Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File:                     96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier:          jdmyerfaZ6N9GtntF2FG3X4rTQKERs1NWsNlURJVEf4=
Subject key identifier:   76:C6:5F:19:28:90:0F:AA:E6:73:A6:80:3B:8C:03:A7:C6:90:01:B4
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer:       /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial:       42B1C3676BE72FE8FC4F4F28B7892A87D6BE6D99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number:          47
Signing time:             Tue 30 Jun 2026 00:22:40 +0000
Manifest this update:     Tue 30 Jun 2026 00:17:40 +0000
Manifest next update:     Wed 01 Jul 2026 02:16:40 +0000
Files and hashes:         1: 3130332e3133302e3234382e302f32342d3234203d3e20313333393438.roa (hash: fD/ucDIm4GlZar7mmOLi7+OafDyoA/X6tjLQrmsYp4Q=)
                          2: 3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (hash: t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=)
                          3: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
                          4: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: U3vOko0KjlmpGTm5Os1+K7svBdbTwe7OcRYI0T1Uhl0=)
                          5: 3130332e3133302e3235312e302f32342d3234203d3e20313333393438.roa (hash: GsOYmJWvRu80jQVFqMYosfTSy2X9/h0xqknASB9kz4E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
                          rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:c3:67:6b:e7:2f:e8:fc:4f:4f:28:b7:89:2a:87:d6:be:6d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
        Validity
            Not Before: Jun 30 00:17:40 2026 GMT
            Not After : Jul  1 02:16:40 2026 GMT
        Subject: CN=76C65F1928900FAAE673A6803B8C03A7C69001B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:7b:63:b4:a5:ed:be:79:3d:7e:03:43:3b:
                    1c:62:23:71:30:e3:71:5d:c7:70:b9:be:9d:1c:e7:
                    4a:a6:13:30:5d:c6:30:47:f9:6b:f7:7d:cd:b4:8a:
                    a5:f3:24:7e:12:14:9a:83:93:ed:4c:12:53:30:d2:
                    87:c9:cb:45:e5:f1:98:96:27:19:44:f0:07:9a:8e:
                    4c:78:60:65:6f:dc:2e:e0:a9:b1:3a:b5:66:24:a7:
                    47:5d:08:0f:55:57:2d:04:b1:e7:9f:c7:17:07:ad:
                    8a:3b:6f:f1:e5:81:a6:d1:c1:47:d9:21:88:2c:0e:
                    24:95:44:44:eb:1b:4e:03:a8:43:1d:50:6a:5c:05:
                    ae:76:d0:25:07:b4:49:49:5a:03:cb:68:e1:02:a6:
                    45:d1:95:40:9f:20:07:ac:c9:bb:e5:ae:a6:52:6b:
                    76:ac:6d:a7:4b:f4:51:0b:e9:36:ca:22:30:62:a0:
                    a2:98:89:09:48:0e:5d:8d:b2:5b:9b:fa:4f:52:ea:
                    7a:ce:2e:9c:81:8e:b8:6d:46:03:12:ad:4a:f6:c6:
                    42:64:a6:d7:8c:dc:c7:10:c1:7e:53:28:97:e4:9f:
                    d3:e5:76:d2:22:f9:c9:af:3d:2d:46:54:61:df:0b:
                    75:e7:19:40:65:9d:7b:0a:0c:62:73:11:ea:d2:1d:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:5F:19:28:90:0F:AA:E6:73:A6:80:3B:8C:03:A7:C6:90:01:B4
            X509v3 Authority Key Identifier:
                keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:d0:e1:17:2f:d0:dd:03:aa:96:32:46:9c:07:3e:45:08:
         fa:db:82:a6:d1:0b:58:7b:d4:eb:8d:90:54:77:6d:09:c9:c6:
         48:6a:db:e8:30:2f:a8:77:4d:ba:2a:73:09:9a:5c:c6:cf:48:
         5c:65:5d:2a:3b:a4:29:d5:94:7c:e2:86:f4:95:5b:ff:fc:16:
         d3:08:1d:b3:bc:2b:ad:6d:5e:8c:ea:5a:b0:a6:8f:fa:05:8a:
         42:70:d8:05:8e:c8:f0:b3:00:94:f6:de:c6:01:28:21:f0:d7:
         30:d9:03:e5:c2:8e:61:da:75:8d:0d:c4:dc:49:78:08:ea:af:
         62:63:35:ae:9b:a4:8f:c7:14:67:1e:5d:50:8e:4b:f1:aa:da:
         19:d7:7f:7b:25:b9:9d:8e:0d:73:bb:a8:39:b1:94:a5:a4:82:
         52:f6:3f:e1:cc:c1:b8:00:f4:e4:9e:e2:66:e6:55:5b:67:bb:
         79:35:e1:19:9e:b8:0b:4c:68:01:12:e8:af:13:b1:09:d8:25:
         d1:0d:39:8a:a5:6b:2d:cc:b4:e9:a6:57:3d:ee:57:7e:a8:29:
         6b:43:be:c9:f8:3f:a9:17:8c:c9:56:82:38:b2:a2:0b:a4:d0:
         c6:18:52:2c:0b:f8:4b:46:0d:14:06:76:f1:37:20:97:ed:aa:
         6b:06:17:63
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUQrHDZ2vnL+j8T08ot4kqh9a+bZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF
QkZDQzc4OTAeFw0yNjA2MzAwMDE3NDBaFw0yNjA3MDEwMjE2NDBaMDMxMTAvBgNV
BAMTKDc2QzY1RjE5Mjg5MDBGQUFFNjczQTY4MDNCOEMwM0E3QzY5MDAxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GXtjtKXtvnk9fgNDOxxiI3Ew
43Fdx3C5vp0c50qmEzBdxjBH+Wv3fc20iqXzJH4SFJqDk+1MElMw0ofJy0Xl8ZiW
JxlE8Aeajkx4YGVv3C7gqbE6tWYkp0ddCA9VVy0EseefxxcHrYo7b/HlgabRwUfZ
IYgsDiSVRETrG04DqEMdUGpcBa520CUHtElJWgPLaOECpkXRlUCfIAesybvlrqZS
a3asbadL9FEL6TbKIjBioKKYiQlIDl2Nslub+k9S6nrOLpyBjrhtRgMSrUr2xkJk
pteM3McQwX5TKJfkn9PldtIi+cmvPS1GVGHfC3XnGUBlnXsKDGJzEerSHSCpAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUdsZfGSiQD6rmc6aAO4wDp8aQAbQwHwYDVR0j
BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w
Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF
MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy
NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvrQ4Rcv0N0DqpYy
RpwHPkUI+tuCptELWHvU642QVHdtCcnGSGrb6DAvqHdNuipzCZpcxs9IXGVdKjuk
KdWUfOKG9JVb//wW0wgds7wrrW1ejOpasKaP+gWKQnDYBY7I8LMAlPbexgEoIfDX
MNkD5cKOYdp1jQ3E3El4COqvYmM1rpukj8cUZx5dUI5L8araGdd/eyW5nY4Nc7uo
ObGUpaSCUvY/4czBuAD05J7iZuZVW2e7eTXhGZ64C0xoARLorxOxCdgl0Q05iqVr
Lcy06aZXPe5Xfqgpa0O+yfg/qReMyVaCOLKiC6TQxhhSLAv4S0YNFAZ28Tcgl+2q
awYXYw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:19 2026 by rpki-client