Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
File:                     1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft (raw, json)
Hash identifier:          97jZrRicZHFdayxMWPOcK71j8n11gsXhv+GdLB8/CZ4=
Subject key identifier:   E8:FA:38:72:62:43:20:C5:65:A2:37:10:D9:14:1A:8A:F2:83:80:D5
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       18C7538F65C99E4772BEF0698821FDA656FE7B27
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
Manifest number:          0E
Signing time:             Wed 13 May 2026 02:36:25 +0000
Manifest this update:     Wed 13 May 2026 02:31:25 +0000
Manifest next update:     Thu 14 May 2026 04:02:25 +0000
Files and hashes:         1: 3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa (hash: UUvZcZF1n2KebH1VxdmjDiegAC00F4y9dKmC0BIQVng=)
                          2: 3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa (hash: O5tH6+rHeF/CzyKscBEL7/Pd/t5Mq5TOsy/0NVKpiIo=)
                          3: 3130312e302e3232342e302f32312d3234203d3e203138303436.roa (hash: PDX/dgh26U+Jh027gHT88wZj3/PahBSo9laTaUqIs+A=)
                          4: 3130312e302e3234302e302f32302d3234203d3e2034373830.roa (hash: okb0kGB+LekHYwOuGLyVCb+I6qh5V5+WzdEBzvXO6X4=)
                          5: 3132312e35302e3137362e302f32302d3234203d3e203138303436.roa (hash: 9JvrqSBwAwknxYqvUROESlm5m4ENNCpvVVFLkVRKsf4=)
                          6: 1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl (hash: ITYrm9sRt/K26apjB5i8BTRxWMonJ5JzhV5ejq2JdMU=)
                          7: 3135302e3132392e33362e302f32342d3234203d3e203234313639.roa (hash: 1x3JW/n5yEJ9Al/HV4/ndcGjkhxq3EQC0ZG6t2rkuyE=)
                          8: 3130312e302e3232342e302f31392d3234203d3e203138303436.roa (hash: k/+ga+vpCPibtMDN9kfqTV2mcmYqsE3mkZm7QgeNBac=)
                          9: 3130312e302e3233322e302f32312d3234203d3e2034373830.roa (hash: p/2qKe2s8P3nmylPfxc8kutCsitWJsWvlniVw9VDejs=)
                          10: 3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa (hash: Auax/gFiunbHxNkQOS/4xGo2FY/JkqSoOSclCXMaFXY=)
                          11: 3135302e3132392e33362e302f32322d3234203d3e203138303436.roa (hash: UE/EqJRMqDkGYTPyGerIkl/YVM1eQMkiSKfKtGup4uk=)
                          12: 3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa (hash: kMJ1vhXoM5lWsAtGby2N4NBOQOtOqqWYBMf/MDrw46E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c7:53:8f:65:c9:9e:47:72:be:f0:69:88:21:fd:a6:56:fe:7b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 13 02:31:25 2026 GMT
            Not After : May 14 04:02:25 2026 GMT
        Subject: CN=E8FA3872624320C565A23710D9141A8AF28380D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:48:90:b1:f5:99:d0:43:06:f8:d3:a0:67:
                    ba:9f:6d:ce:cc:a2:0f:da:64:2d:2a:44:f8:98:09:
                    5c:15:ad:92:9c:a6:e6:a6:6b:4c:0b:25:3b:e0:2c:
                    44:cb:d7:94:aa:5e:b6:89:b0:84:57:bc:97:08:e5:
                    98:79:45:48:61:8b:0b:94:b9:01:90:ca:89:66:9b:
                    8d:62:93:32:c2:46:25:a4:de:3c:0a:91:9c:a1:4c:
                    ff:7c:52:98:29:d5:e7:2b:ae:c8:58:ee:7a:4a:ac:
                    3f:de:2d:48:67:17:9d:d1:a9:53:4c:39:4d:6f:b7:
                    af:5a:e0:88:fa:f3:16:ec:1c:ce:25:69:30:11:99:
                    df:a4:c2:0c:b8:f1:ea:9b:d8:24:39:e8:0e:bf:9a:
                    01:5e:a0:e5:8d:7c:21:31:41:45:77:e5:b6:6e:54:
                    60:b0:1e:39:d5:78:49:57:40:65:b1:e7:3c:83:c9:
                    b5:c3:40:50:24:ba:e3:67:e7:e8:aa:25:84:f2:a5:
                    8b:71:f9:d4:d1:7f:60:9d:45:ee:bb:7f:c6:85:84:
                    55:1f:63:1e:aa:25:bf:49:0e:91:6d:91:08:b5:9a:
                    b4:38:1e:e8:74:d8:f6:ac:5a:82:4c:5f:e5:f0:03:
                    45:8e:cf:fb:fe:57:93:95:a8:99:9a:af:8f:2b:8c:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FA:38:72:62:43:20:C5:65:A2:37:10:D9:14:1A:8A:F2:83:80:D5
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:d9:c1:9f:54:69:44:3a:8d:15:6d:45:c3:25:e9:bf:a4:
         9e:bf:03:61:2c:a2:d0:94:da:c6:4b:5b:4c:ab:2f:86:07:b0:
         f1:53:64:ad:6c:d1:7f:f0:75:80:c3:27:d9:dc:4b:d5:59:61:
         f5:d4:22:ec:ab:22:14:02:30:b9:58:31:f7:bc:ac:83:f8:1b:
         b5:14:e7:e9:b1:04:2a:8f:ed:82:14:b5:b5:13:e6:75:89:d5:
         53:74:04:3f:02:c8:38:cb:e4:47:4d:98:12:19:a7:cf:1d:52:
         92:7c:5c:fd:7a:7f:1f:1e:77:c1:b2:74:80:2b:98:5a:9d:14:
         10:18:67:36:72:2d:46:30:75:02:b1:d6:fc:93:a8:68:27:34:
         75:61:b2:a2:f1:c0:07:4a:d8:c6:92:77:f2:fe:d1:26:56:66:
         74:73:4f:d4:d0:a8:27:a5:de:4d:ef:ca:1f:f4:0c:1a:e1:ec:
         23:16:ec:5a:24:4c:cf:5e:ea:d7:91:e3:c5:a7:7d:17:46:6c:
         46:95:3e:02:e7:67:e8:ce:26:b6:f7:b3:29:0f:97:22:af:33:
         c9:e1:2e:f6:2a:e9:b7:b5:a8:28:64:90:f8:a7:96:f2:50:18:
         ef:38:c9:2a:12:3d:6b:92:ac:2c:89:71:08:33:42:52:b2:76:
         47:93:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:34:21 2026 by rpki-client