Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          AnQEIFH5LMVS9s4vke8wdJKQ7RGWyTWVl99RA4YajS0=
Subject key identifier:   AA:A8:73:8D:8A:3D:C8:C9:6E:3F:76:C6:54:3A:40:5B:E2:13:32:10
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       0E12F05F279DCCFDA1427BA68E403C263B7D4D83
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          90
Signing time:             Fri 14 Aug 2026 20:08:22 +0000
Manifest this update:     Fri 14 Aug 2026 20:03:22 +0000
Manifest next update:     Sat 15 Aug 2026 23:03:22 +0000
Files and hashes:         1: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: S6w7WPlNL6J9CTnLKVz+d47+Dh0uLrhw0vz/SxekV/c=)
                          2: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          3: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          4: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          5: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          6: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          7: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          8: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          9: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          10: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
                          11: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          12: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          13: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
                          rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:12:f0:5f:27:9d:cc:fd:a1:42:7b:a6:8e:40:3c:26:3b:7d:4d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: Aug 14 20:03:22 2026 GMT
            Not After : Aug 15 23:03:22 2026 GMT
        Subject: CN=AAA8738D8A3DC8C96E3F76C6543A405BE2133210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:19:5d:a0:7f:92:65:f2:5d:d3:34:bb:9e:
                    86:a9:44:9b:f3:a5:6f:d2:80:b0:d4:dd:10:1a:e5:
                    7f:aa:5d:56:45:a4:85:37:4f:b8:c8:d1:3d:e8:2e:
                    52:62:c5:db:ee:b2:ec:4f:c1:45:5d:28:10:a6:a7:
                    1f:f8:67:98:ad:09:21:02:f2:d2:d4:48:64:07:52:
                    cb:27:ba:6a:1e:8f:06:dc:49:af:39:36:b2:18:45:
                    05:5d:3d:93:1f:cc:fc:40:84:e2:17:3c:89:70:d8:
                    5b:48:89:19:38:89:b5:7c:e6:f7:b1:fa:b2:1e:c1:
                    e1:24:6a:aa:62:8d:14:68:1a:d3:64:93:df:78:fb:
                    cf:13:8f:e1:af:4f:71:49:e1:d6:44:b2:e4:b8:92:
                    63:1a:29:a4:c3:01:6a:a6:a4:a1:97:48:5c:25:d8:
                    72:dc:70:b3:bb:45:70:17:b5:f5:53:26:11:66:13:
                    bc:0a:ad:dc:ab:8b:55:95:9b:f4:c3:d7:fe:9a:2d:
                    84:9c:90:cd:fe:9b:ce:b8:32:37:07:36:43:45:a7:
                    f7:6b:70:f4:1c:6a:81:49:18:ff:cc:bc:ea:82:5a:
                    3f:62:b5:56:24:43:42:6c:ea:2f:51:71:0e:7c:05:
                    36:86:2d:6e:bb:37:99:fc:f0:dd:55:df:31:33:31:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:73:8D:8A:3D:C8:C9:6E:3F:76:C6:54:3A:40:5B:E2:13:32:10
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:a6:a2:b1:c0:56:fa:f8:3e:bf:9f:00:be:08:4e:ee:a8:
         66:ba:3b:11:fd:03:54:e1:c2:8e:a5:60:b8:15:e8:2b:bd:2a:
         6d:1a:f4:5c:ea:3d:e5:5a:bb:c7:78:91:b0:7d:34:d5:31:c7:
         8f:33:27:35:32:f0:be:68:b3:8e:ab:70:a7:c2:ba:01:b4:b0:
         53:dc:5c:85:8a:d7:4f:e3:0c:6b:da:df:bd:0c:35:bf:a8:31:
         7f:ee:ec:cc:59:1f:a6:50:fe:97:20:a2:7f:9b:aa:9e:10:21:
         d6:ca:a5:4b:89:32:d7:21:54:67:b4:34:77:1d:96:8d:8f:3e:
         ce:a1:fd:58:7b:af:2f:5b:fc:c9:1a:bb:ac:e3:64:c1:c9:40:
         b5:ad:a6:77:9d:b0:b4:df:31:32:74:0a:9a:3d:84:15:a7:ee:
         70:e9:0f:a4:5d:a5:50:04:c6:71:80:c8:8a:f1:c1:74:49:97:
         08:05:8d:f2:6d:d0:6d:16:7f:9a:15:36:75:f6:7a:f1:65:5e:
         3b:92:c7:3b:c8:8c:a7:76:6f:03:c1:b2:25:9c:f7:9f:d9:b5:
         01:b9:f7:09:85:1c:55:ba:a8:60:a0:ae:24:0e:bb:1d:bb:2d:
         59:36:29:f6:58:dc:92:ea:8f:3c:b0:b6:1b:ea:0f:18:f5:f8:
         3b:4c:c6:9a
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUDhLwXyedzP2hQnumjkA8Jjt9TYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwN0M4QjhGQUIyQUY3ODVFNDQ5RjY5NTlBMzQzQzEx
RjNDMkY3RDAeFw0yNjA4MTQyMDAzMjJaFw0yNjA4MTUyMzAzMjJaMDMxMTAvBgNV
BAMTKEFBQTg3MzhEOEEzREM4Qzk2RTNGNzZDNjU0M0E0MDVCRTIxMzMyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DRldoH+SZfJd0zS7noapRJvz
pW/SgLDU3RAa5X+qXVZFpIU3T7jI0T3oLlJixdvusuxPwUVdKBCmpx/4Z5itCSEC
8tLUSGQHUssnumoejwbcSa85NrIYRQVdPZMfzPxAhOIXPIlw2FtIiRk4ibV85vex
+rIeweEkaqpijRRoGtNkk994+88Tj+GvT3FJ4dZEsuS4kmMaKaTDAWqmpKGXSFwl
2HLccLO7RXAXtfVTJhFmE7wKrdyri1WVm/TD1/6aLYSckM3+m864MjcHNkNFp/dr
cPQcaoFJGP/MvOqCWj9itVYkQ0Js6i9RcQ58BTaGLW67N5n88N1V3zEzMU1VAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUqqhzjYo9yMluP3bGVDpAW+ITMhAwHwYDVR0j
BBgwFoAUtAfIuPqyr3heRJ9pWaNDwR88L30wDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMC9CNDA3QzhCOEZBQjJBRjc4NUU0NDlGNjk1OUEzNDNDMTFGM0MyRjdELmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0I0MDdDOEI4RkFCMkFGNzg1RTQ0OUY2OTU5
QTM0M0MxMUYzQzJGN0QuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8wL0I0MDdDOEI4
RkFCMkFGNzg1RTQ0OUY2OTU5QTM0M0MxMUYzQzJGN0QubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfVqai
scBW+vg+v58AvghO7qhmujsR/QNU4cKOpWC4FegrvSptGvRc6j3lWrvHeJGwfTTV
McePMyc1MvC+aLOOq3CnwroBtLBT3FyFitdP4wxr2t+9DDW/qDF/7uzMWR+mUP6X
IKJ/m6qeECHWyqVLiTLXIVRntDR3HZaNjz7Oof1Ye68vW/zJGrus42TByUC1raZ3
nbC03zEydAqaPYQVp+5w6Q+kXaVQBMZxgMiK8cF0SZcIBY3ybdBtFn+aFTZ19nrx
ZV47ksc7yIyndm8DwbIlnPef2bUBufcJhRxVuqhgoK4kDrsduy1ZNin2WNyS6o88
sLYb6g8Y9fg7TMaa
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:05 2026 by rpki-client