Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          sc5A2qLl9J/Y9flNd0rNaFAxO7A93kk5w/wu4xcEFRE=
Subject key identifier:   A5:6B:97:DC:17:18:3C:9F:0A:58:CF:B5:A2:5C:25:FF:9E:31:27:90
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       6C562A5989FF101B7E8D6E149433B9957F1605B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 16:33:14 +0000
Manifest this update:     Thu 23 Jul 2026 16:28:14 +0000
Manifest next update:     Fri 24 Jul 2026 16:42:14 +0000
Files and hashes:         1: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          2: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          3: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          4: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
                          5: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          6: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
                          7: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          8: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: aDvx4aC8p8UoNzT7+RwXBeP5m2hAJARmGZQxuAg0IxA=)
                          9: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          10: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
                          11: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
                          12: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          13: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          14: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          15: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:56:2a:59:89:ff:10:1b:7e:8d:6e:14:94:33:b9:95:7f:16:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: Jul 23 16:28:14 2026 GMT
            Not After : Jul 24 16:42:14 2026 GMT
        Subject: CN=A56B97DC17183C9F0A58CFB5A25C25FF9E312790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:ce:d2:98:a9:c9:92:11:04:48:d5:c6:cc:
                    0b:76:cb:26:4b:0a:6c:9e:15:5d:e5:6d:a4:25:36:
                    33:60:e6:57:9d:4d:11:77:c4:aa:35:bc:30:71:70:
                    5e:90:68:6c:e3:a8:e2:80:0f:c5:88:24:6d:cb:6b:
                    0d:77:f1:92:7e:d0:6e:f5:8a:bb:da:32:6b:d9:20:
                    c5:39:77:06:d7:f0:78:6d:1c:fd:c6:d7:6e:11:66:
                    2d:50:1c:55:8c:8a:5f:9f:b2:a5:16:06:db:74:e6:
                    c6:3c:46:ec:ee:5b:b7:6d:91:6c:08:86:f7:f5:e9:
                    59:76:06:e3:76:ae:df:17:f4:88:7f:d2:fb:ea:5d:
                    8c:18:ee:fa:29:21:8a:7b:ec:33:21:71:a0:b2:d3:
                    f1:13:6a:c0:0d:f7:fd:69:8b:71:9e:bb:73:ea:bf:
                    f2:84:0c:c3:bc:b5:ee:ae:7f:d9:c8:03:d2:81:3f:
                    26:ea:77:7e:d0:88:d3:0f:6f:e9:ac:1f:29:d8:ae:
                    22:01:fc:e5:51:3d:ba:56:9f:2e:10:8f:50:72:63:
                    06:7b:3d:8c:b2:85:da:ca:2b:af:c0:7a:84:49:8e:
                    32:df:43:41:ee:80:16:fd:4d:2d:8f:80:b2:18:9a:
                    e5:6f:46:b8:41:d3:a0:8e:99:ab:48:f3:12:e2:55:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:97:DC:17:18:3C:9F:0A:58:CF:B5:A2:5C:25:FF:9E:31:27:90
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:16:ce:55:f2:24:39:5c:07:4d:3f:4f:2b:00:cb:e1:71:
         8e:6d:f4:23:8e:2d:bc:dc:f8:2d:7a:c4:32:7f:4c:eb:01:5e:
         f8:d2:7e:4a:7f:ee:4c:b2:9d:a5:f1:f7:b2:7b:95:a9:4a:9a:
         45:18:8d:31:f8:df:15:de:04:c6:ae:e0:35:82:59:d4:90:c7:
         46:2b:3c:9b:a7:68:3a:87:61:00:dd:cb:c0:3d:63:df:ec:c6:
         bc:4d:2d:e9:b9:a8:03:78:4b:f7:28:31:97:8f:16:cf:a3:ec:
         fc:de:aa:c1:af:34:1d:dc:ea:32:50:33:6e:b8:77:84:82:8c:
         9c:8d:c9:01:1d:4f:f4:d6:fc:0a:bf:c4:64:9e:23:9b:b7:ce:
         a5:71:1c:82:87:34:f4:e1:d8:56:81:f8:da:1c:e7:cc:4f:d2:
         94:2b:2d:c8:46:35:3b:bc:62:8e:cf:ee:65:b8:aa:18:b4:da:
         f8:13:d2:49:e1:cb:b0:44:54:27:a1:15:ac:29:1f:88:07:11:
         93:58:c6:a5:43:f1:18:fe:64:cd:48:ba:61:24:0e:42:01:4e:
         07:a8:42:35:a5:39:d3:2a:61:98:09:0d:26:b4:f9:ea:73:43:
         ae:4c:e0:b8:6c:31:54:8a:6a:38:90:86:9c:3d:2a:3c:98:26:
         6b:5f:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:04 2026 by rpki-client