Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          dyPQiqN5tpAchRmhWnVhkr6zvivHNJ9NGZkYZxXhwgM=
Subject key identifier:   14:E5:BF:9F:48:4C:5E:AF:12:97:02:05:DB:41:14:7F:34:5B:F8:64
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       6604B09C38809B024DBABF8782D500DFA59B0782
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0157
Signing time:             Tue 12 May 2026 01:49:13 +0000
Manifest this update:     Tue 12 May 2026 01:44:13 +0000
Manifest next update:     Wed 13 May 2026 03:08:13 +0000
Files and hashes:         1: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          2: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          3: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          4: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          5: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          6: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          7: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          8: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: 2NWLKzqpL+4uPfJ4VpXGdEceL0JQUgEeiFyZZEiUiqU=)
                          9: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          10: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          11: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          12: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          13: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          14: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          15: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          16: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          17: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          18: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          19: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          20: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          21: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          22: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          23: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          24: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:04:b0:9c:38:80:9b:02:4d:ba:bf:87:82:d5:00:df:a5:9b:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: May 12 01:44:13 2026 GMT
            Not After : May 13 03:08:13 2026 GMT
        Subject: CN=14E5BF9F484C5EAF12970205DB41147F345BF864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:98:33:f8:4d:d2:82:86:bf:81:8d:c6:56:
                    82:56:5d:39:fd:50:62:55:e4:68:de:f6:bc:06:73:
                    4b:84:d4:c8:ff:7a:15:50:9b:b2:86:bf:78:9b:91:
                    ec:33:b6:13:bc:8e:a8:fb:e0:e1:d8:05:e6:d6:74:
                    1f:24:c5:aa:1b:8c:2b:ab:87:57:dd:a8:ea:80:4e:
                    4d:bf:6b:58:64:dd:1c:7e:6d:fe:49:27:fd:93:69:
                    bd:4f:a2:65:0a:95:c5:3f:25:ff:08:bc:49:be:86:
                    36:a3:d0:5d:d6:1a:8a:42:41:83:19:bf:3c:50:a1:
                    7e:28:1f:50:4e:bb:49:70:de:a7:37:a9:3c:dd:24:
                    82:71:0e:38:76:4e:7d:80:ed:fb:dc:0f:8b:65:18:
                    b0:0d:70:9c:99:3e:72:a1:92:6e:ee:90:d5:50:c1:
                    96:a7:eb:ff:64:12:72:73:e3:00:4e:ae:a2:a2:e2:
                    94:e5:6e:2c:28:4a:4f:dc:8f:66:4d:c2:25:e9:b8:
                    5b:14:df:99:0e:5f:3d:4a:f2:b8:4c:1b:54:eb:ae:
                    40:7e:41:e3:bc:2a:73:f0:28:36:03:a3:8c:d5:12:
                    40:34:17:fe:09:67:d7:22:58:a5:8b:b9:fb:56:5e:
                    c5:7f:f2:04:d6:de:d3:2d:98:71:0b:d9:5e:e5:56:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:BF:9F:48:4C:5E:AF:12:97:02:05:DB:41:14:7F:34:5B:F8:64
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:77:f0:53:45:0b:71:af:54:1a:54:c5:c8:1f:e8:d5:7c:
         e9:aa:f0:8e:e4:6f:43:ad:fb:75:42:22:8d:ef:5f:43:c0:bd:
         47:d8:73:5e:b3:d5:c1:73:f7:47:6c:a0:45:a4:53:f9:cb:2a:
         60:3c:d8:39:60:88:88:9a:1f:9e:f0:73:28:15:cd:38:62:93:
         f6:85:7d:12:e4:74:a7:a5:8d:d3:ea:e7:e2:31:49:f8:bc:6a:
         ce:2f:fc:7d:6e:e4:e6:47:41:4a:db:d5:0b:16:60:e1:0d:b0:
         b0:a6:a6:6d:74:49:b2:ac:dc:0c:0c:db:94:2e:7a:e3:e2:24:
         a9:a0:70:49:83:53:45:33:d1:eb:58:d7:07:54:8d:58:7f:21:
         4d:91:9d:53:51:35:a0:11:ac:ec:4d:26:4e:32:ff:7f:ee:08:
         c3:c0:1b:18:d6:0c:23:3a:db:42:0b:ca:c7:de:5f:ac:58:e5:
         7c:59:34:90:a9:eb:0e:d0:c8:b2:28:dc:85:45:76:56:af:75:
         b3:52:59:11:98:f2:a9:b4:93:2c:e7:ce:28:4a:fc:7d:6d:7d:
         08:98:17:c3:7d:94:23:81:bd:55:26:c7:34:e2:63:70:36:d7:
         51:49:f3:10:3a:53:1c:1d:05:b9:1d:dc:00:55:5b:7a:33:1f:
         da:6d:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:03 2026 by rpki-client