Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
File:                     1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft (raw, json)
Hash identifier:          F+Ml7qStMAy/hCUPyF5CQdSN5EoRPeicCn8vJXeHVCc=
Subject key identifier:   66:FD:F1:4A:5B:04:AD:D9:2F:1B:2C:6D:FF:0F:3B:4C:C5:31:48:23
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Certificate issuer:       /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial:       34F7EB7D4A2FE55E75ACB3E09CF938F99C68F91C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
Manifest number:          8D
Signing time:             Fri 24 Jul 2026 01:12:12 +0000
Manifest this update:     Fri 24 Jul 2026 01:07:12 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:12 +0000
Files and hashes:         1: 3232332e32372e33352e302f32342d3234203d3e203338383433.roa (hash: c8hCe81Dh6dpBpKX3cqwhNQeK3t9l/oaMbXngl0wot8=)
                          2: 1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl (hash: wmgzJVIt/stxDlChZ3HM6g6aOJTuun8zUlTyKCgW8dQ=)
                          3: 3232332e32372e35302e302f32342d3234203d3e203338383433.roa (hash: KY4DDeer9mCpAgBQWgEnzy6yR0FPa1Ipj24i754ac84=)
                          4: 3232332e32372e33392e302f32342d3234203d3e203338383433.roa (hash: AmZkIe2pIoX+Jg4hEgfMDdIASmAzaNBsZ4QkLTANXIM=)
                          5: 3232332e32372e35312e302f32342d3234203d3e203338383433.roa (hash: tp2jwR1Geb0CoED7p2uzuRjISxXEpvi+a/uPP8pFmAQ=)
                          6: 3232332e32372e33362e302f32322d3234203d3e203338383433.roa (hash: NIMXuMPvugc8pLEHkl94+xb7dBfEG7U6VOOCOtq+iY0=)
                          7: 3232332e32372e35372e302f32342d3234203d3e203338383433.roa (hash: reOhXDMLhiFDUVrQvlUBuYoxTXIQAUhw5RwGxO3MPa8=)
                          8: 3232332e32372e34322e302f32342d3234203d3e203338383433.roa (hash: 8GjxBthKO8Mj7zGYHAjT2MTTdKteIA6NdskEkHel+lA=)
                          9: 323430303a623338303a3a2f33322d3332203d3e203338383433.roa (hash: +pXDgr1wLsUgZAMfX+d8P2TB6aqNRRWg1pdGfbtokfM=)
                          10: 3232332e32372e34352e302f32342d3234203d3e203338383433.roa (hash: IhPRD8OzlnlPcnBXUqAwbkz5fy5LVlMgkqrEdf+AuvA=)
                          11: 3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa (hash: 9bn1ekea7T8R54cjT8NcvFUCoYBwx8++6VqIH9OQqxk=)
                          12: 3132342e3135302e3133312e302f32342d3234203d3e203338383433.roa (hash: BVFoLOrvZ6B4ZF8eJdP7vxfunfx+xrzXNciYudOpwio=)
                          13: 3232332e32372e34382e302f32302d3230203d3e203338383433.roa (hash: Qth5EVZUJ8UTWBqjAsjz9Hl5ekM1PIv1CnW7da+r9Y8=)
                          14: 3232332e32372e34312e302f32342d3234203d3e203338383433.roa (hash: 4IlQz941gHujeQMdL9vA/nrYbZGTfZwV3gKJzt0hdc8=)
                          15: 3132342e3135302e3132382e302f32312d3234203d3e203338383433.roa (hash: TjQud4kqwpw9nkpsUyYiE6W/tZDSFGaf+7PJxAQMvoM=)
                          16: 3130332e32302e34302e302f32322d3234203d3e203338383433.roa (hash: M6YEgeg0JaTzYDNxI6uRv76NWKHK5aO222QIZrova60=)
                          17: 3232332e32372e33322e302f32302d3230203d3e203338383433.roa (hash: 37IKWU5ydNwwrFF4pPGbb1dD6E0zgI3wA3xzQMV5lVU=)
