B:B8
            X509v3 Authority Key Identifier:
                keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:26:a3:84:0e:58:ca:97:b0:0a:92:e0:68:df:5f:ee:c0:fb:
         2a:72:76:78:8f:2f:62:55:bf:f1:22:42:ae:c8:8f:cf:4f:c3:
         e6:cd:81:e4:2d:69:86:76:75:2a:6f:83:a0:df:5c:b5:f8:cf:
         ed:b6:6b:f6:95:76:fe:b6:1b:95:2d:49:6f:de:41:e2:15:20:
         c7:f8:11:a6:d8:90:9d:fc:e2:5e:ca:43:dc:ab:ad:aa:62:4c:
         45:f5:ae:0b:58:d5:be:44:6d:ca:60:91:3b:cf:ee:67:95:76:
         b7:fb:6e:94:8c:00:77:ff:46:f9:28:a4:93:f6:08:c8:94:d8:
         a2:58:ac:8d:63:37:8a:35:08:dd:a1:98:0e:58:86:42:34:3d:
         f9:c6:b9:96:b7:63:c0:45:04:b4:1d:52:36:07:aa:9c:f7:18:
         e3:5f:54:ca:78:2a:2b:00:6f:5e:48:91:24:f9:5d:92:6c:c8:
         52:c1:fc:3d:7a:25:ce:c4:d4:a7:f6:8e:a0:db:56:ae:87:1a:
         34:3b:90:af:6d:72:d8:2e:2a:1f:1e:06:41:bf:18:df:7d:67:
         94:25:bf:ae:63:84:42:bf:83:ca:51:ab:b1:61:fa:f3:fe:b4:
         3c:93:70:e1:61:6f:38:f0:d7:9c:7c:35:85:78:82:06:7f:d8:
         ef:e5:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:50 2026 by rpki-client