Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          tg6wA38IZhXSE/zSnXW20/3ak/93DObQFn+XxtzruKQ=
Subject key identifier:   BD:D2:6A:79:4A:C8:D7:48:F8:77:B5:8B:65:B8:80:CB:E3:D3:BB:1E
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       58AADA57BAE7199C01730932BBAEE1E36CBDBA11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          0161
Signing time:             Tue 22 Sep 2026 19:01:23 +0000
Manifest this update:     Tue 22 Sep 2026 18:56:23 +0000
Manifest next update:     Wed 23 Sep 2026 22:37:23 +0000
Files and hashes:         1: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
                          2: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          3: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          4: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          5: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          6: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          7: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          8: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          9: AS131611.roa (hash: UCz+rwuylcu0rVH2Vr+NNwNfHAZ+V+Ki80+e+mrGvAg=)
                          10: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          11: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          12: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          13: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          14: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          15: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          16: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: onqeem0cAhHXt4p/zPFj5qZHBWHbfUmCtYChbuVpJl4=)
                          17: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          18: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          19: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 22:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:da:57:ba:e7:19:9c:01:73:09:32:bb:ae:e1:e3:6c:bd:ba:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Sep 22 18:56:23 2026 GMT
            Not After : Sep 23 22:37:23 2026 GMT
        Subject: CN=BDD26A794AC8D748F877B58B65B880CBE3D3BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:2a:e7:3d:95:d0:61:a6:5a:ae:1a:ad:b3:
                    e7:75:92:d1:25:b7:44:b3:be:20:14:03:ac:88:84:
                    09:2b:45:63:e1:4c:17:03:38:58:6e:a5:4a:4c:c3:
                    50:1c:8e:6c:33:25:85:57:24:71:76:14:3d:2c:63:
                    24:c0:8d:d8:82:6e:9b:4f:23:21:0f:c0:d6:fe:aa:
                    e0:d6:91:72:71:8b:cc:54:2b:18:c5:fd:ca:b9:da:
                    a3:0b:87:7e:37:31:dc:30:8a:a1:2c:ec:65:a5:14:
                    8f:39:62:f0:01:c9:99:29:66:3f:34:3b:ec:4e:2a:
                    f2:77:08:f2:61:15:5b:d7:54:c5:c5:fc:0f:4a:f9:
                    35:cb:6c:cc:ce:5f:e5:cf:fc:00:00:f3:aa:df:c2:
                    c2:3a:ea:65:f3:fe:eb:37:0a:03:ef:97:21:9e:4e:
                    36:a2:2d:34:02:38:d7:5b:c4:3c:94:f0:b8:d5:18:
                    82:f5:a7:a4:c1:0a:62:4b:aa:bd:0b:80:4f:eb:24:
                    89:9f:46:3e:57:9a:f1:eb:92:4b:73:1d:79:a9:bd:
                    8b:bd:ed:63:0b:6f:2b:75:d8:b3:89:00:a4:9b:9f:
                    47:90:35:ce:4b:4c:d8:3c:78:68:80:0e:fc:f2:e9:
                    56:e2:f9:d1:91:b4:bf:99:25:29:34:f1:31:d8:3f:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:6A:79:4A:C8:D7:48:F8:77:B5:8B:65:B8:80:CB:E3:D3:BB:1E
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:66:da:52:8c:c7:93:b9:1f:fe:b7:91:62:bc:9f:b1:d1:93:
         98:18:31:59:14:a2:ba:6e:28:10:70:85:af:c2:2b:b3:90:7a:
         30:13:9b:42:99:13:cc:57:d6:de:2d:db:57:f1:47:4e:0e:0d:
         db:03:0a:be:49:ea:06:12:cc:f3:e9:b7:41:bb:ed:53:57:ed:
         ba:f0:2a:7f:f6:8b:63:ce:af:48:2a:db:6f:3b:ed:cc:59:7c:
         35:d6:ed:df:d0:f0:54:cc:c9:d9:07:63:35:7c:92:e3:c4:d9:
         0f:67:07:c1:f3:63:7a:52:d2:02:b0:41:67:6b:94:d6:96:aa:
         0f:ce:82:7d:3c:1d:18:c6:0a:62:1d:7d:25:c1:58:3f:40:bb:
         73:ef:2c:b6:fc:0b:28:4e:ed:fd:e5:03:78:9a:81:b1:05:f0:
         ea:7d:6e:4b:d8:bd:9c:15:15:1c:56:da:be:04:bd:91:25:f9:
         96:71:c4:02:92:a8:7c:fd:4e:f7:6a:b0:56:8c:bc:10:80:02:
         1b:62:a0:4c:65:b3:bd:d1:cd:7a:a7:23:cf:6c:72:f3:83:78:
         4d:98:3b:f6:c2:90:26:95:fc:e3:11:ec:85:e5:44:ac:f9:9d:
         b3:9b:44:d8:15:0d:9e:af:14:31:11:aa:0b:77:ef:5c:18:ee:
         23:09:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:53:11 2026 by rpki-client