Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          +tkl/rmdih1OpFUHS4FAy0iae7fq6wdOP+vZh4wH/do=
Subject key identifier:   D8:F7:76:D8:9A:B8:A1:82:46:8C:22:62:BF:B7:16:54:BF:AA:03:03
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       419BF3F2A37F36B3DB309C00FC2459F7E87FD22C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          020A
Signing time:             Thu 24 Sep 2026 13:30:01 +0000
Manifest this update:     Thu 24 Sep 2026 13:25:01 +0000
Manifest next update:     Fri 25 Sep 2026 15:46:01 +0000
Files and hashes:         1: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          2: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          3: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          4: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: aWQvc0i2QHq+5+TyA373QXRlYqAiVVtdEDUiKY1vcuQ=)
                          5: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          6: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          7: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          8: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          9: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          10: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          11: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          12: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          13: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          14: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          15: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          16: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          17: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          18: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          19: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          20: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          21: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          22: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          23: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          24: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 15:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:f3:f2:a3:7f:36:b3:db:30:9c:00:fc:24:59:f7:e8:7f:d2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Sep 24 13:25:01 2026 GMT
            Not After : Sep 25 15:46:01 2026 GMT
        Subject: CN=D8F776D89AB8A182468C2262BFB71654BFAA0303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:9b:e7:8b:9f:26:87:24:52:e9:e5:72:76:
                    2a:e5:90:67:fb:ba:4d:0b:0d:8b:3e:41:4b:6f:eb:
                    24:66:47:da:a7:7d:c2:f7:fe:87:f8:1a:48:bd:8e:
                    ba:3f:1f:f4:92:f7:e5:ee:3a:10:56:34:82:3b:8d:
                    19:22:81:ef:2e:f2:ab:e6:f2:48:41:5e:3a:43:34:
                    bd:b0:fc:79:42:5a:98:e5:e3:1e:b4:86:13:6c:7c:
                    ed:ce:aa:30:83:b9:ab:76:fd:23:5e:a8:25:88:bd:
                    54:cd:0a:2f:82:38:5e:e8:40:b7:13:19:cd:51:80:
                    db:25:19:34:6e:06:5c:9b:4f:84:db:4c:27:97:30:
                    a6:d0:74:3a:bf:7a:b4:57:29:bc:ed:6d:67:36:03:
                    86:ef:11:bb:44:e6:fa:cd:0b:aa:18:2e:65:e6:b7:
                    23:c7:0b:cb:0b:71:e2:d4:3e:79:c4:10:73:16:a4:
                    30:2b:5e:84:d1:fb:ab:11:45:8b:12:0d:36:12:d2:
                    c6:b6:b7:eb:ff:23:bd:3d:a8:32:99:18:34:14:1a:
                    41:52:8c:13:b8:21:fc:c0:6f:2a:06:0c:45:a8:92:
                    71:79:21:c4:67:17:41:8e:fb:71:3f:4d:d3:9d:b8:
                    07:aa:19:0a:d8:dc:a8:2c:3f:43:2e:e3:c3:c2:f7:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:76:D8:9A:B8:A1:82:46:8C:22:62:BF:B7:16:54:BF:AA:03:03
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:f8:57:e7:8c:ac:47:3f:60:00:a4:8a:8e:8b:d1:41:d9:
         c1:78:9e:85:b2:1d:bb:b3:04:2c:49:43:96:43:70:87:67:fc:
         3b:f5:eb:a8:42:c0:5c:d2:97:56:53:98:36:20:e4:ac:06:92:
         45:18:55:76:23:ac:cb:4a:23:3d:54:d6:fe:5e:00:f5:7b:d4:
         4b:66:d3:85:f8:4f:d2:41:ed:dd:d8:65:ef:ab:ef:c2:9a:6d:
         f3:6f:bf:e9:7c:6b:68:2e:8e:88:77:ec:62:37:82:e2:4b:36:
         9d:1c:33:fd:56:1e:cb:87:90:76:76:93:4c:a8:56:ef:ef:2a:
         13:7a:d3:dd:58:65:28:c2:0b:95:22:91:30:ed:49:4d:31:89:
         63:c3:fa:52:19:2a:47:79:08:50:89:e1:3c:3b:0e:b9:12:11:
         1d:4b:d3:9d:3e:5c:a6:74:3f:01:ab:2e:aa:33:4c:f3:2e:ed:
         8f:e5:4b:6f:8d:50:8c:e2:b6:6c:17:7d:e8:b2:91:d7:c5:49:
         89:54:b6:13:e7:f8:5c:9e:d4:b3:5f:3e:e8:38:c7:63:ca:ee:
         c5:56:ec:87:02:68:b6:00:ab:96:b6:f0:18:67:e2:f9:2f:ba:
         3a:92:ab:97:dd:08:0c:a4:e0:40:c9:7e:4b:22:a6:b4:53:f6:
         4d:e0:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:11 2026 by rpki-client