Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft
File:                     146BBB242D194BB38E4863F248016CC51755565D.mft (raw, json)
Hash identifier:          iyP/Jekj6tZbKsnkPkhe63w94YzaXdpnED2+uA09Mkc=
Subject key identifier:   2C:B0:60:F6:AE:C6:0E:5C:BA:C6:F3:2D:F5:88:23:DF:C8:21:F6:2D
Authority key identifier: 14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D
Certificate issuer:       /CN=146BBB242D194BB38E4863F248016CC51755565D
Certificate serial:       195393AA0A253E41179DC5031972575E3F0F325E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft
Manifest number:          6A
Signing time:             Wed 29 Jul 2026 00:10:16 +0000
Manifest this update:     Wed 29 Jul 2026 00:05:16 +0000
Manifest next update:     Thu 30 Jul 2026 02:04:16 +0000
Files and hashes:         1: 146BBB242D194BB38E4863F248016CC51755565D.crl (hash: I4sGOBZYv0eLiX9pGZll8OvbJTD3ezejkoJO4/hxSRE=)
                          2: 3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa (hash: HUxXTX4AEZCdEmoKnBU0/T6Q3Fkfl/P32GPMMl4DSA0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:93:aa:0a:25:3e:41:17:9d:c5:03:19:72:57:5e:3f:0f:32:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146BBB242D194BB38E4863F248016CC51755565D
        Validity
            Not Before: Jul 29 00:05:16 2026 GMT
            Not After : Jul 30 02:04:16 2026 GMT
        Subject: CN=2CB060F6AEC60E5CBAC6F32DF58823DFC821F62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:73:82:33:97:ff:6c:d5:21:18:31:a4:26:
                    bf:2b:e6:66:60:bd:ed:00:2c:e8:6c:f6:98:ea:81:
                    d7:54:56:35:77:ad:9a:d2:ec:20:ed:20:23:04:65:
                    59:aa:3d:26:6c:95:22:95:97:9d:52:b7:19:a5:bf:
                    62:31:cc:c1:f1:c5:aa:f5:72:66:21:69:43:a5:4c:
                    4a:83:eb:05:0a:10:b5:dc:00:7a:5e:39:b3:09:f4:
                    3d:a6:6c:fc:fd:5c:d2:4b:14:55:ac:eb:fb:51:b1:
                    ff:44:f0:0f:0a:a0:2a:e9:8d:d2:f9:55:1c:33:ea:
                    d8:ed:c0:ec:92:fa:1f:7f:79:d6:a5:40:93:cd:d7:
                    99:ec:45:85:c2:11:80:3c:eb:06:f0:1f:56:df:af:
                    ab:b7:88:24:67:ad:98:a9:a3:9e:a4:23:e0:66:1c:
                    4d:55:7e:e2:78:fc:92:fb:75:c0:af:29:6a:8d:38:
                    bc:8d:41:80:92:02:43:99:34:74:cd:3a:1c:a2:64:
                    6f:de:e7:d0:1b:c3:f6:fd:6b:92:4e:30:00:e1:75:
                    32:e4:95:26:e5:0b:a7:e1:4e:47:6d:b8:5b:8a:fc:
                    25:33:3f:c3:30:47:08:a8:1e:40:2b:13:e1:0d:7e:
                    df:12:89:52:38:77:5a:da:b7:7f:7a:c2:2d:7a:4b:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:60:F6:AE:C6:0E:5C:BA:C6:F3:2D:F5:88:23:DF:C8:21:F6:2D
