Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
File:                     60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft (raw, json)
Hash identifier:          VT/44Fp9wC6ZKvDwG1dGqeEgI2p1WYDZlmdgcNvKEZE=
Subject key identifier:   93:A5:24:34:10:A0:11:64:2D:56:FA:EC:6F:5B:68:F9:0B:00:7A:56
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       1D6F4651DE945C25D5336FF99217995E64C6ED13
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
Manifest number:          CD
Signing time:             Mon 21 Sep 2026 18:01:48 +0000
Manifest this update:     Mon 21 Sep 2026 17:56:48 +0000
Manifest next update:     Tue 22 Sep 2026 20:31:48 +0000
Files and hashes:         1: 323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa (hash: XBZlZFNoLpm2lmpxhtAjCP6zIGu3Dhyf7TwvCzJtd+8=)
                          2: 3130332e3135322e3135302e302f32342d3234203d3e2039363738.roa (hash: 8BYEKNaCDqwjOiYLUizaV9F+Qamzecge9/ZWZ2nFg+8=)
                          3: 323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa (hash: jA7qImHOv7W5Hv0XzY9Mbd/TM/moy4CN/D4CXy9sCok=)
                          4: 3130332e3135302e33372e302f32342d3234203d3e2039363738.roa (hash: MxntDIE2cC7tgxOjHnVFPeq1VqsxruW7k0jq8nNwz5o=)
                          5: 3231312e37362e3137392e302f32342d3234203d3e2039363738.roa (hash: /Zn6oV7/+JqyT/+9kwju4uQs6rJPmG9bibhYt4x/eW8=)
                          6: 3232332e32362e302e302f32342d3234203d3e2039363738.roa (hash: plplmJ8pwlLh3yGAxEbhFQEbbFuJ0mIf0eyJpVvTgks=)
                          7: 3130332e3135322e3135312e302f32342d3234203d3e2039363738.roa (hash: LbFNzufaEOVQ4W41Z1ykHx9k1X6VXBB6LVAO4NG2BwI=)
                          8: 323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa (hash: 0FEWrUNjLY/F3gseUIYDxYlgFXVH+ROPTSUAvafGyeU=)
                          9: 3130332e3135302e33362e302f32342d3234203d3e2039363738.roa (hash: y8lVVRe/wuPGJ7dZ5+tF+pkbL0/La93cTqHjq66lkjQ=)
                          10: 3130332e39382e37352e302f32342d3234203d3e2039363738.roa (hash: lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=)
                          11: 3130332e39382e37332e302f32342d3234203d3e2039363738.roa (hash: iTc2gRx4ebXsP1eOWz4bPAEExZXDn5MuL/PjqBhmxRc=)
                          12: 323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa (hash: LElF+wGt3liBgKlL8jsB3e1yEkuDOG6KHD56zZD0m1c=)
                          13: 3130332e39382e37322e302f32342d3234203d3e2039363738.roa (hash: +QkVrz2UrUc1xKgslAqv4U092I7kUGBfoilfgqBhzdM=)
                          14: 323430313a393563303a3a2f33362d3336203d3e2039363738.roa (hash: FjgMbezCdZItwgd9u+UzAwlO2g/X8+irv7/pznEQ8ng=)
                          15: 60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl (hash: vJMIpb4e8lihXX4RIvZq9zMM//ytunqLIQytCC8aj+8=)
                          16: 323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa (hash: coQ2mjXXFKGhITP1RevV/iXW3F6uOj+d2bCuydrqi38=)
                          17: 3231312e37362e3137382e302f32342d3234203d3e2039363738.roa (hash: JW2N4XkiPozF8gUK5wYhp6TMNn7yWqUe8luuRx51Dbk=)
                          18: 323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (hash: wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=)
                          19: 3130332e39382e37342e302f32342d3234203d3e2039363738.roa (hash: tNSrK+WNy+KySyf2yQ1NOrkH6iCaaiR2BeXjuVkFzh4=)
