Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File:                     866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier:          FDspIfJA1tWZSi+3THrjL6X+pilcgsZwLbH/fJ/utfU=
Subject key identifier:   54:1E:8F:A4:5F:C1:FB:22:48:95:CC:AC:C0:31:5C:C7:73:2B:60:E7
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer:       /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial:       305AAD08A2CD0B4E6D54EB9F85561B64EB3EB483
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number:          37
Signing time:             Sat 13 Jun 2026 02:53:47 +0000
Manifest this update:     Sat 13 Jun 2026 02:48:47 +0000
Manifest next update:     Sun 14 Jun 2026 06:43:47 +0000
Files and hashes:         1: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
                          2: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
                          3: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
                          4: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: z/K/oBbtNobw8atjAEpdywrhWGFk1K+YHC48ngiwDNE=)
                          5: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
                          6: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
                          7: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
                          8: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
                          9: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
                          10: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
                          11: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
                          12: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5a:ad:08:a2:cd:0b:4e:6d:54:eb:9f:85:56:1b:64:eb:3e:b4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
        Validity
            Not Before: Jun 13 02:48:47 2026 GMT
            Not After : Jun 14 06:43:47 2026 GMT
        Subject: CN=541E8FA45FC1FB224895CCACC0315CC7732B60E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:c3:5f:72:a3:ab:37:79:9b:2f:ff:85:37:
                    93:5c:e6:82:eb:31:65:4c:0a:d2:75:7e:68:4c:86:
                    ae:1e:23:31:1b:df:10:f6:4f:3e:65:99:d6:6f:9f:
                    86:09:b1:25:3d:a9:4e:1c:21:36:83:95:a4:5c:8c:
                    2f:4f:7c:03:a6:5a:61:69:9c:05:e6:cb:e3:a1:70:
                    40:81:1c:69:12:35:60:c3:e3:41:52:1a:56:b8:58:
                    2c:53:a9:bd:17:c8:97:59:ac:c6:e9:34:ae:d5:14:
                    1f:5f:44:6e:f0:37:ab:f1:13:4c:d3:0b:ed:74:c9:
                    97:e5:07:02:8b:27:96:56:49:1b:ba:4a:ba:02:e3:
                    d9:b2:6d:f2:40:c6:63:64:4f:b1:00:ca:19:a1:e1:
                    0b:c0:d1:22:5a:3b:72:35:81:f5:50:e8:65:00:04:
                    b4:1a:a1:4a:31:59:6d:08:5c:dc:ee:2c:4e:d1:20:
                    b1:5e:37:f7:5b:b8:11:b8:fd:ad:bf:2d:20:a6:23:
                    ec:4b:c7:41:bb:59:ce:f9:d4:96:fc:62:70:2c:06:
