Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
File:                     059E0652FCBAC895061A57FE0566CF353F3E43CA.mft (raw, json)
Hash identifier:          FobRARX7VW74H5R4LfA8MB4GK+xOiKqlplGvdcNh1mg=
Subject key identifier:   1B:59:77:5D:71:C6:BB:C6:88:F2:8B:86:7C:7F:B0:E8:E0:B1:6C:6E
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       5A52D56301C4A75E785133C3E4EE2B7A4768A953
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
Manifest number:          8A
Signing time:             Fri 14 Aug 2026 08:51:25 +0000
Manifest this update:     Fri 14 Aug 2026 08:46:25 +0000
Manifest next update:     Sat 15 Aug 2026 12:04:25 +0000
Files and hashes:         1: 3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa (hash: ICVXFGJ9lMHRN69DsRxhyvyG84k8PzJafwcpKMd81Og=)
                          2: 3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (hash: 6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=)
                          3: 3130332e3132332e3132382e302f32322d3234203d3e20313331363632.roa (hash: sNOioi06yxe+llEteV6NhBO021ATEGtMJoxqCD1yvEs=)
                          4: 323430333a613263303a3a2f33322d3438203d3e203230343733.roa (hash: m4c1iJtK8aN6J3lEQoStd8FFVOYzM3grbyfplvzUybo=)
                          5: 3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa (hash: Z+uz749mg+ZrLlWw12y0B3Ll+9VkgYTQP5LOcpJblvs=)
                          6: 059E0652FCBAC895061A57FE0566CF353F3E43CA.crl (hash: Jrdv37v6SZ25mfxFC3IVuM4jzDVMCT7ZpK08G2UT4v8=)
                          7: 3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa (hash: QqBGfQ7BdcX4jk0myPQHJHO1V9xzygncrdNvKEsMmnA=)
                          8: 3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa (hash: p3/JFj7x3ARP4jNwPc+pLHDD3Q/+iNNDoVFuKzGU7/M=)
                          9: 323430333a613263303a3a2f33322d3438203d3e20313331363632.roa (hash: 7bh7DLlqJphbWWAVyIde+HRB1Ap1WWUebp+RFOyy+Ms=)
                          10: 3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa (hash: hiUuE+JZDNJG0Ktu2U25SQe8A2H7nBcP9/QC/B02NR0=)
                          11: 3130332e3133352e31362e302f32342d3234203d3e20313338313435.roa (hash: km9qPDZIa8WiGvNcHuKf7su6Q2TEjTKsJ/KYkaeqv2E=)
                          12: 3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa (hash: oEX0nga4YWiRVwCH+XEdCpAnEZhmruGPpOo/+P0AeeY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
                          rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 12:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:d5:63:01:c4:a7:5e:78:51:33:c3:e4:ee:2b:7a:47:68:a9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: Aug 14 08:46:25 2026 GMT
            Not After : Aug 15 12:04:25 2026 GMT
        Subject: CN=1B59775D71C6BBC688F28B867C7FB0E8E0B16C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:c1:f9:9a:24:bb:47:08:78:62:9c:32:00:
                    4e:e1:64:d3:0c:5b:10:a9:50:11:ae:df:ad:af:07:
                    f1:57:04:f3:09:fb:8b:5c:e4:9e:a1:4b:8f:c5:e2:
                    01:63:0b:00:72:c1:9a:70:cd:bd:aa:0b:3e:7d:17:
                    ea:49:2b:93:77:9d:57:32:61:cb:3d:2d:07:55:c3:
                    a7:9f:ec:0c:b9:f6:68:23:b4:84:99:ac:39:8e:01:
                    97:7c:80:51:40:6d:be:92:e6:a9:cb:55:68:85:2e:
                    85:7d:13:18:1e:62:2e:20:ef:24:22:c5:d2:2c:81:
