Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          gwbVFIGuFxj+vrNjnhQss7QjrBuvdHzCwkKIFNatU5E=
Subject key identifier:   B8:0F:D3:9C:89:87:2D:67:E5:1F:5A:3C:95:80:AD:EE:A3:FD:7B:0F
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       6621FE50397D6553ECC675174635DCBB726D2052
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          C5
Signing time:             Fri 25 Sep 2026 04:46:39 +0000
Manifest this update:     Fri 25 Sep 2026 04:41:39 +0000
Manifest next update:     Sat 26 Sep 2026 08:32:39 +0000
Files and hashes:         1: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          2: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
                          3: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
                          4: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          5: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          6: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          7: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          8: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          9: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          10: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
                          11: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: pn5KY0OLi+/nDsCDrC7UjFp9rVSgxJOeq78aFNe7bDo=)
                          12: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          13: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
                          14: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          15: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 08:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:21:fe:50:39:7d:65:53:ec:c6:75:17:46:35:dc:bb:72:6d:20:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: Sep 25 04:41:39 2026 GMT
            Not After : Sep 26 08:32:39 2026 GMT
        Subject: CN=B80FD39C89872D67E51F5A3C9580ADEEA3FD7B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:91:cb:8f:ca:21:5b:38:fa:ba:94:1f:b8:
                    da:83:d6:02:a1:c6:80:b6:d1:0d:f1:5e:f2:66:61:
                    7e:90:f8:f2:37:63:21:9b:f4:ea:6c:c1:f1:02:86:
                    92:f8:f5:1c:ba:1c:7f:a2:29:ab:80:25:fd:0d:72:
                    38:67:51:dc:e6:3d:c0:51:50:bd:27:93:85:af:cc:
                    f1:f9:17:4e:e9:d8:c3:18:62:a4:83:41:04:bc:95:
                    35:a7:9a:c4:94:15:3d:8c:2c:9b:bd:de:df:93:33:
                    49:a1:22:ea:e3:9a:85:a2:ae:02:68:74:eb:6b:d6:
                    cf:4f:3c:89:a7:37:87:c1:fe:f8:f3:3e:be:c5:9f:
                    5d:e5:73:ad:5d:2b:09:f4:16:b5:a4:31:db:44:19:
                    7d:80:41:21:78:c2:2b:5f:aa:ac:de:e9:84:59:49:
                    ad:60:3c:df:8d:e6:76:39:3d:b0:1e:67:62:bc:a0:
                    46:2e:5c:c6:7f:0a:64:d8:fb:2a:a1:0b:fe:08:c5:
                    9e:7b:80:a5:74:32:9c:cb:d8:6c:6f:7b:6b:bb:b4:
                    87:97:d9:2a:91:01:11:53:ad:bc:b4:91:75:e4:27:
                    ff:79:fd:c1:3f:88:83:06:ad:29:c1:5f:49:03:a8:
                    d1:9c:08:bd:aa:e1:72:41:0b:05:18:61:4c:8f:f1:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:D3:9C:89:87:2D:67:E5:1F:5A:3C:95:80:AD:EE:A3:FD:7B:0F
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:83:d9:0a:9e:fa:3c:fb:de:fd:6b:84:bf:d7:93:c2:59:
         3d:f4:55:cd:c1:66:00:f1:ad:47:cf:21:f5:fb:e6:1f:2d:73:
         dd:16:df:00:97:19:cd:c6:87:62:39:db:67:2b:42:f6:54:e0:
         39:76:29:c5:36:9a:b0:29:0f:6e:0b:cf:be:d2:26:3f:0d:61:
         a9:f3:60:09:10:36:f1:a3:bb:b7:a6:c2:16:65:9d:87:79:16:
         d6:b6:d1:93:8d:cd:a9:db:15:f6:72:67:eb:ef:95:3b:87:8f:
         83:04:2a:91:e6:a8:8e:6e:ec:87:a5:a1:f8:45:fa:c5:17:2c:
         98:9a:69:3e:ed:b7:32:d4:da:a3:0c:07:4f:d7:7c:89:2e:cb:
         46:71:87:96:c1:4f:b4:bd:90:74:76:e7:8a:66:f8:17:bd:04:
         82:29:03:ae:0e:f7:17:52:1e:2f:9e:6f:b0:e8:9d:39:30:41:
         1d:94:ee:74:39:1f:17:4d:74:2e:8b:f0:87:7d:99:4e:80:b7:
         85:b1:29:d7:92:90:2c:7e:99:69:22:05:7f:c2:b9:8e:c2:60:
         25:8d:e1:3f:2b:27:6b:83:49:ca:14:e3:96:34:42:65:7b:97:
         8c:38:37:89:8a:e8:b9:c3:a8:e1:20:04:bb:2f:bc:df:a9:0f:
         fd:8c:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:25 2026 by rpki-client