Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
File:                     6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json)
Hash identifier:          5MFcylm40BVTtwuIFzpRMcXDHPawCe/YkvGRc9MT66A=
Subject key identifier:   3C:E6:0E:E1:E2:50:93:42:05:0B:FE:1A:55:5F:F7:54:A9:A6:69:EB
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Certificate issuer:       /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial:       1FA52519E12D69CBE2F1E8F3DA14CF95185D0C8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
Manifest number:          022D
Signing time:             Thu 23 Jul 2026 21:51:48 +0000
Manifest this update:     Thu 23 Jul 2026 21:46:48 +0000
Manifest next update:     Sat 25 Jul 2026 00:20:48 +0000
Files and hashes:         1: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=)
                          2: AS17712.roa (hash: Wg4H8Fi4n92WsVNQZPoPRYKtdvnX3aJz4nbFyuqqLUg=)
                          3: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=)
                          4: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=)
                          5: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=)
                          6: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=)
                          7: AS1659.roa (hash: M7vlJ+pOYnQc6ZvkQ07/yOT39egw6Apz1FV4LHusFGM=)
                          8: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=)
                          9: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=)
                          10: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: TXPaXXvBG9tq9oxex9VglTP1N40ryhLgvNgX9zxR0Ao=)
                          11: AS17713.roa (hash: 6THe+d1M9IBbktnCoPGIW1RcAbmuio4tr67tKLdsscQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:25:19:e1:2d:69:cb:e2:f1:e8:f3:da:14:cf:95:18:5d:0c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
        Validity
            Not Before: Jul 23 21:46:48 2026 GMT
            Not After : Jul 25 00:20:48 2026 GMT
        Subject: CN=3CE60EE1E2509342050BFE1A555FF754A9A669EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:fc:e7:b5:b6:95:3a:e5:df:94:0b:c0:a6:
                    96:f6:b4:a4:8b:b6:1e:b5:b0:ff:df:67:29:39:83:
                    2b:90:e9:af:cd:21:f3:9e:38:b5:d1:ff:43:98:ee:
                    c3:1c:40:11:1c:e9:ea:56:44:c9:96:db:be:d7:7a:
                    6c:35:19:23:90:40:67:48:19:f8:59:3a:10:ce:14:
                    74:01:ec:fe:26:89:aa:92:0a:ca:48:4c:fe:9a:41:
                    47:76:6d:18:76:46:23:de:6e:1b:11:ef:40:69:96:
                    5e:d9:e5:d9:f4:ed:06:53:ea:39:9e:f9:b4:36:a2:
                    79:40:11:5a:68:06:b2:d1:92:a8:e0:ef:69:54:36:
                    66:cf:71:7f:c1:e3:ee:6b:3c:94:e1:dc:2a:24:93:
                    f9:a0:6a:05:10:c3:bd:5a:c9:70:9c:c9:d8:58:62:
                    32:4a:d8:40:08:1f:ef:b3:90:3e:a0:b8:6d:53:08:
