Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          IaO9QJzxhJNFT5shA0kILD7jV/11OaK3ioVMqnL9u9M=
Subject key identifier:   22:55:7C:71:13:48:A5:0B:5E:26:4D:2E:DD:56:77:56:46:25:5E:6E
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       44C2ECF46C3F8AF588662EDDFD2DF44AA3EB3D62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          01B7
Signing time:             Thu 23 Jul 2026 20:21:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:16:40 +0000
Manifest next update:     Fri 24 Jul 2026 23:31:40 +0000
Files and hashes:         1: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          2: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          3: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          4: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          5: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          6: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          7: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          8: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          9: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          10: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          11: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          12: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          13: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          14: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          15: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          16: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          17: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          18: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          19: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: 6976fYpAMquIWWj+GAxXdvtUrsrqVawk9x6iK2GZjuM=)
                          20: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          21: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          22: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          23: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          24: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:ec:f4:6c:3f:8a:f5:88:66:2e:dd:fd:2d:f4:4a:a3:eb:3d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Jul 23 20:16:40 2026 GMT
            Not After : Jul 24 23:31:40 2026 GMT
        Subject: CN=22557C711348A50B5E264D2EDD56775646255E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:7c:ac:de:ee:b8:dc:6a:c4:fc:ab:ef:96:
                    11:67:a8:8d:39:60:98:1c:d3:17:5e:eb:ad:b1:2c:
                    5b:9c:8c:c5:84:99:e7:1b:5f:c5:be:4c:a7:93:c9:
                    b8:16:c1:6b:4e:83:3f:52:78:d1:75:92:e3:34:8b:
                    bf:a3:77:cc:c2:74:2c:4a:47:03:af:10:6b:c2:28:
                    b9:c3:13:dc:62:46:15:ce:1f:e7:3a:20:6e:dd:35:
                    11:33:64:f6:bb:dd:8b:8a:c4:d0:da:73:ee:45:f8:
                    47:dd:d5:1c:a6:f9:1b:67:b4:31:40:c6:e4:4a:a8:
                    a6:92:94:5c:88:55:cb:03:30:dc:f8:fd:5b:31:e0:
                    6c:d8:a0:9f:34:09:e8:a1:90:06:13:74:e0:18:c7:
                    d4:1a:29:5a:c0:aa:da:e2:29:26:60:31:f3:d5:98:
                    0e:59:b0:95:5f:08:86:a6:39:f6:c7:dd:54:b5:c3:
                    5a:ad:ec:72:96:37:f4:d5:10:3a:77:59:cd:e8:be:
                    cc:8f:79:af:23:df:b5:92:f5:f8:6f:4a:29:9b:3c:
                    d6:ac:8d:0d:d3:a5:5c:5c:6b:cf:bb:6f:a7:42:34:
                    17:55:46:5d:05:30:f4:fa:e6:db:b0:e3:ec:d1:09:
                    f9:63:d9:4f:1b:c6:61:f4:59:d6:5a:c0:61:98:83:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:7C:71:13:48:A5:0B:5E:26:4D:2E:DD:56:77:56:46:25:5E:6E
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:c4:0c:43:72:81:22:71:c1:c6:94:73:f4:68:aa:33:56:
         7b:ca:97:75:af:ed:05:68:38:6e:ae:20:42:23:fd:fd:05:bb:
         4b:b4:9c:8e:7e:f4:10:51:05:d0:8e:cf:7d:60:a7:1c:52:1d:
         74:12:f4:c3:79:9d:e8:8f:96:b7:f3:4a:2f:e1:13:7d:93:c4:
         3f:9a:08:52:58:71:20:2a:9d:89:6c:1d:c9:dc:50:b7:1a:2a:
         a6:e2:79:90:81:11:04:7e:49:1b:c5:8a:7c:1a:80:fe:28:19:
         81:07:3b:28:25:53:8b:3a:4d:e2:4d:be:e7:21:ab:5e:1b:f3:
         4b:23:be:3b:e6:04:69:e2:1e:93:aa:52:b9:a2:cb:68:80:31:
         ae:1d:21:57:6e:53:f7:72:89:0f:91:ef:8c:de:a9:71:78:2e:
         88:ae:2c:fa:96:b8:cd:6f:c4:81:4a:cf:34:9c:c4:9d:4d:63:
         bb:e2:fe:4c:1a:4d:ca:84:f2:20:f6:2d:e2:be:77:a9:c0:d5:
         df:b6:5f:5d:88:86:0f:a1:a9:00:4f:e1:1a:1d:28:db:27:d6:
         0c:4f:07:76:98:81:d8:cc:8e:9e:57:f2:36:fb:ec:5a:95:4f:
         51:8c:79:af:cd:03:e9:17:34:79:c4:06:4d:82:05:d3:fe:de:
         6e:90:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:24 2026 by rpki-client