Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.mft
File:                     C9344D91C44393B40199B4B00937C6B93307F779.mft (raw, json)
Hash identifier:          YtfwA4Q0ZjZsOyWJwZrT69JPacwE7tYxLcpkauVWXGU=
Subject key identifier:   05:A4:CE:7A:A3:B5:B6:64:C8:1E:E4:B9:F1:70:05:0B:B4:34:25:60
Authority key identifier: C9:34:4D:91:C4:43:93:B4:01:99:B4:B0:09:37:C6:B9:33:07:F7:79
Certificate issuer:       /CN=C9344D91C44393B40199B4B00937C6B93307F779
Certificate serial:       66D4DC12FA6AEFCEA11B3C685FFCDABF1EA5E33C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 17:41:20 +0000
Manifest this update:     Thu 23 Jul 2026 17:36:20 +0000
Manifest next update:     Fri 24 Jul 2026 20:40:20 +0000
Files and hashes:         1: 323430313a653761303a3a2f33322d3438203d3e20313331363435.roa (hash: 2UpQjqbEx+nTs1KYPfhTco5SLp3cVljmGO+6p9IUpPM=)
                          2: C9344D91C44393B40199B4B00937C6B93307F779.crl (hash: eMl5intx3Kq6uiwI5Ukf4iMq4DfXy6CmorWmaOhOmbY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.crl
                          rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d4:dc:12:fa:6a:ef:ce:a1:1b:3c:68:5f:fc:da:bf:1e:a5:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9344D91C44393B40199B4B00937C6B93307F779
        Validity
            Not Before: Jul 23 17:36:20 2026 GMT
            Not After : Jul 24 20:40:20 2026 GMT
        Subject: CN=05A4CE7AA3B5B664C81EE4B9F170050BB4342560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:6a:6f:77:72:49:b8:dc:27:d4:06:54:0b:
                    c8:74:83:0a:c6:b4:3b:f1:39:a5:04:a2:6e:dd:65:
                    38:d4:83:34:24:5d:5a:02:82:5d:99:69:90:94:9a:
                    65:84:1c:c1:36:dd:ea:97:41:dc:dc:ba:34:96:9e:
                    3e:49:c8:a3:d1:cc:30:b3:2a:13:0c:1c:c4:59:53:
                    2c:32:e0:c7:a8:84:95:e4:b4:fd:cd:1d:45:1c:19:
                    f6:a9:90:52:79:63:59:d9:7b:dd:49:e1:c9:6b:36:
                    20:e9:a0:df:81:bd:2a:0c:30:28:40:95:ab:b7:9c:
                    94:d6:92:33:42:99:e1:0c:3c:9d:b3:57:b3:3c:53:
                    69:0d:d5:2c:0a:4b:df:91:4e:74:92:86:03:b6:78:
                    4d:6d:d5:9d:8c:42:6c:53:d8:15:b6:4f:ec:38:db:
                    68:86:33:d2:ec:15:34:d3:62:af:26:8e:6e:ec:4c:
                    53:ad:88:81:93:b6:87:d0:90:77:37:c2:73:01:d1:
                    e3:34:a5:35:02:72:ec:0e:99:7d:23:f7:ac:d6:a1:
                    cd:c6:85:28:3f:14:21:a4:72:16:19:a7:0f:41:d1:
                    f2:bf:e5:46:d6:0e:25:76:72:a4:63:3f:41:70:20:
                    3d:69:3e:d4:bd:ed:41:4c:c6:25:b3:80:a0:d7:b8:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:CE:7A:A3:B5:B6:64:C8:1E:E4:B9:F1:70:05:0B:B4:34:25:60