                    5e:2c:c0:a3:50:6d:e0:1b:6d:ff:ab:1d:fb:44:69:
                    46:5e:05:c8:cf:c8:90:09:f3:07:8d:78:63:a5:5e:
                    67:a2:fb:18:a4:c7:6e:75:4b:ae:f1:6d:92:e3:a9:
                    10:68:f9:85:57:bb:a6:8f:d2:1c:b3:c5:0c:af:68:
                    ba:be:18:b4:70:32:43:2f:15:91:0a:22:a0:06:bf:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:0E:E1:E2:50:93:42:05:0B:FE:1A:55:5F:F7:54:A9:A6:69:EB
            X509v3 Authority Key Identifier:
                keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:2d:45:26:34:1b:26:63:e2:ac:b4:4d:86:86:9b:88:bd:
         30:60:94:fb:9c:34:d2:2d:ce:4e:eb:44:29:31:9d:27:a0:31:
         8a:e9:0b:bb:4b:a3:9d:34:aa:57:f1:5a:c4:b6:03:df:85:f7:
         fa:13:2a:cf:53:df:ac:5b:e4:6d:cc:38:57:9e:ad:7d:a2:a1:
         ab:97:6a:4a:2f:a0:d3:fd:60:8f:ed:e5:64:c2:b5:5d:9e:1e:
         63:7b:13:ee:96:52:04:da:dc:43:ba:49:39:42:7c:b7:18:c8:
         0c:8c:db:f4:80:05:ba:80:75:5b:2f:70:a9:09:60:9f:3d:ad:
         94:16:27:54:5f:14:85:7e:a5:2f:ad:9f:47:e4:4e:f1:1c:56:
         68:91:36:8e:be:fe:fd:6b:e1:71:6f:f4:bb:da:a6:7d:3b:d5:
         b3:30:2d:09:26:71:29:15:7e:f0:5b:5c:3b:ae:d8:70:29:ae:
         f3:3f:5a:82:ed:48:8f:7b:46:32:c1:dd:e4:c5:15:28:5f:4a:
         c4:ba:e9:09:53:e7:1e:5a:4c:94:b5:c6:88:53:a9:95:7d:5a:
         4b:81:87:79:6b:07:96:6d:98:e4:a6:e6:1d:a4:15:0b:ce:71:
         3a:f3:6c:94:b4:55:88:df:09:2c:43:a0:38:13:27:53:52:1c:
         11:35:f9:4e
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUH6UlGeEtacvi8ejz2hTPlRhdDIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB
MDk2MTBDRDAeFw0yNjA3MjMyMTQ2NDhaFw0yNjA3MjUwMDIwNDhaMDMxMTAvBgNV
BAMTKDNDRTYwRUUxRTI1MDkzNDIwNTBCRkUxQTU1NUZGNzU0QTlBNjY5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsPzntbaVOuXflAvAppb2tKSL
th61sP/fZyk5gyuQ6a/NIfOeOLXR/0OY7sMcQBEc6epWRMmW277Xemw1GSOQQGdI
GfhZOhDOFHQB7P4miaqSCspITP6aQUd2bRh2RiPebhsR70Bpll7Z5dn07QZT6jme
+bQ2onlAEVpoBrLRkqjg72lUNmbPcX/B4+5rPJTh3Cokk/mgagUQw71ayXCcydhY
YjJK2EAIH++zkD6guG1TCF4swKNQbeAbbf+rHftEaUZeBcjPyJAJ8weNeGOlXmei
+xikx251S67xbZLjqRBo+YVXu6aP0hyzxQyvaLq+GLRwMkMvFZEKIqAGv4DTAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUPOYO4eJQk0IFC/4aVV/3VKmmaeswHwYDVR0j
BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND
RkM4QTA5NjEwQ0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wLzZFOUMzMjI2NjgyQUVG
QThENjdCOEFDNjA4Q0NDRkM4QTA5NjEwQ0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCohi1FJjQbJmPi
rLRNhoabiL0wYJT7nDTSLc5O60QpMZ0noDGK6Qu7S6OdNKpX8VrEtgPfhff6EyrP
U9+sW+RtzDhXnq19oqGrl2pKL6DT/WCP7eVkwrVdnh5jexPullIE2txDukk5Qny3
GMgMjNv0gAW6gHVbL3CpCWCfPa2UFidUXxSFfqUvrZ9H5E7xHFZokTaOvv79a+Fx
b/S72qZ9O9WzMC0JJnEpFX7wW1w7rthwKa7zP1qC7UiPe0Yywd3kxRUoX0rEuukJ
U+ceWkyUtcaIU6mVfVpLgYd5aweWbZjkpuYdpBULznE682yUtFWI3wksQ6A4EydT
UhwRNflO
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:39 2026 by rpki-client