Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          rCDdmk3U9syxezlKOPtxzxIgkpUAub7rooGzjbIQ0PM=
Subject key identifier:   FE:33:47:D5:07:EA:AC:74:F1:4D:73:74:6F:EA:D7:C8:6D:5D:04:40
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       1AAB92A1C8F7B83653295E4A508A12113DF1EC77
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          01A4
Signing time:             Thu 12 Nov 2026 02:11:12 +0000
Manifest this update:     Thu 12 Nov 2026 02:06:12 +0000
Manifest next update:     Fri 13 Nov 2026 02:16:12 +0000
Files and hashes:         1: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          2: AS131611.roa (hash: UCz+rwuylcu0rVH2Vr+NNwNfHAZ+V+Ki80+e+mrGvAg=)
                          3: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          4: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          5: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          6: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          7: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          8: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          9: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: hmCJxkuYXD8RmRX1OCboyplZAmYA5MVJ23rSLSwbovo=)
                          10: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          11: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          12: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          13: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          14: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          15: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          16: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          17: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          18: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          19: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Nov 2026 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:92:a1:c8:f7:b8:36:53:29:5e:4a:50:8a:12:11:3d:f1:ec:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Nov 12 02:06:12 2026 GMT
            Not After : Nov 13 02:16:12 2026 GMT
        Subject: CN=FE3347D507EAAC74F14D73746FEAD7C86D5D0440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:13:62:19:ca:c3:34:d5:9c:9a:bd:69:03:
                    a5:4f:b8:80:55:5d:f3:9f:f8:8a:6a:ce:8d:61:80:
                    c2:08:28:0b:f2:1b:1d:5a:97:e5:49:49:e9:ef:d4:
                    cc:f3:e8:dd:24:aa:66:90:f1:82:a7:e4:58:23:dc:
                    9c:42:cb:e7:4e:eb:0d:a9:2f:02:2e:7b:b6:1f:9f:
                    40:4d:64:13:71:dc:63:59:cd:ad:43:c4:c5:95:50:
                    3f:01:cf:6b:20:36:c5:ef:62:b1:92:e6:5e:30:c8:
                    a9:2f:b3:93:e8:06:8b:24:bd:8d:2d:06:4a:0e:4e:
                    90:7d:ad:e4:7d:9f:cb:31:65:d3:6b:7f:6b:eb:ad:
                    63:45:19:e1:85:9a:e3:d8:50:8a:e4:3d:6e:46:ef:
                    6c:2c:64:75:ba:db:e7:ec:5b:62:5a:2a:f8:47:a9:
                    39:e8:de:95:6a:cf:56:12:8f:c9:dd:87:4b:88:7d:
                    6e:9b:6b:6f:ee:12:bd:94:09:bd:7d:22:fb:0f:84:
                    da:2d:cc:63:46:9d:0f:d6:59:04:c4:b2:56:de:ab:
                    30:90:90:1f:9f:d2:51:d0:05:c0:67:3c:6f:1a:f4:
                    89:ce:60:e0:a7:67:3c:ec:9b:58:30:38:e3:91:3d:
                    d1:78:af:07:48:e1:27:ef:ca:7d:5f:91:30:10:a3:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:47:D5:07:EA:AC:74:F1:4D:73:74:6F:EA:D7:C8:6D:5D:04:40
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:1f:a1:33:03:f8:b9:5e:20:05:41:0c:3c:1f:8c:37:0a:
         7f:8f:1d:7c:03:61:d1:9c:e0:55:be:f1:2f:75:6c:e1:7e:1b:
         22:c9:00:09:45:01:ca:78:4c:3b:1e:31:fb:6a:80:1e:49:77:
         38:2a:0d:76:98:2d:81:de:1a:a0:79:8b:ed:1e:19:38:0c:7c:
         73:df:88:f2:fb:4e:32:e1:a5:b9:e3:bc:5c:e9:49:26:bb:57:
         95:7e:03:f6:92:44:5f:8c:b6:0c:95:17:47:36:1b:96:f1:a0:
         d5:e4:01:69:f0:e6:e0:87:94:28:29:11:c0:cb:bb:4f:8b:9f:
         b8:2d:66:4c:e9:95:7e:3d:8a:d9:9c:64:85:9b:90:fd:43:c4:
         5f:10:30:d5:bc:ee:62:de:4d:9b:04:ad:a7:1b:ce:3a:99:72:
         a9:b4:9a:77:5b:06:20:5e:c3:c4:8e:f4:33:ce:03:fd:ec:1f:
         b1:9e:fc:67:ff:c5:8a:46:69:01:19:73:ea:50:37:dc:5c:f1:
         98:09:51:9f:d8:c5:0d:8c:6d:9e:9d:4d:6f:1e:eb:58:ff:51:
         fb:99:c5:72:e8:0b:7d:96:38:c2:3d:ec:19:0c:50:65:50:c3:
         72:b6:65:91:14:de:f2:21:38:a3:34:ee:1d:17:fa:59:bf:0a:
         9b:b1:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 18:59:23 2026 by rpki-client