Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
File:                     049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft (raw, json)
Hash identifier:          pM6OcziU0AfVFmddD1WZ9SZEDtrna5lgvJfb1JzjkAQ=
Subject key identifier:   B9:74:2B:D6:AC:E0:17:58:35:04:E4:9E:E9:BC:03:0D:C7:86:43:F6
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Certificate issuer:       /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial:       331860A0FC57C62FB8BF50C1F460F1687B929BB9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
Manifest number:          CE
Signing time:             Mon 21 Sep 2026 17:21:42 +0000
Manifest this update:     Mon 21 Sep 2026 17:16:42 +0000
Manifest next update:     Tue 22 Sep 2026 19:33:42 +0000
Files and hashes:         1: 3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa (hash: IN0+/ooOlPpq110sSFYkiYlC1Kewj2Ug+tzHpY6kPI0=)
                          2: 3230322e3135312e34382e302f32302d3234203d3e203138303432.roa (hash: 0Sm3TU3ucHMOKOYa+d48jFM4xmkHZ7KXpkQsW/3BXuk=)
                          3: 3131392e31342e3132382e302f31372d3137203d3e2039343136.roa (hash: etypLFOH/+2ky9YLH0gkWFgtIbtkxf0DGdzRztYvnQ4=)
                          4: 3132342e3135352e3132382e302f31392d3234203d3e2039343136.roa (hash: 893YGx4CNG5anpdx2bAhSvZbR8KtZI1gTBdgDg7AhWU=)
                          5: 3232302e3135372e3131322e302f32302d3234203d3e2039343136.roa (hash: MV88dvBez2VEHGQu9vHIsSHLmR+FC/BkqQXgQl6RGGE=)
                          6: 3232302e3135372e3131322e302f32302d3234203d3e203138303432.roa (hash: wLcmvrG3+9+VQcoGh/RouCPLhBf4BpOjD6kqqbR7944=)
                          7: 3131352e34332e302e302f31362d3234203d3e2039343136.roa (hash: ccHKYIH1onediXgVYiKh7EHNnwTYWQJoE9EhH+EUTBk=)
                          8: 3132332e3235322e36342e302f31382d3138203d3e2039343136.roa (hash: pbThQhpNTSnJMBASZ2s2lhxD43G2mkYc9iaYlmcl8J4=)
                          9: 3132332e3235322e302e302f31372d3234203d3e2039343136.roa (hash: 8JxW+fPG8BWMJ3eQJdeafOLn1uT7L6DDouqnppnhNkg=)
                          10: 3230322e3135312e34382e302f32302d3234203d3e2039343136.roa (hash: s8f8Uct02N0OIWDDH0xlBcjycL5P1/sP2dObZ84wjW8=)
                          11: 3132332e3235322e302e302f31382d3138203d3e2039343136.roa (hash: ERhjaQIXwvyOB2XFTJS7sS0ge8NmOyER/FKPC6xegWQ=)
                          12: 3131352e34332e302e302f31362d3234203d3e203138303432.roa (hash: 8CdvHvNqCGbHptsBsqmVxO/ddNWB2NuNellpQMuTOqQ=)
                          13: 3131392e31342e302e302f31362d3234203d3e2039343136.roa (hash: ogg05JqGwuh8Rk6w6nYH2L3SIwxm+KuAyegtBtcSZ9I=)
                          14: 3131392e31342e3132382e302f31372d3137203d3e203138303432.roa (hash: Jdj9OnL+nvn+5vJ82BuOV+iDpLKwfqTLwAmIzmHjSjM=)
                          15: 3132332e3235322e302e302f31372d3234203d3e203138303432.roa (hash: eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=)
                          16: 3131392e31342e302e302f31372d3137203d3e2039343136.roa (hash: E8EzQLG5CgTBVviuAYVjkJ5BeSPp51cZIv1bKC3xlIU=)
                          17: 3131352e34332e302e302f31372d3137203d3e203138303432.roa (hash: 5gZY3nEfq5SmiFBc4GkzG7kzPKYWP/eJ/0s+gE8A0xM=)
                          18: 3131352e34332e302e302f31372d3137203d3e2039343136.roa (hash: 8sPfy+KBH9Iy3oz6z3pK10IfnFdOzftlkUor0sZFlgE=)
                          19: 3131352e34332e3132382e302f31372d3137203d3e2039343136.roa (hash: St+0TPB6YfmeZtsKtmzv7EeJUGiMlhWPr0IbfUc/xZE=)
                          20: 3131392e31342e302e302f31372d3137203d3e203138303432.roa (hash: izV5LKXyRkMjgziCJgXNzX9mmTRUejlC9TqllBbTJjE=)
                          21: 3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa (hash: 2exWg2jS2ItjCPg0xipUoannDwWvVERhxvaeyMJgPbs=)
