Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          cKMZZRHDlFmMyEK3rTtVQmAEH/6Si05q1xMqy1Wlb+k=
Subject key identifier:   58:2D:E6:F3:8F:E0:E6:0F:0F:59:6E:6B:FF:6C:DE:C9:75:29:83:8D
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       1B68B37B81062D85A05A87EEBA61DAE36A0BD1A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          D8
Signing time:             Fri 12 Jun 2026 15:12:01 +0000
Manifest this update:     Fri 12 Jun 2026 15:07:01 +0000
Manifest next update:     Sat 13 Jun 2026 18:41:01 +0000
Files and hashes:         1: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          2: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          3: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
                          4: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          5: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          6: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          7: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          8: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          9: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          10: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          11: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          12: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          13: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          14: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          15: AS131611.roa (hash: X08FG+CzePQMO2I41W4nRys+J1Le2sDyG4TRj9U/xtA=)
                          16: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          17: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: tWWZBlgOQvdW8on/HGjGPd3PBtzLwy9mxsYYfL0eTng=)
                          18: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          19: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 18:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:68:b3:7b:81:06:2d:85:a0:5a:87:ee:ba:61:da:e3:6a:0b:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Jun 12 15:07:01 2026 GMT
            Not After : Jun 13 18:41:01 2026 GMT
        Subject: CN=582DE6F38FE0E60F0F596E6BFF6CDEC97529838D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:b6:39:4b:4d:0b:dc:72:3b:bf:9e:03:9a:
                    57:3b:e9:37:e3:d1:25:52:29:6f:d0:33:c1:e2:3b:
                    86:f4:e5:cc:7b:25:88:56:32:3b:45:d7:0d:1f:64:
                    e1:cd:24:ef:61:48:e3:02:3f:2d:08:17:2b:05:59:
                    f6:d6:bb:b8:d4:57:45:4b:03:9b:a5:7c:1f:43:7e:
                    a6:eb:da:0d:b4:e5:84:49:98:2a:1f:77:00:e1:5a:
                    96:d4:6f:ed:0e:a8:77:bb:c8:66:f3:f7:98:47:46:
                    c4:9f:8b:b0:eb:f7:06:b6:c8:e3:83:99:0b:72:cc:
                    d4:0e:50:17:b6:01:04:e5:1b:5e:d7:7f:db:c2:2f:
                    85:39:ad:3a:df:be:eb:63:92:e0:31:f4:20:4d:84:
                    57:cf:27:9c:48:0e:6d:6c:dc:e0:b8:13:c0:d0:73:
                    d5:62:4e:6a:3b:34:24:65:ab:13:7b:75:54:bc:8e:
                    23:ef:05:06:54:08:28:d6:24:45:fe:ec:ed:7f:ac:
                    96:55:25:03:85:b1:0a:9a:6b:f8:aa:6a:62:5a:f2:
                    e0:43:93:b4:bf:9d:fb:d4:87:e7:94:ab:15:a4:26:
                    30:37:e6:e7:2b:65:e4:95:00:87:37:08:fd:f9:91:
                    16:a1:91:d7:14:1c:ba:cd:ac:24:0c:41:45:86:a1:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:E6:F3:8F:E0:E6:0F:0F:59:6E:6B:FF:6C:DE:C9:75:29:83:8D
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:d5:78:a3:e4:0a:a8:04:88:de:3d:a2:8c:2f:b6:c6:eb:
         b0:84:1a:94:bd:63:9e:7b:6d:12:2e:25:0c:16:5d:16:74:58:
         73:49:43:3f:e9:4d:b0:55:ba:31:de:5d:4f:3a:a5:33:26:20:
         5b:b1:37:a6:77:fd:cd:f7:d0:37:67:9b:d2:9a:d1:a2:38:42:
         3c:22:a6:53:62:7f:d6:bf:99:af:6a:09:d7:65:b0:b0:a7:1b:
         bd:3a:39:46:df:d1:28:73:50:3a:aa:da:a2:bf:58:bb:35:48:
         c8:65:e3:ad:8f:f4:7f:97:e1:b0:52:8a:29:80:83:04:42:76:
         9b:64:81:d0:5d:f1:da:9c:15:48:d2:1d:55:6d:78:9d:0c:f5:
         6d:69:da:63:09:9a:01:c9:ad:93:15:4b:b0:37:2d:8f:bf:6b:
         6b:a8:ee:04:83:54:fb:3b:d3:f2:33:7c:83:7b:97:16:0b:1e:
         4d:bb:5b:43:38:cb:d1:5a:43:5a:f0:7a:f7:3d:95:ca:34:f0:
         dd:65:76:87:28:53:d8:99:74:97:e2:d8:af:83:fb:d5:05:be:
         a8:1d:78:c4:ca:ec:54:fc:15:c8:3a:8b:ba:c0:a7:b1:ac:75:
         68:b2:3b:84:ae:29:bc:28:6a:96:fa:76:3a:18:77:e4:42:b0:
         00:9e:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:24 2026 by rpki-client