Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
File:                     1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft (raw, json)
Hash identifier:          KDsjo3mLlpeyqNphQa+8eKJ8D8jw3evPNlXymm2tzj8=
Subject key identifier:   D3:38:41:2E:5B:7A:B6:26:7A:35:A0:17:6B:8D:B1:BE:93:2B:E9:C9
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       7271615C910193C10D15FCF32C2AF440C9887D36
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
Manifest number:          6D
Signing time:             Thu 23 Jul 2026 22:46:53 +0000
Manifest this update:     Thu 23 Jul 2026 22:41:53 +0000
Manifest next update:     Sat 25 Jul 2026 00:03:53 +0000
Files and hashes:         1: 3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa (hash: kMJ1vhXoM5lWsAtGby2N4NBOQOtOqqWYBMf/MDrw46E=)
                          2: 3130312e302e3233322e302f32312d3234203d3e2034373830.roa (hash: p/2qKe2s8P3nmylPfxc8kutCsitWJsWvlniVw9VDejs=)
                          3: 3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa (hash: O5tH6+rHeF/CzyKscBEL7/Pd/t5Mq5TOsy/0NVKpiIo=)
                          4: 3130312e302e3232342e302f32312d3234203d3e203138303436.roa (hash: PDX/dgh26U+Jh027gHT88wZj3/PahBSo9laTaUqIs+A=)
                          5: 3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa (hash: Auax/gFiunbHxNkQOS/4xGo2FY/JkqSoOSclCXMaFXY=)
                          6: 3130312e302e3232342e302f31392d3234203d3e203138303436.roa (hash: k/+ga+vpCPibtMDN9kfqTV2mcmYqsE3mkZm7QgeNBac=)
                          7: 3130312e302e3234302e302f32302d3234203d3e2034373830.roa (hash: okb0kGB+LekHYwOuGLyVCb+I6qh5V5+WzdEBzvXO6X4=)
                          8: 3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa (hash: UUvZcZF1n2KebH1VxdmjDiegAC00F4y9dKmC0BIQVng=)
                          9: 3135302e3132392e33362e302f32322d3234203d3e203138303436.roa (hash: UE/EqJRMqDkGYTPyGerIkl/YVM1eQMkiSKfKtGup4uk=)
                          10: 3135302e3132392e33362e302f32342d3234203d3e203234313639.roa (hash: 1x3JW/n5yEJ9Al/HV4/ndcGjkhxq3EQC0ZG6t2rkuyE=)
                          11: 1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl (hash: VjU9boG7Ok71Lz+amXr8YlLw2Goc5uxdNMVxJO2g1OY=)
                          12: 3132312e35302e3137362e302f32302d3234203d3e203138303436.roa (hash: 9JvrqSBwAwknxYqvUROESlm5m4ENNCpvVVFLkVRKsf4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:61:5c:91:01:93:c1:0d:15:fc:f3:2c:2a:f4:40:c9:88:7d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: Jul 23 22:41:53 2026 GMT
            Not After : Jul 25 00:03:53 2026 GMT
        Subject: CN=D338412E5B7AB6267A35A0176B8DB1BE932BE9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:ca:18:6f:07:78:14:98:5b:cc:52:28:18:
                    a7:df:1a:9d:11:2a:b7:33:5c:94:d4:85:08:f8:0f:
                    9d:53:71:86:15:63:1c:52:12:98:de:ab:99:b7:db:
                    be:88:9f:c8:78:32:31:50:43:1f:f7:46:4c:d3:bf:
                    d7:d0:28:1d:cc:7b:84:f0:7e:4b:71:e1:9a:2d:65:
                    35:01:a0:6a:90:cb:51:51:8b:c1:66:be:e9:cf:3b:
                    48:15:04:b1:1d:84:b6:a3:0f:b8:cd:f5:38:d6:29:
                    4a:66:5e:4b:4d:f6:2f:ab:5b:53:eb:00:14:d0:0d:
                    7a:66:a5:e5:43:ef:70:06:77:44:49:53:d5:aa:0c:
                    7c:87:af:d8:cc:3d:46:7d:13:73:dd:99:52:ac:bf:
                    cd:38:f0:76:8e:f2:8b:61:78:82:61:32:92:b1:c6:
                    29:9a:5e:da:56:d6:ea:61:af:f1:cc:2a:c0:d5:23:
                    ab:f7:a7:d6:d8:89:27:7e:24:b9:43:69:43:6d:b0:
                    84:12:20:3c:07:6a:cf:8b:9f:ab:19:85:59:cf:e3:
                    1a:79:f7:eb:70:80:50:ae:f9:f1:3c:6c:fa:ea:9c:
                    5b:98:2f:9d:88:1e:f1:5a:db:93:ba:57:87:61:48:
                    05:58:15:a3:18:78:c2:a3:dc:e8:54:93:4c:a7:75:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:38:41:2E:5B:7A:B6:26:7A:35:A0:17:6B:8D:B1:BE:93:2B:E9:C9
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:84:a7:0f:1e:13:62:a0:73:bc:1d:d5:23:75:fd:05:c6:
         aa:94:72:57:bd:ce:cf:0a:42:8c:22:1d:22:92:45:a8:f3:4f:
         f0:7b:28:87:07:2a:d0:04:f2:da:f1:89:05:6e:27:eb:c8:81:
         91:e7:da:45:41:d4:07:9c:8e:f8:fa:3f:d8:40:68:1b:c6:77:
         c9:9b:2c:cc:ce:0c:6d:7b:21:01:6e:15:45:7a:d4:80:bc:cb:
         ec:67:0e:3c:8a:52:3d:0a:fb:14:4c:94:bc:7e:86:28:eb:df:
         20:5b:52:52:40:76:64:74:9d:b0:56:a5:15:e7:88:04:ad:8a:
         34:73:90:e0:6f:a3:22:79:9a:fe:36:6e:ec:4e:f5:36:68:16:
         30:42:a9:67:4f:6b:cb:c9:14:09:3d:0c:f8:45:63:ab:22:3c:
         43:f3:88:df:53:3f:e1:5e:8e:60:19:cc:77:74:6c:82:e7:ca:
         8a:7d:df:24:15:8f:d8:19:3f:be:8a:ab:22:9d:38:e4:52:b4:
         dc:a6:6b:ec:87:1e:ee:27:41:95:ae:9d:45:29:3f:84:3f:97:
         32:11:e9:b5:ad:df:a5:eb:ca:a1:4e:2b:aa:ff:27:e7:77:e4:
         46:b0:4f:10:25:27:44:a8:93:30:c3:27:f9:c0:12:fb:ae:75:
         32:e4:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:28 2026 by rpki-client