Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
File:                     B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft (raw, json)
Hash identifier:          Xde4SN7v9DzjOGUmhlazpSFEz3ZnfkmzaAnOm8RCb80=
Subject key identifier:   B5:A9:5A:27:20:44:EB:10:F3:4C:61:0B:D7:77:20:AB:FB:A9:D9:5C
Authority key identifier: B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
Certificate issuer:       /CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
Certificate serial:       56E2FF5CC66D3CC97FF36E49F4F008A04EBFEBC5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 16:56:12 +0000
Manifest this update:     Thu 23 Jul 2026 16:51:12 +0000
Manifest next update:     Fri 24 Jul 2026 17:50:12 +0000
Files and hashes:         1: 3136332e36312e36302e302f32332d3234203d3e20313532363232.roa (hash: fCwyscEgrvjXMp337Q3oR9jgOSuagg7YXLxdjlpei1s=)
                          2: B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl (hash: 4kuhRG8amsVIIYZnH20gxClg1EXcugbp3JyQczH7vVo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl
                          rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:ff:5c:c6:6d:3c:c9:7f:f3:6e:49:f4:f0:08:a0:4e:bf:eb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
        Validity
            Not Before: Jul 23 16:51:12 2026 GMT
            Not After : Jul 24 17:50:12 2026 GMT
        Subject: CN=B5A95A272044EB10F34C610BD77720ABFBA9D95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:8e:91:fc:24:3b:b1:9f:14:91:77:fc:dc:
                    08:e9:31:f7:94:58:b2:c8:93:9c:ee:a9:92:48:b9:
                    ee:09:7a:cb:65:c1:9f:47:2b:aa:59:cd:c4:ba:56:
                    ea:fe:71:39:d1:0b:dc:09:38:c9:66:67:cf:c2:03:
                    39:89:40:bf:69:d1:1f:b7:ae:85:64:d9:3d:c7:3c:
                    f2:97:6e:e5:ea:76:c2:7e:db:79:ac:9d:d5:46:71:
                    51:1e:6e:f9:99:2b:a2:c1:53:7a:46:3d:05:27:43:
                    93:eb:9c:c7:12:7d:42:8a:4f:8b:83:eb:27:2a:2f:
                    a3:71:cf:e2:e0:eb:49:27:f0:29:ec:80:0f:cf:f9:
                    28:58:53:a3:ef:aa:a8:85:bd:8b:37:bf:b6:26:f3:
                    cb:2a:6e:31:60:73:04:80:aa:be:ba:a9:72:ec:44:
                    0c:ff:4d:c2:73:95:9a:31:2a:fa:dd:62:53:02:b4:
                    0e:47:e7:c6:d0:78:5c:87:73:4c:03:63:d5:07:1d:
                    b7:b0:9c:37:d2:f8:2b:b4:dd:4c:d8:65:fe:ed:81:
                    20:64:f9:50:ee:66:94:b0:7c:85:a2:46:a3:6b:ee:
                    ba:d9:fb:53:b4:c8:e7:61:bc:75:07:6b:03:bd:b3:
                    14:87:49:51:8e:2e:24:fb:13:f8:b7:87:3d:fa:08:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:5A:27:20:44:EB:10:F3:4C:61:0B:D7:77:20:AB:FB:A9:D9:5C
