Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File:                     866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier:          6eAk3i7Vd16SbS48th3+sQTfnvSw0YZFE7kbXf5/V98=
Subject key identifier:   3F:28:86:04:8B:DC:71:01:21:10:6C:2F:15:23:CF:34:53:EB:6B:26
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer:       /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial:       0EA1D2363E01BB54B92A869E535C7AEF8286BC0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number:          BB
Signing time:             Sun 20 Sep 2026 22:24:35 +0000
Manifest this update:     Sun 20 Sep 2026 22:19:35 +0000
Manifest next update:     Mon 21 Sep 2026 22:34:35 +0000
Files and hashes:         1: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
                          2: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
                          3: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
                          4: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: kkEhSv0JLvkqDZkHTARTYcT6S2XGXHJ8FOrMV9N3sk4=)
                          5: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
                          6: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
                          7: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
                          8: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
                          9: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
                          10: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
                          11: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
                          12: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a1:d2:36:3e:01:bb:54:b9:2a:86:9e:53:5c:7a:ef:82:86:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
        Validity
            Not Before: Sep 20 22:19:35 2026 GMT
            Not After : Sep 21 22:34:35 2026 GMT
        Subject: CN=3F2886048BDC710121106C2F1523CF3453EB6B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:ec:1f:d7:37:d8:aa:a0:be:b4:33:19:0e:
                    df:4b:60:c9:4b:ff:b8:d9:4d:8f:d2:04:ce:ba:ea:
                    54:0a:ab:a6:76:4b:e9:e9:01:a9:7a:54:b2:0c:59:
                    61:3b:1a:d1:6e:01:a0:13:b6:97:77:1c:04:1b:d3:
                    a6:5a:bb:52:4c:b9:34:e6:9a:33:18:e3:9b:30:cc:
                    b5:b0:fb:62:9c:ae:ab:81:83:25:2d:b8:bc:42:9b:
                    ab:9b:ea:2a:de:9a:60:21:58:bf:4a:9b:4a:cf:4b:
                    49:10:9d:7b:9c:f1:1c:ce:6c:ca:6c:30:09:19:c6:
                    a7:ae:db:82:bd:bc:89:dd:b2:32:76:59:2a:9f:c8:
                    3d:0d:79:70:22:2a:25:56:0b:62:6d:69:d8:c3:22:
                    1e:07:5a:8e:3c:dc:35:7a:52:ea:6c:11:01:53:86:
                    be:3d:b2:7e:46:b7:da:95:82:9c:a3:b8:93:3c:5f:
                    b5:e2:bc:5e:d6:b2:95:fd:ea:f8:5d:7f:34:ca:e4:
                    55:9d:eb:39:ec:a4:92:42:3a:a7:be:e5:aa:1c:54:
                    86:da:54:82:71:95:fd:a9:da:01:96:1f:e5:d8:97:
                    91:39:68:9b:c6:8d:d8:f1:e3:4e:d8:9d:83:2d:4b:
                    f5:32:4c:40:fe:9c:24:6b:83:7f:d3:c3:4d:c1:55:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:86:04:8B:DC:71:01:21:10:6C:2F:15:23:CF:34:53:EB:6B:26
            X509v3 Authority Key Identifier:
                keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:13:ec:4b:a9:23:f3:a8:00:b2:57:c9:32:df:42:c6:4a:9f:
         a1:fa:70:b8:19:fe:93:bc:2e:91:2a:b2:bd:46:3a:bb:b0:4c:
         f6:ec:9a:37:e9:11:c7:68:7a:5c:20:a4:08:c0:3a:9e:5a:98:
         6c:b2:42:c5:ef:5a:43:02:45:62:47:44:42:e7:a6:f3:4e:cd:
         71:dd:40:7d:7c:e2:0f:a0:55:ad:ef:48:d5:f4:75:ce:7b:29:
         6b:93:13:eb:fb:03:a2:c7:1a:8d:c6:1f:fa:93:69:0e:e9:a9:
         53:4a:4a:56:af:4e:16:e8:90:39:72:d1:11:8c:54:c5:b9:86:
         2b:4d:f0:71:8e:fd:07:ce:76:68:55:d3:02:25:f2:2e:f0:51:
         e9:01:3e:fb:d8:8d:dc:a1:ad:95:91:e8:a1:6f:49:66:e8:06:
         01:41:ab:41:99:07:bf:0a:1d:69:c2:62:6f:07:63:5c:49:fe:
         ae:66:66:4a:09:d7:a5:a8:03:a9:27:65:b4:86:ce:d0:84:89:
         0d:d1:cf:77:51:db:96:70:e4:7e:27:21:1e:0b:3b:10:4e:bd:
         bf:f9:f3:b4:dc:2d:98:ed:9e:fe:62:f6:57:93:42:4c:9b:62:
         f3:eb:40:c4:67:18:01:c7:e7:e0:50:fc:1f:fb:9e:cb:89:b5:
         6c:59:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:46 2026 by rpki-client