Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
File:                     3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json)
Hash identifier:          Toeg4KZWo3Esa/DdcTccj/PE4K2tIbjtA2F1w5h9U7c=
Subject key identifier:   66:9D:B5:8E:0F:9C:49:D4:2E:2D:6B:DA:73:50:01:E5:74:B4:40:6E
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       1FE57B272E675847C52318882C0B80DA27C02EDF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
Manifest number:          72
Signing time:             Thu 23 Jul 2026 16:48:15 +0000
Manifest this update:     Thu 23 Jul 2026 16:43:15 +0000
Manifest next update:     Fri 24 Jul 2026 19:03:15 +0000
Files and hashes:         1: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=)
                          2: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=)
                          3: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: ytf09lpwSW974PiPFh0G3rowuhKaHFMxOaS9SfdDlTc=)
                          4: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=)
                          5: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=)
                          6: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=)
                          7: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=)
                          8: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=)
                          9: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=)
                          10: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=)
                          11: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=)
                          12: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=)
                          13: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=)
                          14: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=)
                          15: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=)
                          16: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:7b:27:2e:67:58:47:c5:23:18:88:2c:0b:80:da:27:c0:2e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: Jul 23 16:43:15 2026 GMT
            Not After : Jul 24 19:03:15 2026 GMT
        Subject: CN=669DB58E0F9C49D42E2D6BDA735001E574B4406E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:b4:52:89:e6:68:c3:fe:7c:f5:1e:8e:04:
                    e6:ba:5e:11:58:46:5a:34:54:19:f2:98:13:20:85:
                    80:bd:da:e3:67:48:39:4b:99:f8:cb:68:cb:cf:90:
                    68:58:61:13:29:34:53:e1:47:0d:a3:69:0f:29:34:
                    4e:7a:a5:bc:bf:07:a6:39:9d:3a:0a:a7:da:5d:d8:
                    9c:97:92:6c:d2:94:73:b0:5f:f7:99:8a:7a:ac:74:
                    b0:ff:a0:67:52:42:e1:8b:0f:e7:df:20:02:91:98:
                    c6:1f:54:cf:97:72:b0:ec:58:1a:78:e2:bc:82:9f:
                    31:6f:55:b2:17:e9:10:d9:03:09:16:77:ca:13:0a:
                    8d:6f:d2:23:0b:ad:e6:f2:1f:f9:fb:85:b0:b6:e0:
                    e4:9d:8a:64:05:90:5d:db:1e:8d:ba:f7:2c:43:fc:
                    50:bc:f4:d2:cf:75:2d:a0:ce:30:a7:c2:89:33:cd:
                    22:5d:a1:de:05:f0:87:39:63:a6:36:aa:74:81:59:
                    0c:91:5e:a3:b0:59:2f:3b:1c:76:bb:cf:5f:86:96:
                    b0:07:42:14:57:a2:c1:bd:47:dd:a0:22:f3:86:a5:
                    58:dd:ff:50:da:7b:c9:1c:f3:ab:c1:7f:94:a9:be:
                    97:70:b7:a3:b7:f5:ba:56:24:5c:2a:72:1d:77:0c:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:B5:8E:0F:9C:49:D4:2E:2D:6B:DA:73:50:01:E5:74:B4:40:6E
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:52:36:cd:4d:f7:ed:b0:da:2a:9b:22:6b:4d:e4:16:09:0c:
         20:30:06:49:55:dd:d2:e0:19:f8:22:87:29:4b:7e:8e:01:88:
         85:d2:32:a3:da:f3:66:26:ab:db:d1:49:78:b4:e1:7e:8d:58:
         b8:06:88:f5:6e:9d:87:1b:78:18:bf:0c:62:a5:4b:f0:e4:30:
         71:b3:76:11:5c:0c:21:36:a3:35:1d:96:e0:94:ce:12:fe:3d:
         72:77:ce:4f:4d:f9:ef:5a:b0:d9:2a:e9:72:51:71:0d:d3:11:
         02:85:a7:b1:3d:30:bc:04:80:c6:66:f0:3f:78:92:0c:49:64:
         a7:8b:7a:6c:6e:b2:ae:ed:5f:48:16:b6:c7:16:1a:82:a4:fd:
         c4:aa:b1:04:6c:7a:86:26:42:4e:65:b1:c8:42:a7:52:37:47:
         99:e5:e6:b9:27:c1:1d:5b:49:16:55:af:23:d1:5e:0b:a2:6f:
         ae:51:d2:1a:b8:db:51:68:d2:25:c7:02:44:64:6c:a7:63:c4:
         ff:5c:45:58:bd:7f:bb:8e:66:4d:8d:b8:d3:cd:4a:b6:a3:b0:
         e1:ba:6f:73:b2:a8:78:79:5d:6c:17:b7:d4:59:07:0e:a7:64:
         bf:fd:6f:7d:18:3c:5a:ab:9c:fd:f9:ab:31:4d:f4:b1:5d:86:
         b5:96:8e:ac
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUH+V7Jy5nWEfFIxiILAuA2ifALt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE
MUY0QTlCRTAeFw0yNjA3MjMxNjQzMTVaFw0yNjA3MjQxOTAzMTVaMDMxMTAvBgNV
BAMTKDY2OURCNThFMEY5QzQ5RDQyRTJENkJEQTczNTAwMUU1NzRCNDQwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZLRSieZow/589R6OBOa6XhFY
Rlo0VBnymBMghYC92uNnSDlLmfjLaMvPkGhYYRMpNFPhRw2jaQ8pNE56pby/B6Y5
nToKp9pd2JyXkmzSlHOwX/eZinqsdLD/oGdSQuGLD+ffIAKRmMYfVM+XcrDsWBp4
4ryCnzFvVbIX6RDZAwkWd8oTCo1v0iMLrebyH/n7hbC24OSdimQFkF3bHo269yxD
/FC89NLPdS2gzjCnwokzzSJdod4F8Ic5Y6Y2qnSBWQyRXqOwWS87HHa7z1+GlrAH
QhRXosG9R92gIvOGpVjd/1Dae8kc86vBf5Spvpdwt6O39bpWJFwqch13DNKLAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUZp21jg+cSdQuLWvac1AB5XS0QG4wHwYDVR0j
BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU
RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC
QUZDOUVEMUY0QTlCRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zNDQyQTM0MzAx
Q0M2MTBDRjI3MkY3NjVBQkJBRkM5RUQxRjRBOUJFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1I2zU33
7bDaKpsia03kFgkMIDAGSVXd0uAZ+CKHKUt+jgGIhdIyo9rzZiar29FJeLThfo1Y
uAaI9W6dhxt4GL8MYqVL8OQwcbN2EVwMITajNR2W4JTOEv49cnfOT03571qw2Srp
clFxDdMRAoWnsT0wvASAxmbwP3iSDElkp4t6bG6yru1fSBa2xxYagqT9xKqxBGx6
hiZCTmWxyEKnUjdHmeXmuSfBHVtJFlWvI9FeC6JvrlHSGrjbUWjSJccCRGRsp2PE
/1xFWL1/u45mTY24081KtqOw4bpvc7KoeHldbBe31FkHDqdkv/1vfRg8Wquc/fmr
MU30sV2GtZaOrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:14 2026 by rpki-client