                          18: 3232332e32372e34392e302f32342d3234203d3e203338383433.roa (hash: pUUC9KljeNsuI0n2sKbkGlB9AGTcVRjhiHbyS4e3+ao=)
                          19: 3132342e3135302e3133332e302f32342d3234203d3e203338383433.roa (hash: RJtJ2dt4pTnlRqetFan6TfAicmtr5kbHSk2mFZaYhYs=)
                          20: 3232332e32372e34372e302f32342d3234203d3e203338383433.roa (hash: 5XyAw0HlNnYLSn3dJYvJeF0ArWV93PDd1/S2lv+qcmA=)
                          21: 3232332e32372e35342e302f32342d3234203d3e203338383433.roa (hash: hK3eTtk1Aw6p+n+a1+H+oEQEXBUn0p2NRcZ6c1f842c=)
                          22: 3232332e32372e35382e302f32342d3234203d3e203338383433.roa (hash: fZsbeGwf8ASvcZidxMOnJcKrVZ4AHcd9hvGKThV96TE=)
                          23: 3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa (hash: cCL36gaY6VKRx/mME3OGV/Yfx4TD3+GXXjH4C5/aA74=)
                          24: 3232332e32372e34382e302f32302d3230203d3e203133333335.roa (hash: pfZSy4RcmNZUO+lLNar8b4LCwsdShd8UQXha52Zq8Uo=)
                          25: 3232332e32372e33342e302f32342d3234203d3e203338383433.roa (hash: pkJet9siIAv/YWhawvFeEC/wp7KNuPCJIu0UCfLuDeA=)
                          26: 3232332e32372e34342e302f32322d3234203d3e203338383433.roa (hash: XYJTZ3u5vWR6T5KTk/fuIKLdgS4Js+5kBMHIGoMaO6E=)
                          27: 3232332e32372e33382e302f32342d3234203d3e203338383433.roa (hash: ndGKGnsx++cjEOY7jnToqq4d21VSl6A4DKk/pio8LsA=)
                          28: 3232332e32372e34332e302f32342d3234203d3e203338383433.roa (hash: d2i5s9QtLbe+t4uZPM6c/JzFuy7mZTYCXY7EKi4L1Ug=)
                          29: 3232332e32372e35322e302f32322d3234203d3e203338383433.roa (hash: 3JH+wvG0pR7q1B2ZXDO82xgeF97kx6AuURGEind2I+c=)
                          30: 3232332e32372e33372e302f32342d3234203d3e203338383433.roa (hash: z6n0mwVHo4mBDmLnxnFXaCFduviI4Do7m8WrEOee6Zk=)
                          31: 3132342e3135302e3133342e302f32342d3234203d3e203338383433.roa (hash: fHtLbETDus7MPpoX7lV7SjUkgWewaSo9qQ61nJ2DFjs=)
                          32: 3232332e32372e36302e302f32322d3234203d3e203338383433.roa (hash: Iu4kXW2mIvv/rtarl5r24OA1cGkwlakapbEmYLOqCEw=)
                          33: 3232332e32372e34382e302f32302d3234203d3e203338383433.roa (hash: OjXRhIQZtcmmwxd4YAKN7fIr9Elq5J6xvbWEnPrm5Yg=)
                          34: 3232332e32372e35392e302f32342d3234203d3e203338383433.roa (hash: QTE/s4zVHJ6mF38FV8jT4+buqUGVRIOOKccgSs2UzrY=)
                          35: 3232332e32372e35352e302f32342d3234203d3e203338383433.roa (hash: n5oTi++70MIXLqXHPwT9donBCV7GSfMHlz/p71rQzgw=)
                          36: 3232332e32372e34362e302f32342d3234203d3e203338383433.roa (hash: a2hrjD66ZdhlBljvVwvvFiVAzI1QlTFtrEh4Vn1VumI=)
                          37: 3232332e32372e35332e302f32342d3234203d3e203338383433.roa (hash: W/7xSrFp16WEMXzXvZwhubvAhWK/W30vGMsvIr6EP/Q=)
                          38: 3132342e3135302e3133302e302f32342d3234203d3e203338383433.roa (hash: y/ZnbNV1IOmTt5lyuwvaz+3KWTi7cbpuBOYbk/e6jrA=)
                          39: 3232332e32372e34302e302f32312d3234203d3e203338383433.roa (hash: VSXXvQjdW+TuFtVEtH0mFIYNRKxbP6je5uC3Qd9gqGo=)
                          40: 3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa (hash: RcOnXMAI5zB/DCWGD2VqU4hiopUTsHbdPmPIHSfzOFQ=)
