Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File:                     33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier:          /VfJFht6ERVn9OExy/t4rZxA2PV4aCO072Bjuu5uHYU=
Subject key identifier:   0F:76:D8:67:4B:8E:F6:E7:8E:55:4C:92:13:39:DB:67:CF:11:45:55
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer:       /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial:       0C774AD03A84E7481B82F4D4BD1ADA32CB8A272A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number:          BE
Signing time:             Tue 30 Jun 2026 05:53:13 +0000
Manifest this update:     Tue 30 Jun 2026 05:48:13 +0000
Manifest next update:     Wed 01 Jul 2026 07:52:13 +0000
Files and hashes:         1: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
                          2: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
                          3: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
                          4: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
                          5: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
                          6: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
                          7: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
                          8: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
                          9: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
                          10: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
                          11: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
                          12: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
                          13: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
                          14: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
                          15: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
                          16: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
                          17: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
                          18: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
                          19: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
                          20: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: z2i+2B3WYX4iPUQG6JFatphPiK8MzlyST50pNygXaIg=)
                          21: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
                          22: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
                          23: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
                          24: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
                          25: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
                          rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 07:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:77:4a:d0:3a:84:e7:48:1b:82:f4:d4:bd:1a:da:32:cb:8a:27:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
        Validity
            Not Before: Jun 30 05:48:13 2026 GMT
            Not After : Jul  1 07:52:13 2026 GMT
        Subject: CN=0F76D8674B8EF6E78E554C921339DB67CF114555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:88:30:11:2b:66:bb:e0:b3:a0:b9:c1:97:bc:
                    1a:a7:51:0a:d1:be:1e:18:95:78:ee:c4:80:b2:65:
                    58:8e:b1:a2:33:96:fc:10:c3:df:34:8b:cf:27:86:
                    0a:06:82:7a:47:9c:77:86:e6:70:da:9f:82:f7:28:
                    56:7a:87:91:77:1b:bc:f8:a7:53:91:a2:cf:9e:59:
                    bc:45:03:65:7e:e6:86:09:de:a2:da:49:f3:62:47:
                    c7:49:c7:7e:e7:a7:f2:e4:b2:e0:b4:91:1a:0b:22:
                    c9:ec:9d:1e:e9:06:da:93:f7:ac:f0:53:6e:9d:95:
                    3d:1d:2e:4d:93:c7:c1:4c:bf:cd:9d:b1:81:d6:7e:
                    b3:f4:92:b8:ac:4e:09:ef:92:de:c5:55:d8:a7:8e:
                    aa:66:82:2f:e3:d3:71:25:8c:fc:5f:3a:d1:cf:53:
                    1f:2e:2a:e7:77:51:df:45:15:97:a0:17:b1:b6:a4:
                    01:91:b9:97:88:4e:9e:fb:ba:99:f9:aa:f3:c8:f6:
                    0d:aa:c9:18:a3:68:50:a2:e4:8d:da:11:4d:8a:cf:
                    e5:e5:68:30:05:ac:a0:19:67:37:6d:5e:72:d2:6d:
                    92:67:ef:9e:43:16:e6:4c:38:89:69:8a:34:9b:44:
                    55:b4:4f:a8:19:0a:55:a4:56:95:1f:e9:4e:6a:ee:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:D8:67:4B:8E:F6:E7:8E:55:4C:92:13:39:DB:67:CF:11:45:55
            X509v3 Authority Key Identifier:
                keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:21:24:ff:12:09:e0:e5:db:be:94:53:6b:dc:b6:fa:53:
         86:08:19:d2:7b:40:0c:4d:a7:a2:94:a4:43:40:59:e0:d5:41:
         2b:f3:02:1a:06:a5:bc:e1:1f:ab:b8:32:f4:b9:51:3a:43:ef:
         0f:a6:a8:24:0b:b3:2d:c4:b5:65:1d:b8:2e:02:5e:b3:bc:de:
         49:85:25:86:8e:ba:10:46:d2:81:14:a7:8f:d7:6d:26:8a:ee:
         b1:b4:c4:b2:85:af:41:59:cc:17:d7:2c:39:e2:73:c0:1b:77:
         a0:ee:71:b8:63:af:5d:b6:b1:91:c8:29:32:b7:c6:31:4f:8f:
         0f:3d:1f:c9:b7:93:f5:f7:82:60:d9:0d:67:de:c3:aa:2d:7b:
         a7:d6:dc:36:00:2f:dc:f5:98:89:54:39:7b:dc:a4:90:70:e3:
         17:65:73:df:e6:21:e0:bf:93:f4:b6:52:f0:6c:c2:46:57:00:
         17:d4:8f:79:65:cf:37:04:6f:4e:fb:c6:02:d5:0d:fa:0f:18:
         c1:a3:b8:a9:7c:d0:a1:d4:56:1c:1d:01:5c:fc:76:25:ce:15:
         8b:7f:59:9c:d8:53:e6:18:c7:0c:b8:4d:6d:b0:69:e9:e1:29:
         4c:a1:21:11:ca:ce:84:3f:c7:f8:1b:55:2f:8b:1c:af:ce:9b:
         a5:e6:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:59 2026 by rpki-client