                          20: 34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (hash: 82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=)
                          21: 323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa (hash: U2WVeAZZY+wJAf5675nkBmBhxC/RUJdThWhD5OYfiNQ=)
                          22: 323430313a393563303a3a2f33322d3332203d3e2039363738.roa (hash: jOtFlREhO9CilnpGChErgEs47lUXhbvvQOV2p/o59ZQ=)
                          23: 3232332e32362e312e302f32342d3234203d3e2039363738.roa (hash: Lo7donP/9UA808jwU4s7KUQfGkcGM3kV2CfMe8JCTd8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 20:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:46:51:de:94:5c:25:d5:33:6f:f9:92:17:99:5e:64:c6:ed:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: Sep 21 17:56:48 2026 GMT
            Not After : Sep 22 20:31:48 2026 GMT
        Subject: CN=93A5243410A011642D56FAEC6F5B68F90B007A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:1e:5c:99:11:85:1c:44:08:45:54:2b:54:
                    e3:96:57:82:93:27:28:d0:0d:18:0e:b7:c3:48:7d:
                    68:56:02:c8:5c:58:97:f0:9f:1a:3d:65:e1:10:90:
                    4d:a8:ba:9a:0b:a7:a8:e4:08:29:da:4e:ce:4c:98:
                    2d:6f:34:59:7d:e9:bd:d1:0c:05:dc:41:1d:c3:35:
                    2c:25:40:c5:de:04:75:ac:65:12:fe:71:b0:0a:f9:
                    bf:16:c8:b1:af:81:8f:cc:e1:c9:a6:80:05:61:88:
                    96:b4:29:05:ee:4c:bd:51:1d:e7:c7:a3:19:42:17:
                    7c:5f:77:83:0f:33:4b:3b:96:10:d7:e6:51:a2:8a:
                    22:c1:19:9a:c2:39:aa:14:f8:95:bf:26:c3:87:e3:
                    e7:0a:26:fb:94:54:1d:5d:f8:1b:4a:55:29:09:c7:
                    18:93:2f:9d:3d:41:2a:cb:37:b1:00:52:0c:16:19:
                    b5:83:ca:8d:63:42:c9:6a:7f:69:ed:54:70:71:89:
                    e4:a2:3d:c1:4b:21:41:b5:dd:3a:91:c2:89:4a:80:
                    21:e5:bf:18:19:32:95:cb:82:03:42:de:bd:ba:26:
                    58:47:c3:1b:b1:3f:40:b9:0a:52:ac:a0:49:3e:e9:
                    54:02:1f:76:6c:84:ac:75:95:00:72:3a:9c:ba:ea:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:24:34:10:A0:11:64:2D:56:FA:EC:6F:5B:68:F9:0B:00:7A:56
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:fc:7c:2a:9c:c1:fb:13:6b:43:e1:23:bd:a6:f6:85:b6:
         d3:0c:8d:36:e5:f3:f8:06:f4:47:2f:f3:b9:8a:60:0e:e1:b6:
         56:6f:6f:fd:6c:c3:59:9c:7c:32:ba:5d:83:39:19:67:8a:3a:
         25:83:6a:72:cc:19:24:43:31:65:8c:32:b5:db:67:eb:4f:75:
         6c:2f:d4:e3:78:89:c5:3b:bf:ad:98:23:56:0e:da:70:56:f6:
         fb:c3:40:a6:9a:84:11:44:9c:b2:89:3a:d9:01:9b:2b:b8:54:
         53:4c:c2:11:3b:d2:58:97:a4:8a:34:86:b2:f1:6e:c5:ac:31:
         77:51:f8:f3:08:61:cf:0c:03:ba:ef:66:af:d5:25:40:fb:33:
         39:94:47:23:bb:0f:07:92:3f:2c:c7:49:40:68:29:2c:46:62:
         13:41:05:03:b9:c5:92:13:c3:b4:9e:15:15:f4:e9:55:92:df:
         78:94:5b:8d:88:38:bb:37:88:15:34:8c:7f:f1:4a:66:1a:1e:
         99:37:25:1f:ca:9c:5e:94:c6:c1:1d:d4:d7:25:c2:83:db:41:
         3c:b9:50:81:44:cb:c3:27:b1:d6:b4:e6:3a:22:ea:c3:fe:4b:
         12:7f:56:23:a5:8f:81:1f:35:99:b5:33:38:e8:8a:c9:1e:cf:
         3a:81:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:44:33 2026 by rpki-client