Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          PrXWYANeJZU24/Se8LACLYaTkJSsx9jGG0Jsiw4QBIg=
Subject key identifier:   9D:F9:63:A9:0C:C8:36:4F:BE:E8:4A:E5:97:8C:A1:A7:E1:48:26:89
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       414A6B71649D481F33F76EC49C632F50D2875147
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          0110
Signing time:             Thu 23 Jul 2026 19:11:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:06:33 +0000
Manifest next update:     Fri 24 Jul 2026 19:27:33 +0000
Files and hashes:         1: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
                          2: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          3: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          4: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          5: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          6: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          7: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          8: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          9: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: cfaDdWvq/T4kigwLRjVBGayUzrfPDsOsam1tGD7m69A=)
                          10: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          11: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          12: AS131611.roa (hash: UCz+rwuylcu0rVH2Vr+NNwNfHAZ+V+Ki80+e+mrGvAg=)
                          13: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          14: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          15: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          16: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          17: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          18: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          19: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:6b:71:64:9d:48:1f:33:f7:6e:c4:9c:63:2f:50:d2:87:51:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Jul 23 19:06:33 2026 GMT
            Not After : Jul 24 19:27:33 2026 GMT
        Subject: CN=9DF963A90CC8364FBEE84AE5978CA1A7E1482689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:fe:ec:40:9d:5d:e1:83:7e:18:30:87:2d:
                    46:27:01:61:65:c5:73:29:aa:32:e3:d4:79:9a:79:
                    43:a1:47:69:90:e2:be:5c:bc:29:b2:92:34:23:50:
                    87:55:35:44:a0:65:dd:35:93:39:44:bd:89:97:c3:
                    72:ea:78:5a:8d:9f:43:60:c1:aa:04:f5:10:5e:5a:
                    40:f3:f8:00:72:bc:01:ff:87:e6:dd:15:9e:39:99:
                    34:86:5c:21:ea:0f:7d:63:27:c2:6c:ab:a9:ac:a6:
                    ce:36:4d:ff:36:50:83:ce:5c:45:1f:73:ba:9c:85:
                    29:f3:22:bc:5e:8d:cc:9f:30:8e:7d:a1:e1:56:50:
                    67:89:34:78:62:8c:30:d0:c7:60:fb:3e:6c:ac:89:
                    79:c5:27:6c:a0:41:0e:1b:9f:1d:d8:a9:47:5b:8e:
                    af:70:ec:c9:aa:c5:39:4b:00:c7:83:b3:9e:68:8c:
                    00:3b:3d:be:a5:f5:03:99:8d:0c:80:4b:2f:d9:ec:
                    d9:a7:0a:dd:d4:59:5a:d7:e4:42:fd:12:bd:81:7f:
                    99:8f:db:37:b3:a8:99:10:36:ec:d0:55:64:26:ff:
                    0c:30:9d:ab:d1:15:4d:55:9e:ec:26:61:6c:70:c7:
                    48:1f:c0:7e:86:36:e7:9b:63:51:75:87:e0:5b:bc:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:63:A9:0C:C8:36:4F:BE:E8:4A:E5:97:8C:A1:A7:E1:48:26:89
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:81:88:9d:78:9a:4e:5e:9c:26:11:44:90:41:c2:0b:1a:
         c8:f0:93:ff:a8:6e:b7:53:fc:e8:fd:53:cf:82:e3:60:fd:b4:
         28:2e:94:db:df:8a:f0:18:a0:8b:02:a6:d3:f3:5d:6d:94:7b:
         c2:c1:db:9b:1a:28:e4:ea:f1:fa:5c:63:b8:d9:28:c6:5f:98:
         7e:f7:c2:22:37:de:47:72:a1:ae:82:12:aa:bb:64:3c:6d:f5:
         2d:47:03:ac:35:ce:6b:04:a8:ab:51:83:88:15:51:7a:de:f0:
         3d:d6:a0:ac:05:40:7c:86:14:e6:76:ca:62:53:3a:4c:9b:23:
         c0:45:37:f1:0a:4a:57:9f:e8:12:e0:60:1c:6f:a6:8e:b7:d2:
         57:15:cf:c8:e3:4b:c3:8c:7d:a4:2f:05:b9:5e:de:c3:57:ff:
         0d:cb:ed:69:54:9f:a0:82:2e:b8:43:0b:dc:1a:5f:d4:f6:71:
         74:3f:75:6e:a7:d8:c0:cb:0f:f0:67:35:8b:68:e8:85:b3:c3:
         5e:1a:27:e4:14:ce:7e:38:c0:e2:39:22:19:1a:2b:bd:cf:4a:
         ea:4a:df:13:d1:f6:56:20:7c:83:81:76:ca:63:33:b3:d6:eb:
         97:25:6b:8a:30:18:b6:29:f2:f2:e6:7b:d3:8c:ac:50:ed:71:
         99:89:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:51 2026 by rpki-client