                    94:7e:61:71:14:98:fd:02:ca:91:83:f9:d7:56:95:
                    e4:c4:01:9e:05:52:f0:f5:a0:7d:ba:5c:04:b2:8c:
                    1d:5b:3c:08:d4:13:82:3c:43:84:39:28:e2:47:83:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:8F:A4:5F:C1:FB:22:48:95:CC:AC:C0:31:5C:C7:73:2B:60:E7
            X509v3 Authority Key Identifier:
                keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:79:50:1a:a1:ba:1f:11:bc:d4:2e:68:f5:5c:0f:50:bb:
         61:46:a1:9d:54:84:27:bf:2b:83:46:3d:50:9a:f2:80:9f:60:
         46:25:e5:83:7b:60:de:2a:d7:96:cf:57:c3:0b:01:2e:7e:cc:
         c8:41:a4:c2:38:d7:d8:02:08:96:56:17:39:e9:43:ca:67:a6:
         bf:28:75:d3:46:43:57:7e:d6:72:89:43:5a:cc:de:81:d4:29:
         f5:93:63:b0:ac:1a:cf:19:b7:25:d2:25:4e:dd:9e:d0:fb:2c:
         e5:01:0b:ce:15:84:da:cf:e3:cc:c4:b8:6f:ec:a0:25:4d:77:
         85:2b:81:65:dd:c6:4e:6a:af:e6:17:5a:a4:29:35:62:e0:98:
         b8:87:a2:c3:37:b0:a9:d9:f5:bc:92:60:5c:bf:ee:f3:c1:22:
         29:b6:76:9b:7b:3d:ee:f3:c3:3f:8e:ba:d0:dc:0d:56:e9:53:
         25:2c:38:24:0b:c6:f8:bd:49:d1:65:2e:51:76:82:2f:f9:cd:
         5f:f5:63:d7:ee:64:61:22:59:55:3f:80:ca:81:75:7b:7e:f2:
         a1:f3:fe:91:2c:3c:bc:4a:8a:7c:51:65:cf:a5:6a:19:32:f0:
         66:1c:f1:24:e5:e9:0f:3f:bb:3d:b4:c9:4f:1f:ca:f0:2d:47:
         fc:6f:4e:80
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUMFqtCKLNC05tVOufhVYbZOs+tIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2MTU1RUM1NkVGMEE2MUJDNDg5MjU5RUE2QjQ0NEYy
NTk2RkY5RTAeFw0yNjA2MTMwMjQ4NDdaFw0yNjA2MTQwNjQzNDdaMDMxMTAvBgNV
BAMTKDU0MUU4RkE0NUZDMUZCMjI0ODk1Q0NBQ0MwMzE1Q0M3NzMyQjYwRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpGcNfcqOrN3mbL/+FN5Nc5oLr
MWVMCtJ1fmhMhq4eIzEb3xD2Tz5lmdZvn4YJsSU9qU4cITaDlaRcjC9PfAOmWmFp
nAXmy+OhcECBHGkSNWDD40FSGla4WCxTqb0XyJdZrMbpNK7VFB9fRG7wN6vxE0zT
C+10yZflBwKLJ5ZWSRu6SroC49mybfJAxmNkT7EAyhmh4QvA0SJaO3I1gfVQ6GUA
BLQaoUoxWW0IXNzuLE7RILFeN/dbuBG4/a2/LSCmI+xLx0G7Wc751Jb8YnAsBpR+
YXEUmP0CypGD+ddWleTEAZ4FUvD1oH26XASyjB1bPAjUE4I8Q4Q5KOJHg3XHAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUVB6PpF/B+yJIlcyswDFcx3MrYOcwHwYDVR0j
BBgwFoAUhmFV7FbvCmG8SJJZ6mtETyWW/54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOVFQv
MC84NjYxNTVFQzU2RUYwQTYxQkM0ODkyNTlFQTZCNDQ0RjI1OTZGRjlFLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzg2NjE1NUVDNTZFRjBBNjFCQzQ4OTI1OUVBNkI0
NDRGMjU5NkZGOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05UVC8wLzg2NjE1NUVDNTZFRjBB
NjFCQzQ4OTI1OUVBNkI0NDRGMjU5NkZGOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiHnlQGqG6HxG8
1C5o9VwPULthRqGdVIQnvyuDRj1QmvKAn2BGJeWDe2DeKteWz1fDCwEufszIQaTC
ONfYAgiWVhc56UPKZ6a/KHXTRkNXftZyiUNazN6B1Cn1k2OwrBrPGbcl0iVO3Z7Q
+yzlAQvOFYTaz+PMxLhv7KAlTXeFK4Fl3cZOaq/mF1qkKTVi4Ji4h6LDN7Cp2fW8
kmBcv+7zwSIptnabez3u88M/jrrQ3A1W6VMlLDgkC8b4vUnRZS5RdoIv+c1f9WPX
7mRhIllVP4DKgXV7fvKh8/6RLDy8Sop8UWXPpWoZMvBmHPEk5ekPP7s9tMlPH8rw
LUf8b06A
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:31 2026 by rpki-client