Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft (raw, json)
Hash identifier:          7xRHCGzNjKjBuQ9/AaLsjzhyuiEqVgrEZM5E4ELElAU=
Subject key identifier:   37:4C:F0:B5:FE:A7:C5:C2:35:5C:E9:F1:73:A9:A5:09:0E:88:EF:3E
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       58E00C8D1A7A0138E93CC37EA34B8765F218673E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
Manifest number:          C2
Signing time:             Mon 21 Sep 2026 11:32:03 +0000
Manifest this update:     Mon 21 Sep 2026 11:27:03 +0000
Manifest next update:     Tue 22 Sep 2026 15:22:03 +0000
Files and hashes:         1: 3130332e34322e3134342e302f32342d3234203d3e2037343833.roa (hash: cgb3chUP3JqfYq0b1LvjxVctXBWKiOzejJyOVV0Lan4=)
                          2: 3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (hash: d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=)
                          3: 9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl (hash: bOo+bvhEe2wBq/5SL3RK7n6s8GFizTJIuQxwInSgvxI=)
                          4: 3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (hash: VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=)
                          5: 3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (hash: rgFsiPCeuTbr4yeDItGN0JB2GmcezifLDsT7ksjAxys=)
                          6: 3230322e3134382e3231362e302f32332d3234203d3e2037343833.roa (hash: pdotTZ9puPXODwvqbe0OXjdVjFyCK/vBj236sVdgVKc=)
                          7: 3232332e32362e382e302f32332d3234203d3e203231383539.roa (hash: YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=)
                          8: 3232332e32362e382e302f32332d3234203d3e2037343833.roa (hash: upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=)
                          9: 3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (hash: RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=)
                          10: 3130332e3232392e35302e302f32342d3234203d3e2037343833.roa (hash: Urdua04twOmjpORnRC30OfM9aTU8JD3/+D+NxZwpsX0=)
                          11: 3230322e3134382e3231362e302f32332d3234203d3e20313530323838.roa (hash: m08nUkgvFXMEH7SggQHbf7ARa6naXodQWHDQXXeGTPs=)
                          12: 3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (hash: 79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=)
                          13: 34332e3235312e35362e302f32322d3234203d3e2037343833.roa (hash: akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=)
                          14: 3130332e34322e3134342e302f32322d3234203d3e2037353338.roa (hash: 3+c7LzOJ+7ykNIAhsdKuwGwgIARE1KUf6DWic0iVf7Y=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e0:0c:8d:1a:7a:01:38:e9:3c:c3:7e:a3:4b:87:65:f2:18:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Sep 21 11:27:03 2026 GMT
            Not After : Sep 22 15:22:03 2026 GMT
        Subject: CN=374CF0B5FEA7C5C2355CE9F173A9A5090E88EF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:bb:cd:93:b5:50:b1:f7:6a:dc:4f:8d:cf:
                    20:af:44:e0:2d:0b:39:50:32:c9:e1:a2:b5:dd:d9:
                    f3:bd:79:db:e6:e8:7a:d5:78:13:3c:fb:8a:73:d3:
                    2c:2d:91:c5:fa:c6:7c:3c:9d:c8:71:a5:86:b9:7d:
                    f6:26:8a:5a:a6:47:be:e7:81:c6:3b:b2:25:a6:1e:
                    f5:ac:f9:44:4c:1f:34:b4:64:9c:6c:ac:a5:b4:3c:
                    45:cc:79:69:d2:c9:92:b1:aa:4f:3e:b2:ae:b2:41:
                    a2:d4:85:3b:50:8d:2b:a1:96:27:1d:ad:01:e1:c4:
                    11:5c:4e:21:01:58:54:44:15:a2:67:38:41:fe:bb:
                    e0:18:1a:3f:75:54:5d:0e:df:61:50:5f:9a:bb:9c:
                    4a:0e:30:9c:7c:b3:fb:e8:b5:9b:0a:5a:fd:7e:8a:
                    32:85:09:0b:e2:11:94:33:fa:d3:da:21:80:98:f8:
                    46:c0:49:e7:4e:23:3e:a7:dc:ff:33:1d:85:be:d1:
                    eb:c7:1d:b2:fd:fd:84:da:18:8f:1b:4e:2d:cf:33:
                    5e:c4:13:6d:4e:c1:34:40:0a:40:88:64:d4:ab:7b:
                    92:86:a2:6a:31:be:c0:0f:1a:f7:de:d5:58:2f:ef:
                    4e:77:91:ce:18:ae:a1:10:4b:01:08:91:a5:a9:3f:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:F0:B5:FE:A7:C5:C2:35:5C:E9:F1:73:A9:A5:09:0E:88:EF:3E
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:ac:3d:d2:3a:84:51:93:6e:9b:3c:76:44:48:3e:b4:af:
         0a:37:bc:49:49:19:24:67:25:fc:4b:a9:77:a2:96:a4:66:a1:
         b9:70:6b:9a:70:51:71:90:41:74:37:8a:6c:98:5a:a6:22:8d:
         38:47:af:82:8c:99:a9:e1:69:cd:37:5d:f6:34:ef:c0:e9:aa:
         49:f9:0d:ff:c2:b1:c3:38:29:31:dd:55:60:53:57:0b:94:16:
         80:10:3a:ea:92:19:25:5c:59:12:1f:08:ac:b1:1d:cd:96:71:
         22:65:70:96:5d:5f:1a:d0:b9:83:f7:c6:0c:15:e9:06:99:18:
         9f:e5:01:e8:ea:09:6e:f1:43:69:61:70:ed:f6:f9:80:b6:be:
         15:c7:a4:63:ff:50:8c:cf:58:29:a8:d5:4b:b1:90:7b:02:c7:
         80:09:de:93:92:29:27:96:6c:8e:1d:4c:cb:56:ae:9b:51:86:
         b2:74:63:c2:e2:b9:06:8d:11:47:9c:68:f9:1d:d9:fd:08:41:
         b8:67:ac:81:e2:58:50:e6:f8:84:e6:1c:0b:7c:ef:06:8a:0c:
         7b:3b:36:64:e5:65:10:9b:e0:c8:a6:f9:ac:1d:e3:d1:0d:b1:
         55:c4:e0:fc:57:43:e8:30:78:f4:1b:2c:75:45:a7:a2:d4:fa:
         3b:b6:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:26:53 2026 by rpki-client