Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier:          Iz6fLcwkVZ4eaq6EWRNnJ8M42vKnwzKmhFY3oGkfFy4=
Subject key identifier:   F8:C7:01:EB:29:A6:AB:39:D4:92:CB:0C:71:F2:EE:55:55:34:FC:D6
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       18AE0F0EAF13252A97A329997B9DF62C80709ADF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 02:04:00 +0000
Manifest this update:     Fri 24 Jul 2026 01:59:00 +0000
Manifest next update:     Sat 25 Jul 2026 04:11:00 +0000
Files and hashes:         1: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
                          2: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: EI2Y6Lqbexnt1b5IvP/PFBwGhSNG+pi9TecVnpVAZYA=)
                          3: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
                          4: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
                          5: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
                          6: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
                          7: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
                          8: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
                          9: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
                          10: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
                          11: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
                          12: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
                          13: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
                          14: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
                          rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ae:0f:0e:af:13:25:2a:97:a3:29:99:7b:9d:f6:2c:80:70:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: Jul 24 01:59:00 2026 GMT
            Not After : Jul 25 04:11:00 2026 GMT
        Subject: CN=F8C701EB29A6AB39D492CB0C71F2EE555534FCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:59:7f:b2:3f:d7:c9:5f:73:37:4c:3f:16:
                    78:2a:76:9f:d6:dc:d0:e8:c8:5f:66:47:a9:51:20:
                    72:ac:74:5d:11:d8:b6:a2:c2:38:9e:f3:63:0c:dd:
                    dc:18:02:d3:2d:bc:38:1d:43:a8:f7:08:9f:0a:dc:
                    b0:fc:a0:b5:70:1f:cb:90:d8:18:70:f1:d2:b9:6d:
                    b6:05:00:51:09:df:b1:d0:70:68:b8:5e:a8:d0:d9:
                    4b:4f:a2:27:84:59:dc:9c:cc:93:86:c1:a6:24:2b:
                    ce:5f:7a:7a:19:30:4d:0e:9f:63:65:9a:2c:33:03:
                    21:3e:ef:7c:58:fd:90:36:27:37:4b:47:28:76:f4:
                    06:d6:fb:4c:74:d0:b3:f9:2e:a0:e8:30:06:2b:1b:
                    38:c3:87:a7:ae:0a:81:39:95:83:03:80:b7:a3:ba:
                    f9:f9:fc:3f:38:cb:4e:6b:d2:30:54:68:d0:1b:b7:
                    f4:3e:fa:8c:e3:24:03:24:a8:05:8f:2d:bb:9c:7d:
                    31:b1:16:77:6b:3b:26:5b:ce:37:ee:60:7e:45:bd:
                    dd:1b:58:07:22:e0:30:10:5a:e6:b5:de:cd:ac:52:
                    fb:86:30:a8:e6:72:35:f4:e4:70:b2:dd:76:d2:83:
                    2b:43:cd:36:44:6a:64:c0:97:7a:f1:b2:1f:c4:64:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C7:01:EB:29:A6:AB:39:D4:92:CB:0C:71:F2:EE:55:55:34:FC:D6
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:37:2d:c3:02:a5:ee:ab:a2:10:6a:10:cd:20:09:af:a6:d0:
         a6:40:51:2a:00:e7:67:e6:93:72:89:9d:27:2b:55:2b:9d:b8:
         8d:dd:f5:9b:00:2d:f8:08:88:c3:28:94:a5:cd:6b:b6:33:6a:
         46:ec:0d:1a:a4:f0:10:25:00:a0:34:03:e4:6e:fd:78:33:df:
         a7:04:43:dd:b9:21:da:10:07:12:2a:1d:ce:df:0c:80:ec:30:
         a0:37:a9:25:59:40:e8:8d:a6:21:d3:e8:1d:7e:6a:4d:a9:f5:
         a5:f6:ed:76:1b:d6:15:28:35:6b:ed:53:5d:71:a3:dd:7c:6a:
         86:30:9c:b8:74:2c:89:ce:63:10:8a:5c:b5:dd:d6:a2:a3:5c:
         5c:90:fd:d5:16:91:35:ee:17:a4:65:87:5c:d4:31:ab:d4:46:
         a0:d7:6a:79:06:29:47:93:a4:68:10:11:b9:d3:f3:aa:fe:95:
         4f:f0:44:ca:2a:0b:64:14:dd:a2:39:2e:14:22:0c:a9:b0:03:
         50:ae:e5:b7:ac:72:f3:65:41:a0:12:79:e6:5f:98:c3:a2:0e:
         cb:f7:75:03:ab:a2:59:97:21:61:54:61:73:2b:f7:0b:7c:a0:
         fb:15:73:6f:57:18:31:5b:a0:9b:db:c2:a5:40:d7:11:b4:18:
         12:f8:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:57 2026 by rpki-client