Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
File:                     91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft (raw, json)
Hash identifier:          uKV82AoF8qGz9INCDXI9iIy0rkW83UYS65o/+qSy7S0=
Subject key identifier:   3B:6B:41:95:8F:B1:55:C6:68:0F:9E:CC:8F:A2:A8:B6:E5:2B:A8:05
Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Certificate issuer:       /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Certificate serial:       280D2A810BA7245866FB3B2DC894FB4D4F471A85
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 02:41:39 +0000
Manifest this update:     Wed 17 Jun 2026 02:36:39 +0000
Manifest next update:     Thu 18 Jun 2026 05:52:39 +0000
Files and hashes:         1: 35382e38362e302e302f31362d3234203d3e203138303432.roa (hash: oir68ulXfz2o4hpuPdgbogm3zDCKGqXXogK6EElGoRs=)
                          2: 36312e36332e36332e302f32342d3234203d3e203138303432.roa (hash: M3lBeU93rPFpHZzfzya2pm//fao7dHKeGXfUQUWeG4c=)
                          3: 36312e36332e302e302f31392d3234203d3e203138303432.roa (hash: ce6KCDMBv96RefDUeQM/i3f6SD0bb9d9s4rNef5Dg+c=)
                          4: 36312e36332e38372e302f32342d3234203d3e203138303432.roa (hash: erTaVpl/eNVX7PgR7SUKeD6eH0JlVlMxS4/Hj2ekkfA=)
                          5: 91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl (hash: wJnNRh4Zc0PBEg98IZFrPhglcFBIMbMXhD9Gnzo5dw0=)
                          6: 36312e36332e36342e302f31392d3234203d3e203138303432.roa (hash: o8lP6wN1YoXlc135dAR+pjKDRDFMUY9ed02kJcD94DU=)
                          7: 35382e38362e33382e302f32342d3234203d3e203138303432.roa (hash: x+wQOmPJBk402vFkKynJ1KMOhPDLrjCi5MsaMLe/QZo=)
                          8: 36312e36372e3132382e302f31372d3234203d3e203138303432.roa (hash: dEaBmauxf4unE9wq3sWsnP/wT/j+G25SU+pcomNXZfk=)
                          9: 36312e36372e3230372e302f32342d3234203d3e203138303432.roa (hash: ROMY0pvbK9pgNIJ5xOKM3zOAho89NDAHoNiicQ1PNBE=)
                          10: 35382e38362e34362e302f32342d3234203d3e203138303432.roa (hash: CxttYVdqWAvxvqNH+5SFaXVGIQqOZbmJDRdONZef3jA=)
                          11: 36312e36332e33322e302f31392d3234203d3e203138303432.roa (hash: kc3TwKGClBl/wdVIuv2SgomZm1PKm8wv7DjRE93+8K8=)
                          12: 35382e38362e35352e302f32342d3234203d3e203138303432.roa (hash: KkVa24xos9Fuk/zK5QNXL7bbcuon6oRl3ddHtvNm2Eg=)
                          13: 323430303a646634303a3a2f33322d3536203d3e203138303432.roa (hash: YiEwuYuhFx8r0w/P+IOD7Vs6XMMiZxdi3n1wKb5dRFI=)
                          14: 35382e38362e34362e302f32342d3234203d3e203138303138.roa (hash: PB/tlBG77QilX73fcMvhtdUuD6yCKwWXPHgYe1xTVKw=)
                          15: 36312e36372e3230392e302f32342d3234203d3e203138303432.roa (hash: ed4gPSkGNoF3zJyMxYUgrEQNItcgqcPgBUmqsSI2BBo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
                          rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0d:2a:81:0b:a7:24:58:66:fb:3b:2d:c8:94:fb:4d:4f:47:1a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
        Validity
            Not Before: Jun 17 02:36:39 2026 GMT
            Not After : Jun 18 05:52:39 2026 GMT
        Subject: CN=3B6B41958FB155C6680F9ECC8FA2A8B6E52BA805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:78:43:53:32:1c:7c:6b:13:a4:fb:1c:82:
                    84:82:77:e1:78:73:a0:3d:05:c2:8c:39:9d:ec:93:
                    e3:4e:fa:13:a8:6a:ae:70:98:1d:66:0b:c0:ca:17:
                    d0:6c:91:7d:ca:f1:45:5f:43:ef:03:00:15:4f:c2:
