Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft (raw, json)
Hash identifier:          Mjj21yKsBhXmwLEa0AvO0N5iubyRklIoMxvvh3Z25iM=
Subject key identifier:   8E:8E:5E:40:5A:95:EB:FD:50:F6:3B:E3:D1:43:0E:AF:43:B8:59:2E
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       5B06B92E02F4C37960BAB7C0579BA2DD72EA8AA8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
Manifest number:          010C
Signing time:             Sun 15 Nov 2026 08:47:46 +0000
Manifest this update:     Sun 15 Nov 2026 08:42:46 +0000
Manifest next update:     Mon 16 Nov 2026 09:05:46 +0000
Files and hashes:         1: 34332e3235312e35362e302f32322d3234203d3e2037343833.roa (hash: akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=)
                          2: 3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (hash: VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=)
                          3: 9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl (hash: X6Riy7JNzB02IR0AX4kmtsTUL+eCD87k1Pd+FA0XdA8=)
                          4: 3130332e34322e3134342e302f32342d3234203d3e2037343833.roa (hash: cgb3chUP3JqfYq0b1LvjxVctXBWKiOzejJyOVV0Lan4=)
                          5: 3230322e3134382e3231362e302f32332d3234203d3e2037343833.roa (hash: pdotTZ9puPXODwvqbe0OXjdVjFyCK/vBj236sVdgVKc=)
                          6: 3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (hash: 79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=)
                          7: 3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (hash: RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=)
                          8: 3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (hash: rgFsiPCeuTbr4yeDItGN0JB2GmcezifLDsT7ksjAxys=)
                          9: 3130332e34322e3134342e302f32322d3234203d3e2037353338.roa (hash: 3+c7LzOJ+7ykNIAhsdKuwGwgIARE1KUf6DWic0iVf7Y=)
                          10: 3232332e32362e382e302f32332d3234203d3e203231383539.roa (hash: YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=)
                          11: 3230322e3134382e3231362e302f32332d3234203d3e20313530323838.roa (hash: m08nUkgvFXMEH7SggQHbf7ARa6naXodQWHDQXXeGTPs=)
                          12: 3232332e32362e382e302f32332d3234203d3e2037343833.roa (hash: upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=)
                          13: 3130332e3232392e35302e302f32342d3234203d3e2037343833.roa (hash: Urdua04twOmjpORnRC30OfM9aTU8JD3/+D+NxZwpsX0=)
                          14: 3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (hash: d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:b9:2e:02:f4:c3:79:60:ba:b7:c0:57:9b:a2:dd:72:ea:8a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Nov 15 08:42:46 2026 GMT
            Not After : Nov 16 09:05:46 2026 GMT
        Subject: CN=8E8E5E405A95EBFD50F63BE3D1430EAF43B8592E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:30:43:8e:0f:e6:d0:e9:d0:cd:da:b2:cd:
                    91:0b:43:b1:b1:ab:b5:76:25:ec:a1:ed:9d:12:1a:
                    26:35:61:e7:01:11:60:0d:8e:2f:3b:86:53:00:ab:
                    fb:58:be:a3:79:2d:4c:f5:eb:92:fb:57:cd:20:0a:
                    38:9e:1a:ad:cf:74:ad:b4:27:a8:80:41:56:bb:68:
