Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
File:                     60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft (raw, json)
Hash identifier:          RhodwNhJtPij8it50oCZuatVU3YxWtVAY1trBT/Hpl4=
Subject key identifier:   85:4C:31:B2:1B:07:B6:43:B4:D2:2A:33:23:30:6B:E2:54:0B:89:24
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       20EEA30E837869558BB5E9D0C0CEDCA6048A6370
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
Manifest number:          0117
Signing time:             Sun 15 Nov 2026 01:44:07 +0000
Manifest this update:     Sun 15 Nov 2026 01:39:07 +0000
Manifest next update:     Mon 16 Nov 2026 03:06:07 +0000
Files and hashes:         1: 323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa (hash: 0FEWrUNjLY/F3gseUIYDxYlgFXVH+ROPTSUAvafGyeU=)
                          2: 3130332e39382e37342e302f32342d3234203d3e2039363738.roa (hash: tNSrK+WNy+KySyf2yQ1NOrkH6iCaaiR2BeXjuVkFzh4=)
                          3: 323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (hash: wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=)
                          4: 323430313a393563303a3a2f33362d3336203d3e2039363738.roa (hash: FjgMbezCdZItwgd9u+UzAwlO2g/X8+irv7/pznEQ8ng=)
                          5: 3130332e39382e37332e302f32342d3234203d3e2039363738.roa (hash: iTc2gRx4ebXsP1eOWz4bPAEExZXDn5MuL/PjqBhmxRc=)
                          6: 3232332e32362e312e302f32342d3234203d3e2039363738.roa (hash: Lo7donP/9UA808jwU4s7KUQfGkcGM3kV2CfMe8JCTd8=)
                          7: 323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa (hash: LElF+wGt3liBgKlL8jsB3e1yEkuDOG6KHD56zZD0m1c=)
                          8: 323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa (hash: XBZlZFNoLpm2lmpxhtAjCP6zIGu3Dhyf7TwvCzJtd+8=)
                          9: 3232332e32362e302e302f32342d3234203d3e2039363738.roa (hash: plplmJ8pwlLh3yGAxEbhFQEbbFuJ0mIf0eyJpVvTgks=)
                          10: 34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (hash: 82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=)
                          11: 3130332e3135322e3135312e302f32342d3234203d3e2039363738.roa (hash: LbFNzufaEOVQ4W41Z1ykHx9k1X6VXBB6LVAO4NG2BwI=)
                          12: 3130332e3135302e33372e302f32342d3234203d3e2039363738.roa (hash: MxntDIE2cC7tgxOjHnVFPeq1VqsxruW7k0jq8nNwz5o=)
                          13: 3231312e37362e3137392e302f32342d3234203d3e2039363738.roa (hash: /Zn6oV7/+JqyT/+9kwju4uQs6rJPmG9bibhYt4x/eW8=)
                          14: 323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa (hash: coQ2mjXXFKGhITP1RevV/iXW3F6uOj+d2bCuydrqi38=)
                          15: 323430313a393563303a3a2f33322d3332203d3e2039363738.roa (hash: jOtFlREhO9CilnpGChErgEs47lUXhbvvQOV2p/o59ZQ=)
                          16: 3231312e37362e3137382e302f32342d3234203d3e2039363738.roa (hash: JW2N4XkiPozF8gUK5wYhp6TMNn7yWqUe8luuRx51Dbk=)
                          17: 3130332e39382e37352e302f32342d3234203d3e2039363738.roa (hash: lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=)
                          18: 323430313a393563303a666630303a3a2f34382d3438203d3e2039363738.roa (hash: FKDyCflBWn6a8uo6g3n2AjBuvu2puh1+kUA+ievfhFE=)
                          19: 323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa (hash: jA7qImHOv7W5Hv0XzY9Mbd/TM/moy4CN/D4CXy9sCok=)
                          20: 3130332e39382e37322e302f32342d3234203d3e2039363738.roa (hash: +QkVrz2UrUc1xKgslAqv4U092I7kUGBfoilfgqBhzdM=)
                          21: 323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa (hash: U2WVeAZZY+wJAf5675nkBmBhxC/RUJdThWhD5OYfiNQ=)
                          22: 3130332e3135322e3135302e302f32342d3234203d3e2039363738.roa (hash: 8BYEKNaCDqwjOiYLUizaV9F+Qamzecge9/ZWZ2nFg+8=)
                          23: 60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl (hash: XH2oppiu8OLdyDPhwgUBwOllNrqDEnIiGaKLZHS2zAo=)
                          24: 3130332e3135302e33362e302f32342d3234203d3e2039363738.roa (hash: y8lVVRe/wuPGJ7dZ5+tF+pkbL0/La93cTqHjq66lkjQ=)
