Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
File:                     EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft (raw, json)
Hash identifier:          WUw/kSvV5mpQhweNEtjctaMfn6D1J/WVxxOPsUSTPHE=
Subject key identifier:   40:C2:92:C4:9E:E7:68:87:C3:B7:18:D8:CE:CD:21:1C:75:4F:55:F4
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Certificate issuer:       /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial:       2FEAC4B6D4613225981767F1BDC624E5F78087C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
Manifest number:          010B
Signing time:             Sat 14 Nov 2026 08:10:50 +0000
Manifest this update:     Sat 14 Nov 2026 08:05:50 +0000
Manifest next update:     Sun 15 Nov 2026 10:34:50 +0000
Files and hashes:         1: 3230322e33392e39362e302f32302d3234203d3e2034373833.roa (hash: Olj5ogCJ+KENEHzp0UId7+1QWnhfQbZROWFWrZJLsV4=)
                          2: 3231302e36332e302e302f31392d3234203d3e2034373833.roa (hash: qlDALeqbVpWwwXPI8oaegagYfsk3fuVfubVcHj5iuSo=)
                          3: 3231302e36332e33322e302f31392d3234203d3e2034373833.roa (hash: IOBRQRi5x1l7RkWh7H2TjOm1bcz8SF4MkljnqrXFDYE=)
                          4: 3231302e36372e33322e302f31392d3234203d3e2034373833.roa (hash: R+3V0Ek3S/TEEqG6fzzq9tRHndjt0eO+HCUwIKRvy/g=)
                          5: 3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa (hash: peI0xrWdSPuR9DhduODvlN5d8660caUXM4/pXLjzdlM=)
                          6: 323430353a6130303a3a2f33322d3332203d3e2034373833.roa (hash: w96CcK3EcuIT7W/c98Q79QR5Oc7Yp+VCg1caJCBvd0k=)
                          7: 3231302e36372e3133362e302f32322d3234203d3e2034373833.roa (hash: NxbEYku6+Yeb1boQaTVe2CO1V589t+LUg0puIeCsP4U=)
                          8: EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl (hash: DMMxRjyj8OQRdvwnCAvEIRK++h/lxP2aVchps4GTA38=)
                          9: 3231302e36372e3131322e302f32302d3234203d3e2034373833.roa (hash: BM8k9MBagiU8IsLNqTHPl5SkAPeVPuJgXWsdfYnE6C4=)
                          10: 3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa (hash: U41ACqKjqLv3A2k99iT0Zw/yVaptjAgUgR8Sqx4uySY=)
                          11: 3231302e36372e3132382e302f32312d3234203d3e2034373833.roa (hash: P4roJwDVKM9TY4KBoWKPfagZ+CcKwN77hxj/5KRPjoY=)
                          12: 3231302e36372e31362e302f32302d3234203d3e2034373833.roa (hash: OOqyxUF2Eo0uwi9ygYamcvINthWEw9KhH9b8voFJxlo=)
                          13: 3231302e36372e302e302f32302d3234203d3e2034373833.roa (hash: wjwfBFHpMOaJa38KIrYl3Psjw0WhKS7Yo8OYk8jCybg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
                          rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 10:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:c4:b6:d4:61:32:25:98:17:67:f1:bd:c6:24:e5:f7:80:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
        Validity
            Not Before: Nov 14 08:05:50 2026 GMT
            Not After : Nov 15 10:34:50 2026 GMT
        Subject: CN=40C292C49EE76887C3B718D8CECD211C754F55F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:db:d7:d7:72:51:a2:88:8f:6a:bb:95:6b:
                    c3:39:0d:84:5b:23:5b:bc:98:46:8e:da:43:7a:28:
                    c0:26:5a:fd:11:de:2a:52:5c:f0:11:1a:0c:b4:8a:
                    a6:6b:eb:af:5b:a7:a4:bd:53:a8:59:2e:13:13:14:
                    33:5c:5c:f6:df:69:16:3a:80:3f:06:01:e7:05:93:
                    2f:c7:d9:60:40:95:e4:b8:da:97:cf:89:33:9e:01:
                    8a:0c:83:3c:cc:02:20:dc:73:28:9a:b2:8c:11:88:
                    6a:e8:ea:55:4c:46:57:8b:a4:de:e8:f3:7f:26:84:
                    1d:1d:cb:f7:b7:84:2a:1e:c6:29:24:90:4c:74:2d:
                    f8:96:fc:b9:da:b7:86:74:17:c4:b6:5d:6e:02:b0:
                    b2:a4:dc:63:f8:fc:c3:8b:80:d8:4f:43:46:93:37:
                    b4:1a:ba:17:8f:94:5b:fe:7c:c3:27:d3:c5:3b:0d:
                    ef:88:0e:ad:cc:35:4f:79:30:4c:a6:1e:f6:f8:18:
                    dc:31:24:47:f2:5f:df:70:c0:0c:78:16:18:ee:e3:
                    79:cd:43:bd:fe:ac:4f:17:85:f2:6e:b9:a5:12:0f:
                    3d:91:e3:48:cf:8d:63:69:e0:de:03:a0:73:f9:a6:
                    5d:ff:12:a9:96:4f:70:b3:5c:d3:cd:1f:d9:71:43:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:92:C4:9E:E7:68:87:C3:B7:18:D8:CE:CD:21:1C:75:4F:55:F4
            X509v3 Authority Key Identifier:
                keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:1d:f0:b2:73:04:b1:d4:0c:09:63:7c:f3:72:32:a3:7b:
         f4:39:d6:62:b7:19:97:92:fd:fc:b2:b2:54:de:1e:bf:e4:9c:
         a6:8c:a1:c0:62:1c:ce:3a:55:b8:a3:ea:96:aa:c0:d8:14:bd:
         68:44:6b:ba:9d:77:bd:5a:d3:25:6c:85:f0:b3:0e:40:df:b7:
         96:2a:bb:c9:4e:a0:2f:59:bd:54:ca:f8:ea:22:1a:48:a8:ec:
         e4:66:aa:1e:14:62:7e:e1:50:94:3f:e1:eb:6e:e2:97:39:28:
         0c:32:02:2c:c8:5b:bb:62:00:aa:d7:e7:45:ab:86:9e:cb:ce:
         5d:1e:2a:83:0d:2b:65:09:04:58:ac:ac:d6:89:00:90:f0:87:
         f8:b5:d8:3d:c7:f1:33:43:fc:36:7d:77:bb:e5:54:4d:b8:c3:
         7c:c1:dc:00:da:c8:77:b8:3a:6c:6e:c8:23:80:4a:d4:60:fa:
         a7:90:65:e2:44:b2:c4:ad:70:57:4b:07:86:7c:fe:66:55:6e:
         14:a2:f7:c9:08:a4:7c:38:49:2a:46:08:11:5b:61:54:5c:57:
         14:9a:c5:85:60:e2:4b:ae:b2:26:74:ae:20:52:59:02:77:e3:
         7c:31:da:8b:e9:83:b7:fb:42:36:ce:dd:02:44:4d:08:44:a4:
         0f:86:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:16 2026 by rpki-client