            X509v3 Authority Key Identifier:
                keyid:14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:06:d3:77:2f:53:cd:9b:e4:6e:10:68:ae:c0:a3:85:a9:
         35:46:74:40:b7:f9:36:01:de:c9:f0:65:11:e7:c4:47:54:a1:
         4c:dc:4f:48:fa:3c:dc:04:c2:bf:7e:9c:30:cb:45:3d:a8:b3:
         c0:61:ed:c6:11:12:d3:a2:97:ff:9c:ca:b1:08:bb:97:cd:3d:
         4e:5c:aa:d0:09:ab:2f:f2:a4:09:f4:ec:da:00:84:6c:47:35:
         1f:39:33:2d:92:a5:ea:57:91:a6:c3:4e:83:19:36:f2:77:5a:
         52:99:1f:fc:0a:d0:8d:aa:84:79:2d:17:80:7c:b9:4a:b7:5a:
         c1:7c:1f:2a:3c:bc:fe:3b:0c:44:10:ac:6f:a0:f4:49:94:f2:
         dc:c8:73:cc:ec:50:26:0a:51:8c:2a:87:3d:c4:b4:e8:77:85:
         aa:80:1b:2a:f7:1f:f9:48:a1:ce:c2:3f:81:6b:fc:fd:c4:8f:
         a0:31:dd:db:bf:67:d9:b5:10:01:eb:7e:51:81:8c:57:66:2d:
         62:86:89:60:e7:68:e2:33:59:62:87:78:7f:31:4c:29:47:87:
         df:cc:3a:81:cc:fc:92:89:26:85:02:66:fc:82:4d:b7:ab:c2:
         a8:27:5a:ae:9b:df:5b:77:de:9c:dd:85:f4:b2:dc:76:23:49:
         2d:43:c2:05
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUGVOTqgolPkEXncUDGXJXXj8PMl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ2QkJCMjQyRDE5NEJCMzhFNDg2M0YyNDgwMTZDQzUx
NzU1NTY1RDAeFw0yNjA3MjkwMDA1MTZaFw0yNjA3MzAwMjA0MTZaMDMxMTAvBgNV
BAMTKDJDQjA2MEY2QUVDNjBFNUNCQUM2RjMyREY1ODgyM0RGQzgyMUY2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSnOCM5f/bNUhGDGkJr8r5mZg
ve0ALOhs9pjqgddUVjV3rZrS7CDtICMEZVmqPSZslSKVl51Stxmlv2IxzMHxxar1
cmYhaUOlTEqD6wUKELXcAHpeObMJ9D2mbPz9XNJLFFWs6/tRsf9E8A8KoCrpjdL5
VRwz6tjtwOyS+h9/edalQJPN15nsRYXCEYA86wbwH1bfr6u3iCRnrZipo56kI+Bm
HE1VfuJ4/JL7dcCvKWqNOLyNQYCSAkOZNHTNOhyiZG/e59Abw/b9a5JOMADhdTLk
lSblC6fhTkdtuFuK/CUzP8MwRwioHkArE+ENft8SiVI4d1rat396wi16S5D1AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQULLBg9q7GDly6xvMt9Ygj38gh9i0wHwYDVR0j
BBgwFoAUFGu7JC0ZS7OOSGPySAFsxRdVVl0wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFJRk9P
RC8wLzE0NkJCQjI0MkQxOTRCQjM4RTQ4NjNGMjQ4MDE2Q0M1MTc1NTU2NUQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMTQ2QkJCMjQyRDE5NEJCMzhFNDg2M0YyNDgw
MTZDQzUxNzU1NTY1RC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01BSUZPT0QvMC8xNDZCQkIyNDJE
MTk0QkIzOEU0ODYzRjI0ODAxNkNDNTE3NTU1NjVELm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp8G03cv
U82b5G4QaK7Ao4WpNUZ0QLf5NgHeyfBlEefER1ShTNxPSPo83ATCv36cMMtFPaiz
wGHtxhES06KX/5zKsQi7l809Tlyq0AmrL/KkCfTs2gCEbEc1HzkzLZKl6leRpsNO
gxk28ndaUpkf/ArQjaqEeS0XgHy5SrdawXwfKjy8/jsMRBCsb6D0SZTy3MhzzOxQ
JgpRjCqHPcS06HeFqoAbKvcf+UihzsI/gWv8/cSPoDHd279n2bUQAet+UYGMV2Yt
YoaJYOdo4jNZYod4fzFMKUeH38w6gcz8kokmhQJm/IJNt6vCqCdarpvfW3fenN2F
9LLcdiNJLUPCBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:48 2026 by rpki-client