                    b0:db:2c:3d:03:3e:15:59:bc:e1:da:54:d0:34:65:
                    13:af:b8:70:00:81:06:18:b3:3d:a1:6d:31:af:b4:
                    c4:c3:c4:b3:2b:9a:df:f8:d0:82:86:a8:b8:9d:c7:
                    64:f9:8b:6e:bc:ca:4f:ed:5b:2a:54:7f:2d:78:26:
                    71:f3:f6:fd:54:bf:2f:09:2a:cb:7a:5c:c2:7e:f5:
                    b2:a0:46:70:e9:78:a8:7c:13:63:c7:d9:ee:6c:a3:
                    1b:29:5e:87:45:1c:dc:9c:ca:89:a6:68:42:1b:eb:
                    2e:cf:50:64:d8:1e:c1:3f:3f:46:4e:90:7f:39:1a:
                    3b:68:b0:31:ab:ef:fc:c1:e9:9b:a6:f7:83:f2:4f:
                    3b:ff:05:60:13:e8:a4:43:7e:fd:d4:ca:fa:14:df:
                    f8:24:15:d1:ff:b5:91:e3:c3:55:60:08:3c:67:a7:
                    d2:6b:9c:40:79:69:d3:61:fb:e7:33:d0:ed:02:e8:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:5E:40:5A:95:EB:FD:50:F6:3B:E3:D1:43:0E:AF:43:B8:59:2E
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:61:4c:36:c6:70:d1:b0:2e:1f:20:94:b9:b2:70:7c:70:f6:
         77:03:dd:5f:3f:7f:67:d5:a2:dc:b9:7b:7d:76:7d:79:54:b4:
         c3:fd:be:b9:e7:94:25:fa:7a:17:0a:6e:6a:05:e1:3e:5c:91:
         7d:c9:d6:f7:a9:ba:01:54:26:ac:2a:a1:5a:30:58:ce:13:ea:
         e6:fb:17:25:63:87:6d:3c:56:2a:d4:a5:3f:37:23:51:b7:33:
         46:56:1f:42:39:81:0c:c7:d5:4d:02:b3:56:bc:b6:c4:70:79:
         5f:fd:59:bc:1a:d4:81:23:f2:a5:a5:3e:97:6b:1f:79:d8:8c:
         4f:53:66:e8:ef:1f:fa:98:54:9e:1e:64:6b:28:96:b1:52:71:
         e3:3e:94:a2:11:b9:bf:0b:c3:df:fd:64:9b:bc:80:41:ef:58:
         79:8e:6b:ae:c5:25:3e:de:ef:14:ab:df:02:b9:74:17:a4:10:
         8b:b1:ff:eb:b8:15:df:ab:cd:ff:3f:1c:73:5f:6b:1b:4c:0d:
         70:e1:fd:6d:0f:a7:63:ea:bc:f0:e1:e1:85:81:34:bb:6a:1e:
         32:59:27:51:cd:c1:79:11:73:92:42:cc:72:b9:69:67:63:a7:
         8a:55:3a:11:1f:2b:e8:82:eb:df:b1:e9:41:39:be:22:b0:99:
         09:c8:1d:92
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUWwa5LgL0w3lgurfAV5ui3XLqiqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjExMTUwODQyNDZaFw0yNjExMTYwOTA1NDZaMDMxMTAvBgNV
BAMTKDhFOEU1RTQwNUE5NUVCRkQ1MEY2M0JFM0QxNDMwRUFGNDNCODU5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSzBDjg/m0OnQzdqyzZELQ7Gx
q7V2Jeyh7Z0SGiY1YecBEWANji87hlMAq/tYvqN5LUz165L7V80gCjieGq3PdK20
J6iAQVa7aLDbLD0DPhVZvOHaVNA0ZROvuHAAgQYYsz2hbTGvtMTDxLMrmt/40IKG
qLidx2T5i268yk/tWypUfy14JnHz9v1Uvy8JKst6XMJ+9bKgRnDpeKh8E2PH2e5s
oxspXodFHNycyommaEIb6y7PUGTYHsE/P0ZOkH85GjtosDGr7/zB6Zum94PyTzv/
BWAT6KRDfv3UyvoU3/gkFdH/tZHjw1VgCDxnp9JrnEB5adNh++cz0O0C6NhtAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUjo5eQFqV6/1Q9jvj0UMOr0O4WS4wHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lDTE9VRC8wLzlDODA3NDhC
MkRBRUE3Q0MyMjI3NTlFMTE2QUEzNEFGQUNDN0VBMDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAYUw2
xnDRsC4fIJS5snB8cPZ3A91fP39n1aLcuXt9dn15VLTD/b6555Ql+noXCm5qBeE+
XJF9ydb3qboBVCasKqFaMFjOE+rm+xclY4dtPFYq1KU/NyNRtzNGVh9COYEMx9VN
ArNWvLbEcHlf/Vm8GtSBI/KlpT6Xax952IxPU2bo7x/6mFSeHmRrKJaxUnHjPpSi
Ebm/C8Pf/WSbvIBB71h5jmuuxSU+3u8Uq98CuXQXpBCLsf/ruBXfq83/PxxzX2sb
TA1w4f1tD6dj6rzw4eGFgTS7ah4yWSdRzcF5EXOSQsxyuWlnY6eKVToRHyvoguvf
selBOb4isJkJyB2S
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:05 2026 by rpki-client