Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          92tfe5volaShn3oLvuMYTE13f1nCuRatUZARLqerz9A=
Subject key identifier:   F3:CC:7E:06:B9:A9:E5:34:8D:44:0A:1F:14:50:10:47:94:26:EE:D9
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       0FB21C9BB56D7AC82DCE531B75F28F4B0C61F8E3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0206
Signing time:             Mon 21 Sep 2026 11:47:04 +0000
Manifest this update:     Mon 21 Sep 2026 11:42:04 +0000
Manifest next update:     Tue 22 Sep 2026 13:02:04 +0000
Files and hashes:         1: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          2: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          3: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          4: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          5: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          6: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          7: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          8: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          9: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          10: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          11: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          12: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          13: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          14: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: wSVRLlZj1+SxE91yuJ8dUs1gOiMRAhBGxvufEWVgG6Q=)
                          15: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          16: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          17: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          18: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          19: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          20: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          21: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          22: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          23: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          24: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:1c:9b:b5:6d:7a:c8:2d:ce:53:1b:75:f2:8f:4b:0c:61:f8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Sep 21 11:42:04 2026 GMT
            Not After : Sep 22 13:02:04 2026 GMT
        Subject: CN=F3CC7E06B9A9E5348D440A1F145010479426EED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:42:da:e3:b4:e8:c3:15:36:39:15:38:25:
                    84:08:85:2c:b4:63:94:3d:f5:c3:dc:e4:ea:7c:59:
                    90:4d:d9:7e:ea:e1:80:b0:35:ec:c4:98:0d:63:37:
                    7b:0a:7f:4c:8d:84:97:dc:1e:06:58:b8:f9:68:9a:
                    79:cd:d1:0b:bb:0f:a6:d5:a6:bd:51:07:96:22:ea:
                    2b:2b:f0:2d:5d:c9:67:88:9c:d3:5d:bb:8d:2b:55:
                    74:52:6e:ae:a7:9f:7f:1f:45:fe:3e:d7:c1:59:0b:
                    a5:44:8b:b1:a8:4d:1b:f4:9e:fc:9e:8a:54:87:1c:
                    92:c6:41:73:ab:f6:3b:5b:00:ed:48:87:35:72:e6:
                    9c:0a:0a:4f:a6:47:82:5d:23:af:58:a2:ef:39:8e:
                    0b:a9:ab:68:64:fb:58:8a:cf:d6:f1:bd:6d:32:ae:
                    63:53:e1:63:b5:15:7d:80:b8:58:af:ae:f4:68:73:
                    d5:61:3c:98:50:1c:ed:48:92:4c:4d:d6:ef:1b:73:
                    71:0c:b2:06:d3:35:08:ca:56:65:6d:a5:91:69:3a:
                    a6:4b:31:0f:01:a2:8f:cd:d6:8e:ed:ee:48:78:e2:
                    4a:47:0c:73:67:bb:c2:75:24:8c:10:58:aa:7a:7d:
                    3b:57:37:fe:f7:ea:01:be:f2:e3:63:79:cf:60:90:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:7E:06:B9:A9:E5:34:8D:44:0A:1F:14:50:10:47:94:26:EE:D9
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:2b:c8:d4:2f:84:b0:d9:47:bd:b3:7e:f0:40:cf:1e:e2:
         1d:e0:dd:69:08:66:07:56:ea:a3:53:a5:21:50:0f:94:02:b6:
         15:e3:25:ba:cb:77:9e:83:58:63:e6:3a:17:5f:e3:d9:37:9f:
         a3:6a:66:59:c0:a7:a0:3c:82:1a:54:ee:3e:af:78:5f:70:fb:
         76:bc:ba:05:84:90:76:f2:b3:96:39:2e:b1:18:29:65:e5:98:
         ab:53:b4:ba:d8:29:18:48:4c:5e:14:7d:4a:45:be:27:7f:88:
         b8:91:b2:16:ec:0a:86:53:ff:eb:9a:7b:fe:5b:8f:6e:d1:58:
         18:a5:50:af:04:bc:4d:bf:eb:95:96:45:95:47:71:17:6d:f8:
         97:bf:14:2d:4b:ab:f2:62:bf:53:31:df:87:b9:36:2a:62:82:
         ed:3c:6d:bb:78:b1:20:9d:e0:08:c5:3b:00:cf:68:06:7f:0b:
         b1:aa:c8:55:a3:6c:e1:44:06:4c:b4:1b:28:7a:e0:9f:f7:e5:
         0a:d4:f9:4a:35:8f:d3:71:82:04:73:8d:4b:63:a4:a3:f1:a7:
         18:12:97:f6:d1:bd:93:6b:f3:4c:12:ad:bc:e3:77:d6:14:4f:
         55:2f:ae:af:dd:32:b4:fe:5f:22:7c:7e:08:97:f3:cc:9f:92:
         a2:33:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:56 2026 by rpki-client