Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File:                     33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier:          GKKqY/J5hSvqEoT8+1j5ynLViNbORd9USk0VFYo8YXg=
Subject key identifier:   0A:D8:4E:19:77:03:4D:F5:61:2C:EF:C7:9B:11:E6:37:27:C3:C5:6B
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer:       /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial:       11C5BA330C78E1C109AA0AB377DE3E7D9CACEFBD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number:          FC
Signing time:             Fri 14 Aug 2026 16:12:16 +0000
Manifest this update:     Fri 14 Aug 2026 16:07:16 +0000
Manifest next update:     Sat 15 Aug 2026 17:14:16 +0000
Files and hashes:         1: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=)
                          2: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
                          3: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
                          4: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
                          5: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
                          6: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
                          7: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
                          8: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
                          9: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
                          10: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
                          11: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
                          12: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
                          13: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
                          14: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
                          15: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
                          16: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
                          17: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
                          18: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
                          19: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
                          20: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
                          21: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
                          22: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
                          23: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
                          24: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
                          25: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: 90rAVV6lIOUc0ntPqtXf+d0BEmRnhXuAQ6C7oXoN27o=)
                          26: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
                          rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 17:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:ba:33:0c:78:e1:c1:09:aa:0a:b3:77:de:3e:7d:9c:ac:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
        Validity
            Not Before: Aug 14 16:07:16 2026 GMT
            Not After : Aug 15 17:14:16 2026 GMT
        Subject: CN=0AD84E1977034DF5612CEFC79B11E63727C3C56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:a9:9f:ec:9e:aa:fb:23:61:95:1a:2e:3f:
                    01:29:b4:f5:17:5d:d4:ef:5b:f3:68:7e:06:c0:7a:
                    08:9d:51:72:41:77:4e:6f:24:c8:4b:0b:e0:58:c8:
                    33:b2:52:b9:e0:47:a0:27:72:66:42:78:05:f2:df:
                    f6:a6:bc:41:45:f9:19:70:5f:65:e9:72:c8:46:60:
                    ca:7c:73:95:3c:27:36:f8:ed:6b:3a:74:df:89:be:
                    74:83:90:d8:58:9c:61:cf:63:56:ab:54:ae:2d:3b:
                    b7:8c:bf:e2:e0:1c:ec:ae:f8:a5:2d:67:cb:a7:f4:
                    35:55:da:41:fe:35:a4:15:17:df:ac:94:24:7f:8d:
                    47:2f:e4:af:73:ba:be:fa:da:a9:5a:c4:5d:37:f4:
                    65:c1:30:83:fa:09:82:cc:5b:ce:27:2a:b6:fe:6e:
                    9c:35:f8:77:7d:a7:e8:34:78:68:98:b7:f8:8f:a8:
                    9e:61:d6:f6:1b:0d:e9:43:2e:66:c8:72:81:3d:c0:
                    58:b6:d3:90:13:f6:80:c8:2a:51:51:8f:52:6a:0b:
                    0d:e0:8c:c7:d4:46:dd:4e:82:a2:27:d0:4a:b3:61:
                    21:32:9c:37:91:25:4d:c2:93:2a:6d:2e:49:9f:6b:
                    12:46:25:e6:57:41:d5:c6:2d:a8:38:09:04:a5:4c:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D8:4E:19:77:03:4D:F5:61:2C:EF:C7:9B:11:E6:37:27:C3:C5:6B
            X509v3 Authority Key Identifier:
                keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:87:03:03:60:70:e2:6b:55:c9:67:45:53:78:da:79:c4:40:
         8d:b2:52:44:fe:d2:7e:83:cf:76:18:8f:7b:14:93:a8:55:2f:
         ae:4f:3d:7a:04:48:7e:c3:e4:82:9d:5e:79:19:eb:cb:a3:5d:
         38:38:a1:12:af:7d:26:0a:02:36:78:5a:aa:2b:d5:c2:8f:c1:
         54:78:f4:c3:95:58:d2:f1:65:57:f3:bc:c0:78:82:e6:6e:96:
         73:9c:47:d6:0c:06:52:f8:fe:42:03:01:72:c8:bd:0f:e5:57:
         6b:6f:b3:7e:52:33:42:95:51:84:5c:57:22:cc:1b:99:b3:2e:
         c1:a7:a3:f4:98:2d:b1:b4:90:f2:4b:a6:cd:33:22:ce:bb:de:
         75:9d:49:20:f3:a1:7d:59:37:f4:a9:74:c0:7b:07:b3:76:85:
         2c:92:d6:d8:83:9d:43:3d:0e:e1:8c:5a:49:77:36:1a:10:6d:
         a6:47:5e:c3:7c:28:07:1f:7c:d1:ff:f9:a0:a8:6d:09:9f:8d:
         3f:71:a5:5d:d2:ae:5d:0e:f9:f1:15:46:26:56:e8:b6:3f:5a:
         fe:2d:54:82:68:1e:2d:5d:7f:2e:91:07:2e:ba:7c:42:24:a9:
         63:02:88:fd:8f:af:ff:89:db:ae:7c:a3:96:b3:a9:60:9e:c7:
         c5:ca:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:33:55 2026 by rpki-client