                    b7:08:ce:fa:a4:fc:43:aa:4b:ef:07:da:fa:28:7d:
                    5f:4e:92:4e:de:15:94:43:b5:6c:04:37:fb:ee:5b:
                    93:13:ab:1f:1d:f8:cd:13:3a:a5:f9:27:56:c4:88:
                    ca:05:8f:21:7e:44:2e:ed:fc:fd:63:a2:3a:c4:48:
                    19:48:39:45:63:e2:13:59:3d:48:24:a3:ab:c0:2a:
                    0e:d1:f7:11:9e:76:d1:0d:97:d0:70:8b:08:7c:94:
                    a8:24:21:22:ac:e4:37:79:04:5c:d4:23:aa:61:79:
                    fc:dd:64:9c:34:5a:68:17:3a:30:35:98:cb:f9:3e:
                    11:0d:d5:81:32:22:cc:c5:85:b7:4b:2e:91:92:c3:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:77:5D:71:C6:BB:C6:88:F2:8B:86:7C:7F:B0:E8:E0:B1:6C:6E
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:93:4c:fb:be:aa:5e:fa:7a:6c:35:c5:f2:98:96:92:aa:
         c7:82:8e:af:a3:d7:5f:db:49:85:46:77:1a:eb:6a:d9:e3:01:
         db:3f:e1:35:b6:ee:ab:47:63:ed:e4:00:6f:68:fc:c8:6e:de:
         cc:f1:0b:d4:c8:0f:9b:e1:63:6e:dd:30:06:e9:70:20:f2:40:
         11:dc:21:e2:89:79:84:00:b1:e3:0a:5a:8f:15:36:18:76:11:
         e3:f1:23:4b:cc:50:7c:b6:6a:a3:34:79:38:de:3c:ea:e6:21:
         fd:8d:67:4c:ff:ec:fa:1d:e1:b3:55:ec:85:51:73:e6:e0:c7:
         76:c1:a1:a5:3a:64:1c:6d:48:63:90:d7:69:c9:2a:f6:d3:8e:
         13:10:9e:20:57:34:f7:ff:87:b6:a0:4a:6a:3e:4b:f9:46:10:
         e2:65:30:df:26:0d:2c:1b:f1:03:82:d4:30:4e:26:49:a4:d3:
         5e:70:03:31:ea:83:57:42:46:11:ba:33:5c:a7:e5:5c:38:32:
         c5:bc:12:49:2f:cf:9b:f4:02:05:22:d7:e9:4e:4a:a7:8d:83:
         8c:94:60:0f:71:a7:bc:44:99:8b:a5:9c:39:27:2f:5a:a3:d5:
         87:40:e9:d5:38:c4:32:58:60:15:a1:bc:0f:8b:73:43:62:7a:
         27:27:f3:1b
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUWlLVYwHEp154UTPD5O4rekdoqVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2NkNGMzUz
RjNFNDNDQTAeFw0yNjA4MTQwODQ2MjVaFw0yNjA4MTUxMjA0MjVaMDMxMTAvBgNV
BAMTKDFCNTk3NzVENzFDNkJCQzY4OEYyOEI4NjdDN0ZCMEU4RTBCMTZDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWsH5miS7Rwh4YpwyAE7hZNMM
WxCpUBGu362vB/FXBPMJ+4tc5J6hS4/F4gFjCwBywZpwzb2qCz59F+pJK5N3nVcy
Ycs9LQdVw6ef7Ay59mgjtISZrDmOAZd8gFFAbb6S5qnLVWiFLoV9ExgeYi4g7yQi
xdIsgbcIzvqk/EOqS+8H2voofV9Okk7eFZRDtWwEN/vuW5MTqx8d+M0TOqX5J1bE
iMoFjyF+RC7t/P1jojrESBlIOUVj4hNZPUgko6vAKg7R9xGedtENl9Bwiwh8lKgk
ISKs5Dd5BFzUI6phefzdZJw0WmgXOjA1mMv5PhEN1YEyIszFhbdLLpGSwzr3AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUG1l3XXHGu8aI8ouGfH+w6OCxbG4wHwYDVR0j
BBgwFoAUBZ4GUvy6yJUGGlf+BWbPNT8+Q8owDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREVOUEFJ
Ty8wLzA1OUUwNjUyRkNCQUM4OTUwNjFBNTdGRTA1NjZDRjM1M0YzRTQzQ0EuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2
NkNGMzUzRjNFNDNDQS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RFTlBBSU8vMC8wNTlFMDY1MkZD
QkFDODk1MDYxQTU3RkUwNTY2Q0YzNTNGM0U0M0NBLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaySTTPu+
ql76emw1xfKYlpKqx4KOr6PXX9tJhUZ3Gutq2eMB2z/hNbbuq0dj7eQAb2j8yG7e
zPEL1MgPm+Fjbt0wBulwIPJAEdwh4ol5hACx4wpajxU2GHYR4/EjS8xQfLZqozR5
ON486uYh/Y1nTP/s+h3hs1XshVFz5uDHdsGhpTpkHG1IY5DXackq9tOOExCeIFc0
9/+HtqBKaj5L+UYQ4mUw3yYNLBvxA4LUME4mSaTTXnADMeqDV0JGEbozXKflXDgy
xbwSSS/Pm/QCBSLX6U5Kp42DjJRgD3GnvESZi6WcOScvWqPVh0Dp1TjEMlhgFaG8
D4tzQ2J6JyfzGw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:45 2026 by rpki-client