Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          9sE9LABYDbIlFlvLGrJ2hNOnzN+UMc8p4DryEBLWhR8=
Subject key identifier:   B3:3E:3C:55:E4:25:74:99:48:3B:9D:7A:1A:9F:16:A7:11:84:26:10
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       18023FBEF7CAEF28844669C2049C3C5CC35CB56D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          024F
Signing time:             Sun 15 Nov 2026 07:22:26 +0000
Manifest this update:     Sun 15 Nov 2026 07:17:26 +0000
Manifest next update:     Mon 16 Nov 2026 10:30:26 +0000
Files and hashes:         1: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          2: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          3: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          4: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          5: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          6: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          7: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          8: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          9: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          10: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          11: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          12: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          13: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          14: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          15: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          16: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          17: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          18: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          19: AS9918.roa (hash: 2refZs4f99sQRMmyUPPf2jLvHWdKtcX8LhYPrjISptU=)
                          20: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          21: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: Mj8+6mcLJ6iPOsxEILgQe4o6bnCxI+RA4Wh8ME6ZRDk=)
                          22: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          23: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          24: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:02:3f:be:f7:ca:ef:28:84:46:69:c2:04:9c:3c:5c:c3:5c:b5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Nov 15 07:17:26 2026 GMT
            Not After : Nov 16 10:30:26 2026 GMT
        Subject: CN=B33E3C55E4257499483B9D7A1A9F16A711842610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:35:50:20:77:31:e5:4c:13:27:4f:6a:31:
                    30:c1:76:a1:e8:b2:ac:16:28:08:35:2b:10:d9:a3:
                    4e:14:ab:36:5e:e0:47:83:e8:48:73:8d:d9:f3:a3:
                    93:d7:ae:97:9c:05:51:44:7b:41:37:f0:e3:7e:d8:
                    da:50:a6:7e:5d:f7:37:72:2c:b7:16:1e:c7:5f:bb:
                    2d:91:ac:5a:fa:5b:80:55:c5:88:94:0b:99:c1:15:
                    19:c8:f6:27:38:b2:ac:61:92:4c:12:97:cb:67:5e:
                    89:81:c1:1a:64:4e:e8:5f:1f:ff:2e:4e:9f:93:34:
                    28:aa:a7:05:99:00:b3:bb:82:f7:00:0b:81:1b:9b:
                    fe:14:8f:26:d0:72:ba:81:20:2f:c9:d4:f8:86:2e:
                    13:22:4b:f5:1b:b4:d0:4b:51:f3:c2:5b:5b:ea:45:
                    d1:12:93:df:06:f7:56:18:e9:e6:a4:df:92:48:b6:
                    36:b3:a3:66:f6:e9:ca:ae:c9:df:c6:fd:ff:10:74:
                    97:56:a2:81:23:fc:34:c7:f9:11:0b:11:ea:ac:8e:
                    0b:84:25:32:c8:db:6c:78:cd:5b:17:73:ba:5f:e6:
                    d1:d7:6d:9c:8d:7b:a3:42:3e:e0:be:41:44:a6:ec:
                    b1:b7:cf:e9:87:d0:88:8c:8e:a4:76:8d:ea:43:57:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:3C:55:E4:25:74:99:48:3B:9D:7A:1A:9F:16:A7:11:84:26:10
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:78:70:da:e6:6b:dd:54:04:53:e5:8a:76:08:d2:e5:2b:a8:
         e1:fe:31:95:2e:21:43:6f:2c:19:0f:e5:96:f4:2d:57:47:ab:
         99:84:31:e2:ff:e9:05:a1:5a:c6:0d:70:a4:49:74:7e:11:39:
         0a:5b:b2:47:00:a5:b7:cc:47:94:4c:69:56:ff:97:44:6f:39:
         c9:07:24:b7:e9:32:d8:ee:74:5e:f7:18:9f:4c:89:23:c9:17:
         29:ca:60:e6:03:b3:54:89:90:2d:6f:d7:76:c0:cc:9b:25:c5:
         c0:28:32:e8:44:84:0e:0a:a7:0d:a5:a5:2e:f8:95:a7:bd:cc:
         29:73:f0:b2:7f:ae:27:af:64:3b:6f:7b:2a:15:b9:94:6c:57:
         8e:a2:73:a8:c5:1c:3c:1d:fd:50:f0:48:65:a5:c9:c3:ce:1c:
         72:82:f2:dd:94:e1:1e:08:75:c8:a8:4e:c0:ca:4a:b9:88:25:
         8a:8f:66:2b:e9:a5:60:e9:b4:95:fa:86:49:83:aa:00:d7:92:
         a3:26:4d:90:09:7d:f6:89:e4:5d:f1:48:e5:77:77:95:03:35:
         89:19:40:53:05:f2:d4:73:92:5e:6a:f1:3f:48:00:34:3b:d5:
         3e:15:e0:e8:9a:da:dc:a4:94:51:3f:66:e7:34:55:9c:21:7d:
         ff:2e:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:26:14 2026 by rpki-client