Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File:                     F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier:          vgn5qycpFZvQha4STAtvF7MTXuj23vYp1oWt9G2dWF0=
Subject key identifier:   4D:25:49:60:FA:BB:63:41:17:1B:19:AB:00:F6:F3:90:92:64:85:9C
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer:       /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial:       29F9A0A2ADED24F9D62DCF36D54E281B1A23C82E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number:          6D
Signing time:             Tue 28 Jul 2026 06:52:45 +0000
Manifest this update:     Tue 28 Jul 2026 06:47:45 +0000
Manifest next update:     Wed 29 Jul 2026 09:48:45 +0000
Files and hashes:         1: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
                          2: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
                          3: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
                          4: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: 2VjiP0jtmIdNTYlOO6idyAP0MGQqrTQqvawPvlDfqjs=)
                          5: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
                          rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:a0:a2:ad:ed:24:f9:d6:2d:cf:36:d5:4e:28:1b:1a:23:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
        Validity
            Not Before: Jul 28 06:47:45 2026 GMT
            Not After : Jul 29 09:48:45 2026 GMT
        Subject: CN=4D254960FABB6341171B19AB00F6F3909264859C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:b2:d0:5f:f8:5a:2c:06:05:68:e8:fc:a9:
                    53:cf:30:1e:05:9d:1d:30:36:1f:dc:b3:1f:9d:8a:
                    15:f9:64:29:37:15:43:73:5c:81:7d:f8:e2:81:a1:
                    01:6b:3e:14:72:ad:9a:bc:8b:ab:86:06:18:8b:65:
                    fc:e3:b0:08:b9:c7:8f:73:91:92:a5:47:16:ad:ed:
                    ce:a8:b6:cd:63:69:45:b3:7f:48:6e:46:64:9f:5d:
                    35:4b:0f:12:93:87:a0:22:fb:8c:a9:a7:73:39:07:
                    39:93:01:18:c4:d9:c4:14:38:83:9a:3f:9c:d2:56:
                    11:9a:48:0c:da:35:6d:a9:f4:1a:57:b0:5f:ed:05:
                    63:7c:fe:f2:1f:90:ce:14:ac:b1:2e:bd:06:e5:5a:
                    69:85:88:a0:23:54:d2:9a:a5:35:7e:db:fc:5c:f4:
                    db:c9:f2:09:cc:b8:93:ab:6e:ec:4a:7c:78:b9:01:
                    1d:54:73:6b:9b:82:ee:e3:7d:ac:4b:b7:2b:2e:01:
                    36:f2:a8:23:4d:e6:bb:9e:34:30:63:95:c8:78:43:
                    42:37:e2:96:d9:c7:e6:ed:d7:be:af:88:c9:ec:e6:
                    dd:31:31:d3:a9:5c:b1:92:8f:ce:e6:8c:aa:aa:cc:
                    34:36:24:89:44:98:c6:a1:01:b6:29:99:b0:ac:7b:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:49:60:FA:BB:63:41:17:1B:19:AB:00:F6:F3:90:92:64:85:9C
            X509v3 Authority Key Identifier:
                keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:50:31:99:e5:df:ba:4d:1b:79:94:bb:51:21:08:3b:12:
         27:6b:5c:8c:74:23:8a:09:b1:41:ec:79:ad:96:9f:5f:fe:93:
         e2:f3:9a:5c:09:92:5a:43:bf:5d:06:df:69:a6:1d:74:35:d8:
         85:50:78:4a:7d:26:5a:8c:91:5a:a4:0f:ef:3f:db:69:36:b2:
         3f:89:bc:fd:4e:56:3f:46:cf:12:cd:dd:58:4a:c2:a2:be:a7:
         73:38:d9:37:14:93:4d:4e:22:4f:e1:3a:1c:cb:d2:fb:4e:97:
         1b:b7:94:cb:e0:bd:60:0c:db:62:56:92:2f:04:31:cc:de:f1:
         00:bc:22:f6:6b:51:bd:2a:94:9c:88:8e:90:b2:d1:1b:80:87:
         75:82:cd:40:c6:ac:30:7a:05:19:a1:7e:bb:0b:58:0a:99:a5:
         d3:65:73:33:44:19:aa:0f:76:88:13:bd:ed:71:21:9d:d7:52:
         9c:a5:85:7f:2d:02:99:f6:32:61:14:a7:e0:83:a7:fd:62:c1:
         80:50:d5:55:32:00:ee:06:84:46:ce:e5:e0:7c:09:07:d3:36:
         6c:46:63:59:4a:72:64:d6:d0:1c:5e:cd:89:9c:c2:f1:c9:c0:
         04:f0:ee:9d:12:5e:a1:b6:2d:84:0b:6b:11:45:56:79:33:91:
         93:bd:19:18
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUKfmgoq3tJPnWLc821U4oGxojyC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDRUFFNEFFMTNBNzFBRjZBMDcwOUE0QzMwMEFEQTQ2
MjNBMkNBQTAeFw0yNjA3MjgwNjQ3NDVaFw0yNjA3MjkwOTQ4NDVaMDMxMTAvBgNV
BAMTKDREMjU0OTYwRkFCQjYzNDExNzFCMTlBQjAwRjZGMzkwOTI2NDg1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KrLQX/haLAYFaOj8qVPPMB4F
nR0wNh/csx+dihX5ZCk3FUNzXIF9+OKBoQFrPhRyrZq8i6uGBhiLZfzjsAi5x49z
kZKlRxat7c6ots1jaUWzf0huRmSfXTVLDxKTh6Ai+4ypp3M5BzmTARjE2cQUOIOa
P5zSVhGaSAzaNW2p9BpXsF/tBWN8/vIfkM4UrLEuvQblWmmFiKAjVNKapTV+2/xc
9NvJ8gnMuJOrbuxKfHi5AR1Uc2ubgu7jfaxLtysuATbyqCNN5rueNDBjlch4Q0I3
4pbZx+bt176viMns5t0xMdOpXLGSj87mjKqqzDQ2JIlEmMahAbYpmbCse/bxAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUTSVJYPq7Y0EXGxmrAPbzkJJkhZwwHwYDVR0j
BBgwFoAU8c6uSuE6ca9qBwmkwwCtpGI6LKowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlUQUNN
REMvMC9GMUNFQUU0QUUxM0E3MUFGNkEwNzA5QTRDMzAwQURBNDYyM0EyQ0FBLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YxQ0VBRTRBRTEzQTcxQUY2QTA3MDlBNEMz
MDBBREE0NjIzQTJDQUEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRBQ01EQy8wL0YxQ0VBRTRB
RTEzQTcxQUY2QTA3MDlBNEMzMDBBREE0NjIzQTJDQUEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaAFAx
meXfuk0beZS7USEIOxIna1yMdCOKCbFB7Hmtlp9f/pPi85pcCZJaQ79dBt9pph10
NdiFUHhKfSZajJFapA/vP9tpNrI/ibz9TlY/Rs8Szd1YSsKivqdzONk3FJNNTiJP
4Tocy9L7Tpcbt5TL4L1gDNtiVpIvBDHM3vEAvCL2a1G9KpSciI6QstEbgId1gs1A
xqwwegUZoX67C1gKmaXTZXMzRBmqD3aIE73tcSGd11KcpYV/LQKZ9jJhFKfgg6f9
YsGAUNVVMgDuBoRGzuXgfAkH0zZsRmNZSnJk1tAcXs2JnMLxycAE8O6dEl6hti2E
C2sRRVZ5M5GTvRkY
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:14 2026 by rpki-client