Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
File:                     60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft (raw, json)
Hash identifier:          cZkYBlOpaJjeOLr450u1AI/+NuZg4fDPI0RREDy9PSc=
Subject key identifier:   04:40:7D:7B:8C:4D:A9:63:27:81:DF:66:42:8A:90:AB:17:02:E7:CC
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       3606BC1FF4B45DE97685B50760A385164570F00C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
Manifest number:          7C
Signing time:             Thu 23 Jul 2026 22:26:51 +0000
Manifest this update:     Thu 23 Jul 2026 22:21:51 +0000
Manifest next update:     Fri 24 Jul 2026 23:38:51 +0000
Files and hashes:         1: 323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa (hash: coQ2mjXXFKGhITP1RevV/iXW3F6uOj+d2bCuydrqi38=)
                          2: 34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (hash: 82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=)
                          3: 323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa (hash: XBZlZFNoLpm2lmpxhtAjCP6zIGu3Dhyf7TwvCzJtd+8=)
                          4: 3232332e32362e312e302f32342d3234203d3e2039363738.roa (hash: Lo7donP/9UA808jwU4s7KUQfGkcGM3kV2CfMe8JCTd8=)
                          5: 323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (hash: wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=)
                          6: 3130332e3135322e3135312e302f32342d3234203d3e2039363738.roa (hash: LbFNzufaEOVQ4W41Z1ykHx9k1X6VXBB6LVAO4NG2BwI=)
                          7: 323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa (hash: LElF+wGt3liBgKlL8jsB3e1yEkuDOG6KHD56zZD0m1c=)
                          8: 3130332e3135302e33372e302f32342d3234203d3e2039363738.roa (hash: MxntDIE2cC7tgxOjHnVFPeq1VqsxruW7k0jq8nNwz5o=)
                          9: 3231312e37362e3137382e302f32342d3234203d3e2037353337.roa (hash: foejPoKcuDxhzrxrfI7Rz0hRH94Dv2l6Nq/p5J2gRpA=)
                          10: 3130332e3135322e3135302e302f32342d3234203d3e2039363738.roa (hash: 8BYEKNaCDqwjOiYLUizaV9F+Qamzecge9/ZWZ2nFg+8=)
                          11: 323430313a393563303a3a2f33362d3336203d3e2039363738.roa (hash: FjgMbezCdZItwgd9u+UzAwlO2g/X8+irv7/pznEQ8ng=)
                          12: 3231312e37362e3137392e302f32342d3234203d3e2039363738.roa (hash: /Zn6oV7/+JqyT/+9kwju4uQs6rJPmG9bibhYt4x/eW8=)
                          13: 323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa (hash: jA7qImHOv7W5Hv0XzY9Mbd/TM/moy4CN/D4CXy9sCok=)
                          14: 3232332e32362e302e302f32342d3234203d3e2039363738.roa (hash: plplmJ8pwlLh3yGAxEbhFQEbbFuJ0mIf0eyJpVvTgks=)
                          15: 323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa (hash: 0FEWrUNjLY/F3gseUIYDxYlgFXVH+ROPTSUAvafGyeU=)
                          16: 3130332e3135302e33362e302f32342d3234203d3e2039363738.roa (hash: y8lVVRe/wuPGJ7dZ5+tF+pkbL0/La93cTqHjq66lkjQ=)
                          17: 3130332e39382e37322e302f32342d3234203d3e2039363738.roa (hash: +QkVrz2UrUc1xKgslAqv4U092I7kUGBfoilfgqBhzdM=)
                          18: 3130332e39382e37332e302f32342d3234203d3e2039363738.roa (hash: iTc2gRx4ebXsP1eOWz4bPAEExZXDn5MuL/PjqBhmxRc=)
