Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft (raw, json)
Hash identifier:          cm7CZx/pgZw2kdYu/4yUV10DtOYoR8lKFr0dZxZbCm0=
Subject key identifier:   5D:7E:5C:06:43:E4:F7:DD:3F:31:BD:3C:2F:BA:09:5F:07:90:5A:28
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       01C4F6D716A570C4F92331C9D99731B3D260FB37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
Manifest number:          C5
Signing time:             Wed 23 Sep 2026 20:27:36 +0000
Manifest this update:     Wed 23 Sep 2026 20:22:36 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:36 +0000
Files and hashes:         1: 3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (hash: VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=)
                          2: 3230322e3134382e3231362e302f32332d3234203d3e20313530323838.roa (hash: m08nUkgvFXMEH7SggQHbf7ARa6naXodQWHDQXXeGTPs=)
                          3: 3232332e32362e382e302f32332d3234203d3e203231383539.roa (hash: YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=)
                          4: 3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (hash: d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=)
                          5: 3130332e34322e3134342e302f32342d3234203d3e2037343833.roa (hash: cgb3chUP3JqfYq0b1LvjxVctXBWKiOzejJyOVV0Lan4=)
                          6: 3130332e3232392e35302e302f32342d3234203d3e2037343833.roa (hash: Urdua04twOmjpORnRC30OfM9aTU8JD3/+D+NxZwpsX0=)
                          7: 9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl (hash: YIs45vt6u1svRqxmXD/CZPPeeF8+Jt5xGDPjCvAEDQQ=)
                          8: 34332e3235312e35362e302f32322d3234203d3e2037343833.roa (hash: akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=)
                          9: 3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (hash: 79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=)
                          10: 3130332e34322e3134342e302f32322d3234203d3e2037353338.roa (hash: 3+c7LzOJ+7ykNIAhsdKuwGwgIARE1KUf6DWic0iVf7Y=)
                          11: 3230322e3134382e3231362e302f32332d3234203d3e2037343833.roa (hash: pdotTZ9puPXODwvqbe0OXjdVjFyCK/vBj236sVdgVKc=)
                          12: 3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (hash: rgFsiPCeuTbr4yeDItGN0JB2GmcezifLDsT7ksjAxys=)
                          13: 3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (hash: RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=)
                          14: 3232332e32362e382e302f32332d3234203d3e2037343833.roa (hash: upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c4:f6:d7:16:a5:70:c4:f9:23:31:c9:d9:97:31:b3:d2:60:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Sep 23 20:22:36 2026 GMT
            Not After : Sep 24 22:00:36 2026 GMT
        Subject: CN=5D7E5C0643E4F7DD3F31BD3C2FBA095F07905A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:13:75:d9:56:2e:59:42:2b:b6:eb:56:65:
                    c0:53:0b:06:31:5c:3a:6c:83:50:20:45:f0:23:53:
                    47:27:dd:67:0a:32:aa:a5:ba:32:c7:58:3c:22:c4:
                    67:d4:6a:a7:25:8c:bf:61:56:92:31:21:b9:14:00:
                    42:a7:e3:56:af:be:0a:82:e6:4d:8a:c4:07:a1:d4:
                    69:18:04:fb:3c:56:06:e2:da:72:dd:f3:eb:60:a6:
                    f0:7d:a1:b7:93:56:9a:c1:bc:34:c9:21:bb:dc:bf:
                    c2:3e:f8:a9:57:92:87:be:52:4e:47:5a:8b:2d:21:
                    7c:fa:61:2b:89:72:06:5d:63:ae:2f:91:49:f2:c1:
                    30:c7:90:d2:26:73:7f:17:d9:db:6f:06:ec:41:80:
                    9e:32:53:d2:0f:a2:ab:ca:68:b8:e9:3b:fd:3f:cc:
                    18:b3:b2:85:c7:e8:d5:ed:da:8d:54:c0:33:2a:c3:
                    13:8b:03:61:88:a2:b0:2b:c2:d3:cc:24:3c:ed:fc:
                    83:ee:68:35:d4:c8:ed:04:fa:7c:d8:52:0f:73:90:
                    98:83:2c:80:d0:5f:d6:03:f8:91:47:32:6f:e9:a5:
                    f3:d2:d2:cc:bd:b1:a7:3b:3e:46:e8:ec:27:42:13:
                    30:73:40:d9:9e:16:f1:0e:1f:21:0e:18:80:da:a7:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7E:5C:06:43:E4:F7:DD:3F:31:BD:3C:2F:BA:09:5F:07:90:5A:28
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:87:9c:45:e9:10:5d:01:fa:e8:e0:6b:b4:01:79:37:3b:f5:
         9a:9b:67:36:3f:8f:c1:5f:db:72:2d:ce:69:cf:4e:b9:9e:ee:
         d4:bd:0d:96:aa:5b:6f:e2:7a:1d:11:9b:c7:f5:af:6f:d8:9e:
         2a:42:8c:f7:82:9d:bc:d0:c7:27:46:6b:ca:56:3e:65:6a:fb:
         54:89:70:7f:c9:86:28:18:cb:7f:e1:af:c7:81:d9:bc:b3:01:
         cd:bd:ff:8e:46:f3:5d:da:14:15:23:ad:9d:95:b7:28:4b:8f:
         04:73:5e:80:1d:2d:da:2b:79:99:cf:40:1b:02:03:a0:65:4b:
         f8:1a:07:93:84:cc:b1:fe:ec:81:d7:9b:9f:50:59:91:c8:bd:
         49:c0:77:28:20:ae:6e:e5:2f:5b:96:d1:b6:31:81:66:9e:a5:
         82:08:8e:a0:e6:d5:da:94:67:f2:33:ab:4c:1a:ca:59:6f:5e:
         0e:3a:e6:76:a8:43:ff:43:cb:a6:f3:41:60:42:52:ca:a9:b7:
         85:84:8c:2c:4f:12:c2:7b:f2:0e:27:6f:04:1c:ae:19:73:d8:
         d1:fa:1f:e1:64:9e:48:74:5c:b7:8c:91:4a:74:5f:b2:b5:ab:
         20:c3:cd:ec:2c:ad:7d:69:47:3c:2f:db:21:9a:51:f9:1e:8e:
         53:b7:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:12:16 2026 by rpki-client