Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          jic18Aepj3WFP4ONsRUfMyWmo3JZ+bAMDL0efS25Gfo=
Subject key identifier:   1C:0B:8D:A2:49:FA:CD:AF:A6:1F:8F:06:A9:78:24:81:FE:FC:4D:5D
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       72E9DAD5313A9290953DC176347DC693BCE45B42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0208
Signing time:             Tue 22 Sep 2026 23:20:55 +0000
Manifest this update:     Tue 22 Sep 2026 23:15:55 +0000
Manifest next update:     Thu 24 Sep 2026 02:13:55 +0000
Files and hashes:         1: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          2: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          3: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          4: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          5: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          6: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          7: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          8: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          9: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          10: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          11: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          12: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          13: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          14: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          15: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          16: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: 9cHfqHXUwh/Zn1BPPw8s74RYPaAusvKYbeMxnPzE8u4=)
                          17: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          18: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          19: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          20: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          21: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          22: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          23: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          24: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e9:da:d5:31:3a:92:90:95:3d:c1:76:34:7d:c6:93:bc:e4:5b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Sep 22 23:15:55 2026 GMT
            Not After : Sep 24 02:13:55 2026 GMT
        Subject: CN=1C0B8DA249FACDAFA61F8F06A9782481FEFC4D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:d8:2d:be:bc:87:16:d2:0d:f2:f6:a1:da:
                    fd:d7:d7:be:17:f6:c6:f8:2a:51:ac:70:b7:e6:2a:
                    f3:f7:02:f1:f8:c9:cb:53:01:47:ee:02:af:fd:a4:
                    57:19:b0:4e:7a:4b:03:62:e0:32:ff:9e:72:95:e1:
                    3e:db:7b:a1:ce:a0:0d:c8:64:ee:cc:c5:f3:3c:2f:
                    cc:38:00:0c:55:87:9a:e9:a1:13:6a:72:1c:09:f3:
                    45:3e:81:37:43:b0:11:a8:ad:ae:fd:23:7f:c2:f5:
                    dc:e9:df:1c:51:e2:f3:6e:2a:0b:21:02:1f:23:c2:
                    59:08:e8:79:82:e4:34:8c:e2:68:74:d5:a6:df:1b:
                    1a:d8:2a:a1:7c:be:4c:35:a5:ca:82:3e:50:be:da:
                    25:36:c0:d3:ab:8e:ba:1d:d3:81:46:df:bb:fc:f8:
                    9b:8a:b2:72:7e:00:37:e7:42:bc:bb:8e:9b:06:bc:
                    b3:5e:e1:f6:87:02:33:e5:d0:cb:17:ee:cd:cb:de:
                    ae:b6:a1:92:24:e3:a2:9d:e8:d9:8f:54:a5:7d:2d:
                    98:3e:10:21:5d:33:07:c3:98:b9:62:25:91:ad:84:
                    21:bc:d1:a5:4f:84:c5:07:a3:51:b9:48:4e:7f:7d:
                    3f:fb:34:39:96:c6:53:a4:d2:8b:bb:b7:5c:17:97:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0B:8D:A2:49:FA:CD:AF:A6:1F:8F:06:A9:78:24:81:FE:FC:4D:5D
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:ad:41:37:63:fc:da:87:32:d1:6a:9c:f8:53:66:77:cd:
         3e:c4:0c:53:48:af:63:21:0a:58:ac:82:3b:f3:69:1e:ed:ac:
         ca:57:47:48:72:b1:b7:93:5b:f1:d1:50:8f:26:33:66:ea:8b:
         fb:b0:25:9e:4f:51:a3:c3:4d:80:a5:f8:cd:66:95:28:d6:3f:
         b7:79:0b:fd:f7:6e:5c:d3:87:c1:38:93:dc:83:2b:41:3e:e0:
         07:c1:77:21:c2:c1:46:e2:ea:56:80:d4:ca:b9:ee:8d:4b:fa:
         66:7c:68:5a:ab:2b:55:3f:05:e3:2b:b4:5f:b7:56:ef:b8:b9:
         b7:28:2e:d0:57:10:7b:51:af:43:22:2c:81:dd:2c:e6:3f:61:
         3f:e6:20:4c:85:d4:8c:38:13:91:3e:91:1f:77:30:e6:6e:d4:
         98:89:5a:f8:2c:56:b3:0a:c7:3e:a1:f1:f8:e9:25:53:a1:11:
         d8:83:70:00:36:e0:27:f9:f4:ff:00:37:ad:36:2f:5d:dc:16:
         f0:01:84:88:24:66:61:09:06:72:99:16:33:22:a5:77:13:59:
         90:85:fc:00:46:f0:2e:26:80:e8:67:1b:e0:a9:43:30:50:94:
         fc:de:90:39:ba:37:88:62:f5:a5:f8:46:aa:8a:e8:a7:d6:01:
         ca:f3:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:07 2026 by rpki-client