                          25: 323430313a393563303a666630313a3a2f34382d3438203d3e2039363738.roa (hash: IokfCwyznb52FLQjJZTuLZHrrt+kHNqLvpF4cQOav0k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 15:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:a3:0e:83:78:69:55:8b:b5:e9:d0:c0:ce:dc:a6:04:8a:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: Nov 15 01:39:07 2026 GMT
            Not After : Nov 16 03:06:07 2026 GMT
        Subject: CN=854C31B21B07B643B4D22A3323306BE2540B8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:e4:4b:3d:7f:78:39:d8:95:9c:a6:54:d9:
                    ff:1b:c5:a7:c0:a5:5d:75:22:56:b5:fa:1a:66:7c:
                    b8:49:59:55:15:07:ef:d6:76:c0:3f:56:de:4d:c7:
                    34:2b:c7:dd:aa:80:66:9b:af:2c:c1:19:25:26:00:
                    5b:34:34:a3:c5:27:3e:ba:33:88:af:47:1b:8a:9d:
                    f0:2a:49:4c:81:9d:f0:4b:56:a3:18:bf:76:7d:4b:
                    a5:7b:a0:53:d6:0b:18:84:d5:28:88:a3:53:7c:b2:
                    ae:cc:56:b8:1f:23:05:7a:f4:94:a4:ab:bb:26:c4:
                    72:17:4d:99:4d:5b:ba:71:64:15:ff:3e:84:16:8e:
                    1a:2e:d5:12:28:c7:20:6c:c0:87:b3:68:89:13:f9:
                    13:c4:b3:f2:a5:68:ff:15:7a:79:ce:03:97:75:11:
                    69:72:02:de:e0:bb:b4:88:e0:65:3a:6b:a0:6e:5a:
                    e5:3e:00:30:3a:26:aa:6e:fc:c0:10:d4:07:65:7a:
                    59:47:ce:b1:5d:d1:88:6e:e6:49:dd:95:0c:27:7b:
                    ed:2b:f9:03:4d:46:5a:7f:d4:1e:0b:32:92:c5:67:
                    0f:af:7d:52:d7:f8:10:02:b8:0c:7c:54:22:7c:00:
                    ec:d7:36:b0:0d:b5:40:c9:06:8e:9a:50:14:1b:e6:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:31:B2:1B:07:B6:43:B4:D2:2A:33:23:30:6B:E2:54:0B:89:24
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:24:18:a1:da:ee:ef:11:8b:6a:0a:a4:f7:f6:4b:27:e2:
         4a:d7:57:1c:3e:38:ee:85:60:9f:1e:94:31:9b:6a:ce:32:a2:
         52:14:ff:78:a2:0b:37:85:25:ce:2d:6d:2e:51:be:69:27:1a:
         62:01:b3:a0:94:83:0a:aa:ad:88:2e:5b:d5:80:cd:86:bd:c1:
         22:c3:c1:3e:02:63:83:c3:3c:a7:a3:93:ad:a6:66:74:40:2a:
         2f:28:53:e9:5a:5a:54:d6:6d:86:90:ff:4a:05:b1:95:c1:d4:
         a7:97:51:4f:e5:62:e1:fb:4d:1a:5a:54:74:0c:b2:95:f8:73:
         ae:35:63:c2:57:9c:3d:3a:b7:72:a4:02:72:89:26:68:7e:38:
         36:1b:f8:2f:cf:7b:f1:26:24:6d:65:4a:f9:bf:c8:b6:28:27:
         f0:80:24:3f:e8:12:2c:80:55:70:a9:03:b8:46:71:2e:06:46:
         86:b7:73:5b:f6:75:c3:b3:38:6b:29:77:05:64:c8:85:c8:6d:
         cc:f7:97:b9:55:82:ca:53:6f:b3:c0:34:76:49:74:34:3f:8e:
         8b:de:ac:a7:cf:ea:4d:10:5d:ca:c2:d5:a2:8e:ce:50:05:00:
         aa:e2:ff:a9:59:17:4e:87:25:27:21:bd:a4:58:6c:7c:eb:43:
         f9:e6:28:15
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUIO6jDoN4aVWLtenQwM7cpgSKY3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE
RkQzMkQyQTAeFw0yNjExMTUwMTM5MDdaFw0yNjExMTYwMzA2MDdaMDMxMTAvBgNV
BAMTKDg1NEMzMUIyMUIwN0I2NDNCNEQyMkEzMzIzMzA2QkUyNTQwQjg5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNWuRLPX94OdiVnKZU2f8bxafA
pV11Ila1+hpmfLhJWVUVB+/WdsA/Vt5NxzQrx92qgGabryzBGSUmAFs0NKPFJz66
M4ivRxuKnfAqSUyBnfBLVqMYv3Z9S6V7oFPWCxiE1SiIo1N8sq7MVrgfIwV69JSk
q7smxHIXTZlNW7pxZBX/PoQWjhou1RIoxyBswIezaIkT+RPEs/KlaP8VennOA5d1
EWlyAt7gu7SI4GU6a6BuWuU+ADA6Jqpu/MAQ1AdlellHzrFd0Yhu5kndlQwne+0r
+QNNRlp/1B4LMpLFZw+vfVLX+BACuAx8VCJ8AOzXNrANtUDJBo6aUBQb5q3hAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUhUwxshsHtkO00iozIzBr4lQLiSQwHwYDVR0j
BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO
LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD
NUUxMERGRDMyRDJBLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzAvNjBBNkYyMEUzOUU4
MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEXGJBih2u7v
EYtqCqT39ksn4krXVxw+OO6FYJ8elDGbas4yolIU/3iiCzeFJc4tbS5RvmknGmIB
s6CUgwqqrYguW9WAzYa9wSLDwT4CY4PDPKejk62mZnRAKi8oU+laWlTWbYaQ/0oF
sZXB1KeXUU/lYuH7TRpaVHQMspX4c641Y8JXnD06t3KkAnKJJmh+ODYb+C/Pe/Em
JG1lSvm/yLYoJ/CAJD/oEiyAVXCpA7hGcS4GRoa3c1v2dcOzOGspdwVkyIXIbcz3
l7lVgspTb7PANHZJdDQ/joverKfP6k0QXcrC1aKOzlAFAKri/6lZF06HJSchvaRY
bHzrQ/nmKBU=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:40:57 2026 by rpki-client