Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
File:                     3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json)
Hash identifier:          TGReM4I5LFFP4B2EwIZPTk/z/7Cks+pJGUjolNvUlLc=
Subject key identifier:   9B:49:62:0C:5A:E3:FC:76:BC:89:21:FB:A8:6B:25:EA:DA:60:12:AD
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Certificate issuer:       /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial:       195DCFE041E29296380653909564E7755194AEF6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
Manifest number:          78
Signing time:             Thu 23 Jul 2026 15:28:05 +0000
Manifest this update:     Thu 23 Jul 2026 15:23:05 +0000
Manifest next update:     Fri 24 Jul 2026 16:06:05 +0000
Files and hashes:         1: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=)
                          2: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=)
                          3: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=)
                          4: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=)
                          5: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=)
                          6: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=)
                          7: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=)
                          8: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=)
                          9: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=)
                          10: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=)
                          11: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=)
                          12: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=)
                          13: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=)
                          14: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=)
                          15: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=)
                          16: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=)
                          17: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=)
                          18: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=)
                          19: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=)
                          20: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=)
                          21: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=)
                          22: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=)
                          23: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: qYepsW6C46WIWB45MLGcqJ+zD3pBXLfGb79WNw5KOwA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
                          rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5d:cf:e0:41:e2:92:96:38:06:53:90:95:64:e7:75:51:94:ae:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
        Validity
            Not Before: Jul 23 15:23:05 2026 GMT
            Not After : Jul 24 16:06:05 2026 GMT
        Subject: CN=9B49620C5AE3FC76BC8921FBA86B25EADA6012AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:c3:88:30:72:6e:18:1f:52:9f:d3:f4:5a:
                    49:2e:e8:82:95:e2:25:13:61:ea:4f:a3:ae:0a:63:
                    10:f4:0f:69:3b:e2:0f:73:eb:5e:32:75:a8:0b:48:
                    19:62:16:60:a8:d9:b9:01:8f:25:eb:06:e5:cf:2b:
                    fd:02:a5:95:3e:63:7c:ba:36:79:40:86:b7:d4:eb:
                    ff:21:10:8d:b4:af:61:f9:05:01:1d:74:cb:a9:a8:
                    f0:ab:d2:fe:1f:2b:ce:55:28:d5:11:2d:93:a3:f6:
                    1a:f4:fb:44:57:1f:6b:b9:57:f6:dc:e6:04:6d:e2:
                    0e:ab:dd:3a:f0:cd:5f:71:a2:c3:24:c6:64:73:e2:
                    99:2d:89:6f:36:2a:1f:a6:d1:14:d5:7e:40:55:16:
                    91:fc:2a:19:d6:3f:58:57:11:65:b5:8d:01:44:05:
                    52:a9:93:11:9b:c0:b0:24:17:6c:41:3b:26:78:3b:
                    d8:9e:39:e5:0c:b3:05:12:c7:83:74:a3:8f:6a:88:
                    c1:9a:65:a2:f1:28:0c:6d:c0:91:b0:e3:2d:e3:1f:
                    6e:0b:3f:cd:bf:0b:ba:53:ec:81:6b:c6:a0:d6:d5:
                    10:b4:5b:c9:8c:ff:52:8d:ce:0a:a2:89:c1:33:50:
                    4b:ec:0f:50:8c:6e:de:3a:9e:f6:6a:b2:5b:3b:7b:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:62:0C:5A:E3:FC:76:BC:89:21:FB:A8:6B:25:EA:DA:60:12:AD
            X509v3 Authority Key Identifier:
                keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:11:59:48:e8:90:f5:b6:2c:29:0b:30:de:58:83:33:07:3b:
         2f:c2:c8:f9:54:07:e4:d5:98:a0:d1:ba:be:95:00:38:15:3c:
         d6:77:40:ea:98:d6:e3:8f:03:7b:f4:58:cb:74:4a:5c:46:08:
         8f:78:7f:2b:12:ce:23:a5:4e:40:ac:27:87:fb:79:f1:26:87:
         3c:1d:1f:23:bb:ce:ca:db:51:07:24:9a:2c:9a:25:e8:55:34:
         60:40:e0:44:49:52:9d:49:6e:98:4b:c6:ee:8d:7b:fc:e4:98:
         87:cd:fc:ac:5e:a4:a9:6c:36:02:ae:58:be:07:3f:95:b2:e9:
         49:d1:83:0f:81:fa:77:2b:00:08:9a:c2:f6:52:70:6d:94:4e:
         cd:62:97:dd:ef:f2:70:cc:0a:e4:03:12:34:0b:6e:84:7e:65:
         3a:42:b4:c7:b2:77:f3:35:ae:5c:4c:b2:a5:83:90:4e:9c:9a:
         8b:33:57:24:4b:5b:09:6b:8f:56:4a:69:68:0d:fc:52:5e:6a:
         08:08:87:2a:b7:a7:2d:55:ea:3c:df:e7:a1:e5:48:61:c3:dd:
         cd:b2:61:e8:59:d8:68:3a:1b:f1:1c:5f:b0:1d:9e:18:3a:73:
         c3:2c:0f:05:44:f7:11:2e:4e:05:0c:e5:0f:9e:b9:81:cb:36:
         fc:45:7f:f7
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUGV3P4EHikpY4BlOQlWTndVGUrvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB
RjhDQzhFRjAeFw0yNjA3MjMxNTIzMDVaFw0yNjA3MjQxNjA2MDVaMDMxMTAvBgNV
BAMTKDlCNDk2MjBDNUFFM0ZDNzZCQzg5MjFGQkE4NkIyNUVBREE2MDEyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBsOIMHJuGB9Sn9P0Wkku6IKV
4iUTYepPo64KYxD0D2k74g9z614ydagLSBliFmCo2bkBjyXrBuXPK/0CpZU+Y3y6
NnlAhrfU6/8hEI20r2H5BQEddMupqPCr0v4fK85VKNURLZOj9hr0+0RXH2u5V/bc
5gRt4g6r3TrwzV9xosMkxmRz4pktiW82Kh+m0RTVfkBVFpH8KhnWP1hXEWW1jQFE
BVKpkxGbwLAkF2xBOyZ4O9ieOeUMswUSx4N0o49qiMGaZaLxKAxtwJGw4y3jH24L
P82/C7pT7IFrxqDW1RC0W8mM/1KNzgqiicEzUEvsD1CMbt46nvZqsls7e/0VAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUm0liDFrj/Ha8iSH7qGsl6tpgEq0wHwYDVR0j
BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv
MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx
RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD
OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQEVlI6JD1tiwp
CzDeWIMzBzsvwsj5VAfk1Zig0bq+lQA4FTzWd0DqmNbjjwN79FjLdEpcRgiPeH8r
Es4jpU5ArCeH+3nxJoc8HR8ju87K21EHJJosmiXoVTRgQOBESVKdSW6YS8bujXv8
5JiHzfysXqSpbDYCrli+Bz+VsulJ0YMPgfp3KwAImsL2UnBtlE7NYpfd7/JwzArk
AxI0C26EfmU6QrTHsnfzNa5cTLKlg5BOnJqLM1ckS1sJa49WSmloDfxSXmoICIcq
t6ctVeo83+eh5Uhhw93NsmHoWdhoOhvxHF+wHZ4YOnPDLA8FRPcRLk4FDOUPnrmB
yzb8RX/3
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:17 2026 by rpki-client