Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
File:                     F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft (raw, json)
Hash identifier:          lKTjvf71xICfdfJxdSCAFYkD1nr0MDHr5RhgWTh5F8k=
Subject key identifier:   14:79:B1:53:94:D3:C3:56:72:12:4F:39:57:E3:26:A2:8B:E5:60:27
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       58292FF856C9C2C919CA5EB075D71F5BE780FE79
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
Manifest number:          8B
Signing time:             Fri 14 Aug 2026 09:26:30 +0000
Manifest this update:     Fri 14 Aug 2026 09:21:30 +0000
Manifest next update:     Sat 15 Aug 2026 12:32:30 +0000
Files and hashes:         1: 323430313a356461303a323a3a2f34382d3438203d3e20313530373636.roa (hash: lEwiWh3b97qcBl1MP11L8Yk1/V0XcGX11KGQ3anRooU=)
                          2: 323430313a356461303a3a2f33322d3332203d3e20313530373636.roa (hash: j1+WzthZrOuZj7vc+dnX2QxBk/WOSNrujStbD4fbrXc=)
                          3: 33362e35302e3232392e302f32342d3332203d3e20313530373636.roa (hash: h8gyFFvDIAX3bMa9Tnsi5Lv1Sog1AR7udxjaRncAT3E=)
                          4: 33362e35302e3232382e302f32342d3332203d3e20313530373636.roa (hash: Xto8WQ73Mhkh2z7HSkXwb/iQ3rWZE6pzzPgj47AnR7w=)
                          5: 323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa (hash: 5TUA2SXMLAmP0ZYVxlurx0SWantZ3oV/H15YGJH3LH8=)
                          6: 33362e35302e3232382e302f32332d3234203d3e20313530373636.roa (hash: emRiNbWcurw19wqPIYoDTM7LbbPSDfryR3r14LWnVzg=)
                          7: 323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa (hash: 7WqQWTj//FEHw5O7ojAG9FzQ18cgyaGKpJXreC70Wvo=)
                          8: 323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa (hash: OOzMbXIJoHykIR4RwkZcCsJU45So7OmTmyIPk1uKG1o=)
                          9: 323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa (hash: OuqYERdV1bVJFr1rcLxzR5JbOTcvxxSn6vkHoQjVfvg=)
                          10: 33362e35302e3232392e302f32342d3234203d3e20313530373636.roa (hash: QA6gIv34WHyKVbKDu+Uyz8ziRCtvHKvl1DseR9U5Wj8=)
                          11: 323430313a356461303a3a2f33322d3438203d3e20313530373636.roa (hash: yQrMfYe7IzxIC5rJr8YojtADOcobJOqjQ8VtQ4u/b44=)
                          12: 33362e35302e3232382e302f32342d3234203d3e20313530373636.roa (hash: SUrSFVSUHhqaQXbs2yThamUfc3SnEtpbEFNj4so4KsM=)
                          13: F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl (hash: nFJMPufmXYIkbfFdFHFzXiyvzvh8o1+3AZnGNtAv6ew=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 12:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:29:2f:f8:56:c9:c2:c9:19:ca:5e:b0:75:d7:1f:5b:e7:80:fe:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: Aug 14 09:21:30 2026 GMT
            Not After : Aug 15 12:32:30 2026 GMT
        Subject: CN=1479B15394D3C35672124F3957E326A28BE56027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:9b:e4:74:d3:97:b8:be:b9:6d:c6:32:34:
                    99:99:23:82:30:f3:7b:af:46:21:4c:e4:be:bf:4d:
                    d6:5b:7c:c5:99:09:49:4b:a6:4e:67:d7:e7:22:8b:
                    3e:9c:89:0f:40:fc:15:ed:cf:b1:0e:94:8e:ac:cc:
                    55:0f:aa:1a:ac:26:2e:9d:f0:b9:ec:d3:ac:06:af:
                    cc:9b:ee:b4:74:0a:68:b3:b8:bf:8f:66:46:d2:6f:
                    3f:f1:7f:0c:4d:65:08:29:88:db:76:22:ff:3b:d4:
                    f7:c7:99:d6:3b:f1:23:2f:5a:fd:14:b2:a4:14:c6:
                    28:8d:fd:2c:2d:95:35:ba:1f:97:b9:3f:2d:c4:30:
                    6c:86:51:08:1c:8f:97:21:ad:59:77:10:cb:ab:5a:
                    a2:48:53:47:f2:70:35:c0:df:47:c6:b9:ec:b4:89:
                    1e:24:25:4e:ad:08:3f:7d:ff:75:2f:2c:26:64:c3:
                    97:ab:da:ea:cf:73:e5:5a:8d:7f:f0:7a:e2:13:90:
                    ac:55:dd:97:8d:f5:40:06:b8:2b:a8:e1:aa:90:f4:
                    26:9e:41:32:b4:c5:7a:4f:5c:00:d4:04:45:b2:0c:
                    d3:68:b5:f8:84:1f:19:d8:d5:0e:6a:93:23:e9:8d:
                    44:04:a4:c6:cb:46:61:5d:71:70:df:f0:c9:d8:17:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:B1:53:94:D3:C3:56:72:12:4F:39:57:E3:26:A2:8B:E5:60:27
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:09:13:93:53:49:59:df:52:9e:2c:86:88:7e:7f:ac:58:
         94:b2:32:5d:15:85:e2:11:46:d3:e0:26:c1:84:35:67:4c:f0:
         6a:18:ca:b9:74:8b:d9:a7:91:86:4b:24:e3:09:75:4c:b3:02:
         fd:c2:d7:f1:5c:7f:3d:a9:30:9f:93:58:b1:bc:3a:72:98:63:
         a5:14:75:82:b8:99:c1:16:fd:22:50:18:45:83:fd:0f:c7:0c:
         b2:14:49:6a:e8:d2:4b:9e:21:00:51:f1:3d:a5:02:98:8f:65:
         f8:47:b7:bf:da:da:fd:2f:c4:c8:f4:6d:65:b7:ba:50:f3:ef:
         2d:76:ed:56:0c:bd:5f:4c:9d:b5:9a:87:27:eb:59:d2:78:68:
         2b:29:cc:00:e9:1e:67:4a:f0:73:24:7b:a9:10:73:d6:5a:3c:
         57:30:bf:7a:0c:75:c1:2d:1a:35:ae:7c:04:cd:8d:4d:e2:59:
         9f:7a:70:11:a6:60:a2:b7:56:d3:16:30:a0:fb:a7:32:4b:ef:
         18:71:55:08:23:4e:c2:c3:d4:2e:e1:8e:4b:09:04:bc:52:31:
         24:3c:32:e4:a4:1f:27:a1:58:de:86:5f:dc:cc:71:18:a0:bb:
         5c:43:cc:90:7a:12:ee:e5:ba:55:43:f2:79:b7:e7:79:64:15:
         33:fd:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:07 2026 by rpki-client