            X509v3 Authority Key Identifier:
                keyid:B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:df:e1:0d:8b:bc:e5:2d:5e:df:0c:3e:ef:d5:43:49:52:93:
         22:d4:ea:fd:33:43:57:b2:a6:cb:c6:da:ea:f8:a1:9c:80:fe:
         f7:bb:d8:d9:4b:76:b4:49:73:67:72:16:a7:78:8e:10:21:4f:
         ef:f9:0c:53:75:96:6b:34:62:d9:6e:71:4e:bf:52:4a:fd:48:
         49:95:fe:6b:51:83:28:58:23:a8:71:fc:3c:4c:1b:5c:52:2c:
         fa:4f:0c:30:d6:75:5f:bb:16:79:6b:a8:a4:8e:a7:aa:4f:f4:
         81:e5:4f:55:ec:d4:17:94:92:80:ca:b1:ec:a9:c1:59:e0:25:
         92:03:8a:67:c2:70:fd:4a:5d:78:fb:7a:10:6b:e2:98:a4:d2:
         a2:a8:02:d1:3f:a2:fa:b2:c4:a5:62:bf:8e:af:24:6c:6c:11:
         7d:68:2d:53:9a:47:8c:2b:a8:24:be:85:f1:f1:03:a3:40:7d:
         33:e5:8c:94:fa:f1:7f:64:b9:7a:d9:77:c1:25:c4:92:4f:8b:
         c0:d9:61:5d:8e:3f:9a:12:54:7d:fa:5f:22:95:7c:ef:da:c7:
         d6:be:8c:91:2c:82:02:31:fc:66:b6:06:4e:6d:3b:23:1b:7e:
         21:00:34:99:6e:8f:59:9d:34:f1:7f:16:e7:93:85:ad:69:d7:
         25:fd:3b:11
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUVuL/XMZtPMl/825J9PAIoE6/68UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk0MDFENkQzMjYxQzAwREVDQTMzNjE4RUNGNkQ5RDhD
RUFBNDFCNzAeFw0yNjA3MjMxNjUxMTJaFw0yNjA3MjQxNzUwMTJaMDMxMTAvBgNV
BAMTKEI1QTk1QTI3MjA0NEVCMTBGMzRDNjEwQkQ3NzcyMEFCRkJBOUQ5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDs46R/CQ7sZ8UkXf83AjpMfeU
WLLIk5zuqZJIue4JestlwZ9HK6pZzcS6Vur+cTnRC9wJOMlmZ8/CAzmJQL9p0R+3
roVk2T3HPPKXbuXqdsJ+23msndVGcVEebvmZK6LBU3pGPQUnQ5PrnMcSfUKKT4uD
6ycqL6Nxz+Lg60kn8CnsgA/P+ShYU6PvqqiFvYs3v7Ym88sqbjFgcwSAqr66qXLs
RAz/TcJzlZoxKvrdYlMCtA5H58bQeFyHc0wDY9UHHbewnDfS+Cu03UzYZf7tgSBk
+VDuZpSwfIWiRqNr7rrZ+1O0yOdhvHUHawO9sxSHSVGOLiT7E/i3hz36CBN3AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUtalaJyBE6xDzTGEL13cgq/up2VwwHwYDVR0j
BBgwFoAUuUAdbTJhwA3sozYY7PbZ2M6qQbcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE9XRVJI
T1VTRS8wL0I5NDAxRDZEMzI2MUMwMERFQ0EzMzYxOEVDRjZEOUQ4Q0VBQTQxQjcu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQjk0MDFENkQzMjYxQzAwREVDQTMzNjE4
RUNGNkQ5RDhDRUFBNDFCNy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BPV0VSSE9VU0UvMC9COTQw
MUQ2RDMyNjFDMDBERUNBMzM2MThFQ0Y2RDlEOENFQUE0MUI3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Bd/hDYu85S1e3ww+79VDSVKTItTq/TNDV7Kmy8ba6vihnID+97vY2Ut2tElzZ3IW
p3iOECFP7/kMU3WWazRi2W5xTr9SSv1ISZX+a1GDKFgjqHH8PEwbXFIs+k8MMNZ1
X7sWeWuopI6nqk/0geVPVezUF5SSgMqx7KnBWeAlkgOKZ8Jw/UpdePt6EGvimKTS
oqgC0T+i+rLEpWK/jq8kbGwRfWgtU5pHjCuoJL6F8fEDo0B9M+WMlPrxf2S5etl3
wSXEkk+LwNlhXY4/mhJUffpfIpV879rH1r6MkSyCAjH8ZrYGTm07Ixt+IQA0mW6P
WZ008X8W55OFrWnXJf07EQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:07 2026 by rpki-client