                          41: 3232332e32372e33322e302f31392d3234203d3e203338383433.roa (hash: sLpfgv/w2j00vd1MRFu6tSxSPrYiuAXE2UIkC4/G918=)
                          42: 3232332e32372e35362e302f32312d3234203d3e203338383433.roa (hash: uIfRZDkMVPpzqVgYiRfIm/2Z3+nWwzIfSlamFGwOVG0=)
                          43: 3232332e32372e33332e302f32342d3234203d3e203338383433.roa (hash: iHBwGEcq/Toxs0xqrQqekg2RJ0LsdlJYQvYmHH854FQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
                          rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:eb:7d:4a:2f:e5:5e:75:ac:b3:e0:9c:f9:38:f9:9c:68:f9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
        Validity
            Not Before: Jul 24 01:07:12 2026 GMT
            Not After : Jul 25 02:00:12 2026 GMT
        Subject: CN=66FDF14A5B04ADD92F1B2C6DFF0F3B4CC5314823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:28:80:68:4e:3e:4a:1d:71:64:19:e6:58:
                    6f:14:9c:94:5c:2a:da:4e:c3:5f:72:53:dd:73:cd:
                    69:07:f9:51:21:95:e9:b7:62:17:7d:86:f5:2d:b2:
                    9e:84:fe:d6:53:f3:c7:1c:e7:3e:23:a5:4d:5e:54:
                    20:73:d8:df:7d:4b:2b:a1:b2:3f:2c:97:25:ff:eb:
                    1b:ee:8d:b7:02:83:7f:7b:fd:14:ab:51:e0:b0:a6:
                    95:18:f0:6c:c3:e5:40:4a:a1:57:f9:53:e1:90:75:
                    70:52:38:21:7c:e0:5d:f6:6f:72:12:c8:e4:62:06:
                    4b:64:de:f0:22:86:cb:33:a1:5a:00:8d:31:d2:20:
                    92:e6:0a:6c:28:5d:7a:6c:bf:ff:e8:0e:3c:83:72:
                    0c:1a:40:17:90:3d:0f:68:5f:09:a0:17:20:db:b3:
                    9b:dd:e8:9e:54:96:2c:51:1b:5b:98:dc:56:2f:2b:
                    95:f3:69:88:69:4a:ae:c8:a1:d0:95:e6:9e:74:82:
                    60:f4:dd:85:ee:46:3a:b7:5a:89:84:b9:45:5e:8c:
                    91:23:cd:1c:0f:43:d6:e0:f0:ad:bc:93:56:be:bb:
                    84:64:ee:f4:09:8d:36:69:81:57:dc:d7:86:f4:cb:
                    86:3d:c6:05:7f:1a:a1:34:03:8d:fe:8e:db:10:07:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FD:F1:4A:5B:04:AD:D9:2F:1B:2C:6D:FF:0F:3B:4C:C5:31:48:23
            X509v3 Authority Key Identifier:
                keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:ca:77:3d:81:1f:ea:25:53:0e:62:67:ec:0a:bb:1e:5b:
         7f:c3:17:0e:ec:ee:35:34:6c:72:80:ec:6e:3a:8c:d1:6e:86:
         b0:fc:54:08:9a:76:4e:04:91:9d:5a:4e:8e:67:74:b2:42:7b:
         db:38:0a:c5:b8:73:1f:1d:53:34:2e:e0:42:52:f2:ba:57:1f:
         ab:1e:49:c7:75:1d:54:15:ad:a0:ab:32:e3:1d:91:47:9c:fb:
         17:00:19:22:8b:08:17:43:12:89:5c:64:6f:5d:2f:78:2a:20:
         0e:df:a9:16:0a:6c:38:67:f9:b7:f0:70:f7:22:77:99:b8:ce:
         4a:00:7c:3b:62:b0:89:59:c7:a2:93:5c:89:72:8b:85:db:72:
         2d:88:84:18:30:f9:88:d5:25:be:9d:a9:4e:af:47:c9:9a:a3:
         9e:5f:b3:8e:0e:d4:42:09:46:0e:6c:0a:c4:2d:09:1f:10:eb:
         7d:40:7f:25:07:1a:d1:4f:06:64:37:af:12:73:c8:3b:1d:42:
         21:b9:6f:48:60:45:ed:9d:5f:ce:26:6e:69:36:84:37:bb:02:
         0f:2e:06:07:6b:bb:d0:df:63:b3:f7:7d:af:f2:cb:8f:9c:f4:
         78:c7:93:99:d7:a1:31:bd:7d:e1:b7:50:94:b8:51:6b:7d:0f:
         84:45:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:14 2026 by rpki-client