                          22: 3132332e3235322e36342e302f31382d3138203d3e2039393234.roa (hash: yJVJ6C+sbqUiX3chBCIQtUJyWlloqJi99X6AD9sg0ZA=)
                          23: 3132322e39392e302e302f31382d3234203d3e203138303432.roa (hash: Tz0cSD05i3OCST0PKGEitL9Cea02/7iZZXiFw8rsfjE=)
                          24: 3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa (hash: P9ySgHddPveY+6EtVJoOuOaViOtED+utlhZfdlH05gM=)
                          25: 3131392e31342e302e302f31362d3234203d3e203138303432.roa (hash: HbGluHb1NsEVJLOmIp1khnjJQIuZhHoSydxnFJStI9Y=)
                          26: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl (hash: FIatl6ccz05PZ97e6zMasYXkVAmBSHGlurlqoMiNaTk=)
                          27: 3131352e34332e3132382e302f31372d3137203d3e203138303432.roa (hash: kgd4Oaxwu9ubZEjWN6uD3zvpYDcWGuuxHkyqviavhU8=)
                          28: 3132322e39392e302e302f31382d3234203d3e2039343136.roa (hash: OPSFIJrW3fmKKJ0pvE28KRzPkCAaJ+W8WzXaI+ME20c=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
                          rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 19:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:18:60:a0:fc:57:c6:2f:b8:bf:50:c1:f4:60:f1:68:7b:92:9b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
        Validity
            Not Before: Sep 21 17:16:42 2026 GMT
            Not After : Sep 22 19:33:42 2026 GMT
        Subject: CN=B9742BD6ACE017583504E49EE9BC030DC78643F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:52:91:26:47:7e:66:39:65:d8:d5:53:26:
                    8a:c1:c5:71:cd:c6:8f:f5:08:e8:31:20:83:70:7a:
                    25:1f:15:6a:94:ac:26:76:36:f1:e3:91:0f:5e:40:
                    84:91:00:c5:90:c7:64:24:f9:bc:ba:32:ca:05:49:
                    af:e3:32:85:96:a3:42:ba:25:80:65:3a:1f:ee:7e:
                    03:82:6e:5e:a6:4e:31:ad:d6:4b:be:07:c7:f2:30:
                    77:c2:d5:68:d5:53:a4:f2:75:0a:ff:70:49:ae:db:
                    5a:a7:2a:fa:84:b4:3a:c5:97:36:56:8d:52:f7:16:
                    a9:0a:5c:ac:85:91:ef:9c:d4:72:e6:78:a7:60:ea:
                    f6:08:af:d9:24:dc:21:8c:48:b7:d0:0f:b7:f9:e6:
                    61:79:5e:84:30:bc:ad:0f:25:70:18:33:3d:39:ff:
                    b3:9f:ad:96:e9:77:ea:15:fe:2d:3d:c8:e9:2b:65:
                    9e:17:91:1b:ed:d6:2d:17:34:3b:9b:d3:e4:03:22:
                    08:d6:c0:eb:6b:d3:5d:c4:c2:72:ff:46:b3:f0:1b:
                    b7:f9:6c:a6:ad:a8:f1:4f:79:a1:92:4c:78:22:41:
                    0e:89:06:87:d2:f4:fd:c5:ef:98:b8:d9:09:0c:19:
                    0b:cb:12:86:cd:9f:96:a5:31:59:0f:68:cb:e5:18:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:2B:D6:AC:E0:17:58:35:04:E4:9E:E9:BC:03:0D:C7:86:43:F6
            X509v3 Authority Key Identifier:
                keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:19:c6:eb:8c:a1:c4:c7:5f:ff:0e:dd:4b:cd:44:7c:b1:
         19:56:ca:1d:85:d0:f0:42:f6:5b:8e:03:70:20:b0:2b:c3:4e:
         e1:cb:65:d3:2c:6a:1f:fe:eb:1a:c5:41:51:c8:53:b0:0a:28:
         35:a1:80:a7:be:ff:1e:1b:1b:2a:3b:2e:a9:b5:f9:95:14:d1:
         71:f2:55:b8:60:b8:0b:3f:c7:bd:42:cb:35:0e:cd:bb:ff:a0:
         8b:fa:94:ae:3c:85:9f:30:34:6d:51:d0:53:a9:fe:08:2f:a9:
         8f:26:55:b1:79:ff:69:fe:9f:0e:52:f2:50:4d:25:dd:43:ea:
         9f:44:28:d2:79:96:fe:69:f9:6b:48:79:83:58:21:05:1e:cc:
         ba:d9:52:dd:c6:b1:4d:0e:2c:df:74:ec:68:c3:c0:97:04:4f:
         6f:9f:74:27:54:8d:c6:f2:f7:f2:ce:f7:54:51:48:13:8e:38:
         cc:a2:42:8c:f2:06:80:0f:e6:36:dc:77:68:85:54:f8:c4:29:
         8c:3b:d4:ce:32:fd:ca:14:30:c4:fa:87:b3:95:32:92:9d:7b:
         33:59:89:16:bf:81:a8:bc:c4:dc:a4:a5:2c:1d:d9:5d:8e:18:
         7e:b3:08:69:29:c8:51:41:5a:56:ab:cd:e4:5e:98:30:a3:0b:
         54:da:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:32 2026 by rpki-client