                    35:99:d7:42:06:73:4b:ae:59:0f:4c:d6:c6:0e:3d:
                    17:51:17:64:ca:00:38:ff:61:d6:5c:97:e3:c6:58:
                    a7:ae:f8:03:ca:90:42:88:e2:ca:73:62:93:39:af:
                    c2:90:53:8d:f5:88:29:1c:f4:84:5b:9d:50:2c:5f:
                    d2:c3:72:da:c6:60:9c:71:e1:bb:d5:b3:c3:14:59:
                    8f:57:d5:39:a3:74:8a:f3:01:c2:3b:2d:25:11:41:
                    d5:37:c2:fd:6d:c7:02:3d:d8:8e:4a:19:42:96:5b:
                    9f:b6:98:ff:ae:5a:62:55:af:32:6b:1e:9b:a3:62:
                    44:cc:df:e7:d3:71:7a:2e:1b:7c:52:38:19:c4:76:
                    1b:d7:9d:40:17:0f:c3:6f:d0:ae:80:74:fd:39:74:
                    9e:33:d7:b3:e2:58:ab:2e:be:f5:24:51:60:00:d0:
                    72:08:dd:da:07:13:f3:d0:8b:8f:14:09:6a:a6:4d:
                    08:ae:3c:73:78:3c:c4:33:b7:b8:85:ac:90:2b:9c:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6B:41:95:8F:B1:55:C6:68:0F:9E:CC:8F:A2:A8:B6:E5:2B:A8:05
            X509v3 Authority Key Identifier:
                keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:da:59:47:61:c8:9a:c3:1a:4a:4b:a9:10:b5:64:86:98:
         62:9e:b6:70:49:52:7f:da:1e:13:b1:7b:a7:12:32:04:30:34:
         59:e8:17:3f:d3:c6:c5:8b:be:13:12:84:5d:97:ae:44:dc:7c:
         0b:15:a4:f9:26:5c:42:c9:ae:1a:eb:1b:64:2e:d4:89:6c:2d:
         46:fd:f4:92:5e:c6:41:1c:e6:b8:db:3e:90:45:f7:30:9b:47:
         e3:d1:9c:aa:41:ea:c4:3a:83:64:b4:54:f3:cc:de:74:b1:ba:
         b7:a1:fb:7a:ea:8e:6c:6c:5f:4c:b4:70:d2:09:74:17:5f:f4:
         31:bf:f2:37:fd:93:09:15:39:1d:0f:6b:e9:79:5a:22:2c:43:
         81:b0:37:a5:66:bf:e3:44:0c:64:0d:d2:31:5d:bf:80:b6:4a:
         5f:3c:b4:76:21:57:e6:2b:57:ba:36:b4:70:f8:ad:9e:51:d3:
         3c:59:d1:fa:ab:45:18:03:72:e2:02:49:1c:01:b7:f1:8a:b6:
         b7:94:f3:73:0f:20:10:d6:a1:14:d4:cb:bb:76:d8:5b:2d:ff:
         dc:c0:48:eb:ff:60:7d:da:86:48:c9:a2:84:64:95:0a:8c:07:
         66:74:1e:29:45:35:61:3d:61:6e:8b:76:83:f8:7b:c0:2c:2c:
         15:c0:8f:2e
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUKA0qgQunJFhm+zstyJT7TU9HGoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC
N0VBMTU4OTAeFw0yNjA2MTcwMjM2MzlaFw0yNjA2MTgwNTUyMzlaMDMxMTAvBgNV
BAMTKDNCNkI0MTk1OEZCMTU1QzY2ODBGOUVDQzhGQTJBOEI2RTUyQkE4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUXhDUzIcfGsTpPscgoSCd+F4
c6A9BcKMOZ3sk+NO+hOoaq5wmB1mC8DKF9BskX3K8UVfQ+8DABVPwjWZ10IGc0uu
WQ9M1sYOPRdRF2TKADj/YdZcl+PGWKeu+APKkEKI4spzYpM5r8KQU431iCkc9IRb
nVAsX9LDctrGYJxx4bvVs8MUWY9X1TmjdIrzAcI7LSURQdU3wv1txwI92I5KGUKW
W5+2mP+uWmJVrzJrHpujYkTM3+fTcXouG3xSOBnEdhvXnUAXD8Nv0K6AdP05dJ4z
17PiWKsuvvUkUWAA0HII3doHE/PQi48UCWqmTQiuPHN4PMQzt7iFrJArnH17AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUO2tBlY+xVcZoD57Mj6KotuUrqAUwHwYDVR0j
BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv
OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0
QUI3RUExNTg5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvOTE0MDlEQTFDMUZBRjMxQUEz
REYyOTM2REFBQTJCNEFCN0VBMTU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIuR2llHYciawxpKS6kQ
tWSGmGKetnBJUn/aHhOxe6cSMgQwNFnoFz/TxsWLvhMShF2XrkTcfAsVpPkmXELJ
rhrrG2Qu1IlsLUb99JJexkEc5rjbPpBF9zCbR+PRnKpB6sQ6g2S0VPPM3nSxureh
+3rqjmxsX0y0cNIJdBdf9DG/8jf9kwkVOR0Pa+l5WiIsQ4GwN6Vmv+NEDGQN0jFd
v4C2Sl88tHYhV+YrV7o2tHD4rZ5R0zxZ0fqrRRgDcuICSRwBt/GKtreU83MPIBDW
oRTUy7t22Fst/9zASOv/YH3ahkjJooRklQqMB2Z0HilFNWE9YW6LdoP4e8AsLBXA
jy4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:14:14 2026 by rpki-client