            X509v3 Authority Key Identifier:
                keyid:C9:34:4D:91:C4:43:93:B4:01:99:B4:B0:09:37:C6:B9:33:07:F7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:30:a2:01:d0:96:0b:30:22:d3:19:f0:0f:c8:0e:ed:80:
         38:ae:55:ab:c9:f5:65:67:71:16:67:be:63:59:2a:56:de:48:
         5b:c4:ea:34:2a:b6:52:4a:4b:0e:46:5d:b0:47:28:77:bb:35:
         f8:f9:ac:40:0f:53:c1:ed:3f:97:86:76:56:85:e6:8e:a0:26:
         bb:66:33:74:c5:e0:56:91:8c:32:f0:ee:cf:14:7b:2c:e2:a3:
         15:2c:2f:c5:63:c2:38:63:f8:f2:ca:86:a0:36:de:28:15:c0:
         50:42:09:ac:80:7e:91:0e:33:80:9b:fb:52:0d:4f:ce:cc:6f:
         95:1e:ba:fd:fb:9d:96:9b:02:95:90:c9:68:4a:03:58:5f:34:
         a6:fa:33:29:24:8d:88:53:07:ea:40:f1:c1:5c:52:df:e3:ee:
         0e:12:72:71:f7:d1:87:67:c8:4e:ed:99:e9:38:eb:91:fc:ee:
         ea:c2:b2:56:a1:04:0b:5f:36:fb:11:0f:f2:d3:8f:33:90:4f:
         79:48:50:f2:49:76:01:8c:1e:a6:17:fe:e3:30:e7:ba:48:fc:
         67:0d:ce:63:d4:a4:14:14:72:7e:6d:2e:23:84:9d:b9:8f:58:
         94:49:86:50:15:03:d3:5b:60:7c:7c:dc:b7:a0:52:7f:3d:a4:
         1d:88:76:48
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUZtTcEvpq786hGzxoX/zavx6l4zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkzNDREOTFDNDQzOTNCNDAxOTlCNEIwMDkzN0M2Qjkz
MzA3Rjc3OTAeFw0yNjA3MjMxNzM2MjBaFw0yNjA3MjQyMDQwMjBaMDMxMTAvBgNV
BAMTKDA1QTRDRTdBQTNCNUI2NjRDODFFRTRCOUYxNzAwNTBCQjQzNDI1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConGpvd3JJuNwn1AZUC8h0gwrG
tDvxOaUEom7dZTjUgzQkXVoCgl2ZaZCUmmWEHME23eqXQdzcujSWnj5JyKPRzDCz
KhMMHMRZUywy4MeohJXktP3NHUUcGfapkFJ5Y1nZe91J4clrNiDpoN+BvSoMMChA
lau3nJTWkjNCmeEMPJ2zV7M8U2kN1SwKS9+RTnSShgO2eE1t1Z2MQmxT2BW2T+w4
22iGM9LsFTTTYq8mjm7sTFOtiIGTtofQkHc3wnMB0eM0pTUCcuwOmX0j96zWoc3G
hSg/FCGkchYZpw9B0fK/5UbWDiV2cqRjP0FwID1pPtS97UFMxiWzgKDXuEm1AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUBaTOeqO1tmTIHuS58XAFC7Q0JWAwHwYDVR0j
BBgwFoAUyTRNkcRDk7QBmbSwCTfGuTMH93kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8w
L0M5MzQ0RDkxQzQ0MzkzQjQwMTk5QjRCMDA5MzdDNkI5MzMwN0Y3NzkuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQzkzNDREOTFDNDQzOTNCNDAxOTlCNEIwMDkzN0M2
QjkzMzA3Rjc3OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMC9DOTM0NEQ5MUM0NDM5M0I0
MDE5OUI0QjAwOTM3QzZCOTMzMDdGNzc5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCIwogHQlgswItMZ
8A/IDu2AOK5Vq8n1ZWdxFme+Y1kqVt5IW8TqNCq2UkpLDkZdsEcod7s1+PmsQA9T
we0/l4Z2VoXmjqAmu2YzdMXgVpGMMvDuzxR7LOKjFSwvxWPCOGP48sqGoDbeKBXA
UEIJrIB+kQ4zgJv7Ug1PzsxvlR66/fudlpsClZDJaEoDWF80pvozKSSNiFMH6kDx
wVxS3+PuDhJycffRh2fITu2Z6Tjrkfzu6sKyVqEEC182+xEP8tOPM5BPeUhQ8kl2
AYwephf+4zDnukj8Zw3OY9SkFBRyfm0uI4SduY9YlEmGUBUD01tgfHzct6BSfz2k
HYh2SA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:40 2026 by rpki-client