Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
File:                     CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json)
Hash identifier:          bRegseAb5j2jedLIYB0T5xxblNYsT3MRUXC3LyHKY0M=
Subject key identifier:   D9:BF:AB:60:7B:F1:A1:22:B5:5B:82:9E:51:0D:08:53:65:EC:5E:2B
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       2E970AD1265B723193679172A7FB8863582C7387
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
Manifest number:          79
Signing time:             Thu 23 Jul 2026 15:08:02 +0000
Manifest this update:     Thu 23 Jul 2026 15:03:02 +0000
Manifest next update:     Fri 24 Jul 2026 17:47:02 +0000
Files and hashes:         1: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=)
                          2: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=)
                          3: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=)
                          4: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=)
                          5: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: gEOXEx26rVisjCrefN7cg8nFGo+SPNb9Ig5r+4Is2D8=)
                          6: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=)
                          7: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=)
                          8: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=)
                          9: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=)
                          10: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=)
                          11: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=)
                          12: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=)
                          13: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=)
                          14: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=)
                          15: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=)
                          16: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=)
                          17: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=)
                          18: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:0a:d1:26:5b:72:31:93:67:91:72:a7:fb:88:63:58:2c:73:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: Jul 23 15:03:02 2026 GMT
            Not After : Jul 24 17:47:02 2026 GMT
        Subject: CN=D9BFAB607BF1A122B55B829E510D085365EC5E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:16:d3:8f:1a:2b:2f:54:ee:5c:aa:9d:c9:
                    6d:ed:61:2d:fe:25:e1:08:74:56:c4:f0:7d:e7:66:
                    23:46:be:33:82:4e:9f:15:fe:54:b3:9e:4c:7b:93:
                    68:c3:20:8a:e0:25:c2:b8:8e:be:9e:92:95:3d:70:
                    01:fc:39:77:2d:e9:63:c0:c0:0f:30:d7:50:ad:f2:
                    8e:69:a5:8d:bb:0b:76:f4:91:02:b4:97:fc:13:61:
                    e8:37:1b:aa:9b:7a:61:6e:a4:66:a6:e3:fb:13:af:
                    4b:7f:d3:cd:90:8e:93:78:de:9c:76:5e:72:c9:e8:
                    df:a5:fb:79:e3:45:46:d3:5b:6b:cc:7a:d7:a0:ee:
                    0a:1d:06:5b:0c:3d:8a:d9:99:10:ef:c0:16:09:66:
                    56:f2:0b:e9:78:b7:26:31:33:d3:0d:7f:f7:1d:9d:
                    ae:f8:8e:2c:ec:2e:76:56:8d:90:fb:4e:04:16:6d:
                    9c:ce:fb:f5:85:a6:3b:18:f4:24:b6:ac:d0:05:b2:
                    e1:72:36:50:6c:32:0f:51:1c:53:2d:ba:60:c2:1c:
                    3d:89:77:f2:90:54:b8:ca:eb:7a:b3:0c:38:0d:6e:
                    c3:e0:34:2b:c2:14:75:5e:59:74:9b:71:bc:df:32:
                    67:1a:6d:6b:a4:68:36:03:61:08:eb:93:65:a5:21:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BF:AB:60:7B:F1:A1:22:B5:5B:82:9E:51:0D:08:53:65:EC:5E:2B
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:b1:80:cb:fc:ec:ce:57:35:8c:c6:a9:5d:5b:6c:01:db:
         86:5f:c3:e7:21:ca:c4:a1:79:48:0a:4e:99:c1:5f:0c:fd:c2:
         b8:0d:b1:ca:80:0c:40:0b:93:da:94:dc:5b:57:24:a6:0e:b2:
         af:2e:5a:d3:b5:68:7e:47:4e:55:64:6e:c4:2d:1b:b8:11:b1:
         32:70:80:7d:dc:36:04:78:1e:10:3c:a9:8d:69:08:89:6c:24:
         46:a2:70:79:91:54:00:7c:8e:2e:3d:f4:d2:ef:3c:05:aa:84:
         96:24:6e:47:ed:f0:dc:61:fe:fd:8b:75:00:7c:e6:7b:05:7f:
         6a:42:41:73:29:8c:1c:b2:58:52:92:e6:cb:69:23:20:2f:7c:
         bd:e5:b7:71:45:6e:d3:06:b4:be:18:0d:25:d0:80:6c:5f:79:
         0f:e7:d4:fd:c0:04:37:4a:34:50:ee:8d:97:74:c1:84:c4:89:
         5a:58:ee:3e:d5:e9:57:e5:35:c7:8f:52:eb:49:a6:fc:d4:62:
         48:a7:f0:aa:09:7a:78:0e:0b:78:68:11:60:e4:b4:cd:96:1b:
         56:0c:85:e7:6a:12:f8:76:4b:f3:6d:9b:ce:dc:e2:be:57:2c:
         a5:86:65:2a:b7:d5:da:67:1a:59:8e:46:4e:f3:79:c8:9e:c8:
         ad:43:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:10 2026 by rpki-client