                          19: 323430313a393563303a3a2f33322d3332203d3e2039363738.roa (hash: jOtFlREhO9CilnpGChErgEs47lUXhbvvQOV2p/o59ZQ=)
                          20: 3130332e39382e37352e302f32342d3234203d3e2039363738.roa (hash: lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=)
                          21: 3130332e39382e37342e302f32342d3234203d3e2039363738.roa (hash: tNSrK+WNy+KySyf2yQ1NOrkH6iCaaiR2BeXjuVkFzh4=)
                          22: 323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa (hash: U2WVeAZZY+wJAf5675nkBmBhxC/RUJdThWhD5OYfiNQ=)
                          23: 60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl (hash: nd47K9/mQn/e6aEmBlZuAq7IznoTIsJBPpBw0qt/WR0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:bc:1f:f4:b4:5d:e9:76:85:b5:07:60:a3:85:16:45:70:f0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: Jul 23 22:21:51 2026 GMT
            Not After : Jul 24 23:38:51 2026 GMT
        Subject: CN=04407D7B8C4DA9632781DF66428A90AB1702E7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:dc:01:dd:08:05:0a:dc:3c:72:1a:23:af:
                    87:23:c4:de:9e:32:f9:fa:28:9e:1b:6b:d2:34:b2:
                    d0:1a:34:2f:7c:a9:6e:f6:0f:e0:1a:d4:90:ef:58:
                    3e:05:a6:11:c8:3d:99:95:95:19:67:29:3d:a8:49:
                    e9:96:7d:93:a4:78:79:e6:5d:54:35:64:47:5c:8c:
                    fa:ff:a6:c5:1d:0b:49:85:35:08:ba:84:7c:ec:ba:
                    91:54:65:b1:18:ba:3a:43:f7:4a:fe:65:8f:81:0d:
                    7c:2f:3e:3b:2e:e8:69:b2:9c:26:15:19:dc:92:7f:
                    c3:31:5f:ca:7a:39:4a:10:bc:03:42:7e:a1:84:7c:
                    9b:87:95:9a:67:c5:ba:e1:af:a5:4a:37:33:6c:4a:
                    c1:cc:61:09:63:92:77:6d:be:24:51:25:0a:ef:52:
                    11:0c:16:fc:4f:fc:e3:84:13:3e:41:23:25:d9:8b:
                    e7:75:cd:28:7e:b8:b8:bc:f0:7e:bc:79:10:02:fe:
                    03:df:19:f1:9c:81:13:86:0d:fb:b1:80:ba:d8:aa:
                    3b:eb:45:03:48:9a:6f:7e:6d:c1:ee:72:5a:76:73:
                    da:d0:ec:e0:f3:bf:91:e8:44:62:47:80:3b:c1:f9:
                    3e:0f:a9:43:f5:f4:ce:d9:49:3c:29:d7:70:c0:d9:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:40:7D:7B:8C:4D:A9:63:27:81:DF:66:42:8A:90:AB:17:02:E7:CC
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:e9:bd:76:a7:aa:ec:9d:ef:61:0b:33:b3:41:34:05:b2:
         d8:9b:b9:04:5e:26:75:5e:44:e1:78:eb:61:dc:37:1a:6d:15:
         4b:02:a7:2c:74:99:41:14:49:56:5b:fb:6a:f6:93:37:f0:27:
         82:e7:5a:5a:f3:b7:3e:43:d5:78:63:55:ce:d7:61:6e:b9:55:
         a7:cc:45:9b:2b:2f:2e:38:6e:d1:d4:13:2a:b6:98:c7:ea:13:
         e8:8e:a4:57:0c:7d:e8:92:70:f2:47:00:02:4c:e0:da:a0:bc:
         5d:5b:d1:ba:1c:ba:11:47:d7:e6:4d:e5:9a:d0:de:eb:56:65:
         5a:6f:8f:5c:b5:f6:6e:af:5f:89:6b:4c:d9:bb:cf:db:49:01:
         46:b0:3e:2f:0f:fa:2f:1a:40:e1:84:8f:e8:9d:01:0b:8d:0c:
         c0:5b:68:95:87:99:62:18:ef:88:3d:60:e4:d6:f0:9d:ed:97:
         6c:d9:8a:c2:de:7f:cf:05:56:57:61:2c:00:84:c1:7f:37:55:
         91:48:5f:fa:4a:4e:ac:c6:a8:5b:e0:91:51:0f:c9:39:23:e2:
         a6:86:05:ef:01:2f:e6:70:8f:57:90:2b:2d:cf:13:df:5e:de:
         a6:ff:d5:19:98:2d:c0:ed:16:b7:54:88:3f:f1:67:9f:8c:e2:
         86:4c:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:20 2026 by rpki-client