Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier:          hK0Uyrvcu+bJBk7I0WxF4S65Vs9D8ohnba//2R5B/gY=
Subject key identifier:   72:4A:33:A5:09:69:D2:91:25:A5:1F:C9:AF:7B:F7:4B:1B:49:93:16
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       55D194A08B7253E44AC482122D2D6AA4CD63E89A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number:          8D
Signing time:             Fri 14 Aug 2026 17:22:39 +0000
Manifest this update:     Fri 14 Aug 2026 17:17:39 +0000
Manifest next update:     Sat 15 Aug 2026 20:24:39 +0000
Files and hashes:         1: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
                          2: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
                          3: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
                          4: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
                          5: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
                          6: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
                          7: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
                          8: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
                          9: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
                          10: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
                          11: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: Fr+aCfw5aJk8Bo+vXwM4QgZjT0PjFg3cE/mivi7j0Oc=)
                          12: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
                          13: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
                          14: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
                          rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 20:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d1:94:a0:8b:72:53:e4:4a:c4:82:12:2d:2d:6a:a4:cd:63:e8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: Aug 14 17:17:39 2026 GMT
            Not After : Aug 15 20:24:39 2026 GMT
        Subject: CN=724A33A50969D29125A51FC9AF7BF74B1B499316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:f8:f2:31:c6:7c:0e:a5:dd:ea:50:88:b6:
                    83:6b:42:69:03:4d:e2:b2:f3:93:a9:af:bc:50:af:
                    74:17:ef:88:a9:49:87:cd:f4:14:d1:33:70:f5:0e:
                    aa:e8:f3:4f:ff:37:f0:16:7e:21:65:e6:06:de:67:
                    41:57:e5:f2:6d:dd:4a:bc:a3:65:29:90:3f:ea:ab:
                    a9:36:b5:df:83:46:2d:56:ce:47:8c:b3:a7:3c:f9:
                    3f:b3:38:f6:cc:13:7b:c1:d0:35:25:68:3a:ed:fd:
                    f3:dc:8e:4c:73:b5:4e:ef:e9:a4:5f:58:03:e7:92:
                    7c:0a:58:76:16:07:54:47:08:da:ba:f4:a1:9c:0c:
                    1e:77:94:12:c7:fe:fb:54:3c:e9:5f:a1:23:be:69:
                    4e:cc:bd:67:b7:a8:f0:50:c6:31:ac:f2:f1:28:59:
                    d7:b6:c5:6c:30:55:c5:c1:b9:f5:35:ab:dc:d8:5f:
                    da:09:92:eb:56:61:0f:8c:70:b8:dc:73:44:c7:29:
                    d0:c3:f4:55:9b:dc:d8:9a:4d:32:8e:57:d5:26:55:
                    d1:5b:8b:63:86:c0:76:bb:bf:c4:88:0f:40:9b:89:
                    ca:69:72:e9:79:bd:b5:9e:94:a0:81:81:3b:55:83:
                    0e:a4:5a:a4:c0:c6:4d:4e:a8:cc:35:2b:ab:b7:6d:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4A:33:A5:09:69:D2:91:25:A5:1F:C9:AF:7B:F7:4B:1B:49:93:16
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:0b:a3:fa:3e:79:1d:d2:11:94:81:3a:83:6e:02:f7:fe:31:
         82:af:6e:33:97:ba:a1:94:0f:a5:8d:11:90:ee:16:a8:d9:b7:
         dd:3f:f2:c8:c5:73:88:51:fd:57:3e:54:ef:dd:1e:13:fd:1d:
         e7:62:76:2c:56:d3:75:1e:0e:c0:b7:8d:b6:c9:75:d4:57:e1:
         43:68:9e:81:7d:73:64:e5:63:53:c1:2c:e7:e2:c4:02:b5:a6:
         e6:21:a4:29:3b:6a:81:89:33:8e:5d:0b:25:5d:7e:00:71:29:
         e2:7c:fc:cd:f9:08:2d:c4:78:d1:2c:c3:a0:1e:ff:cd:e0:bb:
         b5:fe:8e:e9:0a:5b:c0:d1:db:07:24:86:5c:da:af:16:39:0e:
         2d:65:d9:c5:ed:cf:b7:13:6f:a5:f7:81:91:2e:dc:50:11:48:
         0d:db:12:c5:68:f8:45:b9:72:02:68:e7:ce:28:cd:42:b9:7d:
         cd:31:01:77:97:6f:20:b6:9e:bb:e7:8c:d3:ad:2b:1c:3c:99:
         16:79:c1:5c:48:93:79:b6:85:54:ce:c4:e7:e8:fd:89:4c:a9:
         1a:a0:b9:08:e5:0a:11:56:a2:84:41:d6:7b:cc:4f:e7:2b:92:
         b9:98:5b:85:c6:21:bc:b3:ea:2b:0f:8f:bb:eb:26:06:42:b9:
         b8:1c:16:3c
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUVdGUoItyU+RKxIISLS1qpM1j6JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD
QzhFQTZDMTAeFw0yNjA4MTQxNzE3MzlaFw0yNjA4MTUyMDI0MzlaMDMxMTAvBgNV
BAMTKDcyNEEzM0E1MDk2OUQyOTEyNUE1MUZDOUFGN0JGNzRCMUI0OTkzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdfjyMcZ8DqXd6lCItoNrQmkD
TeKy85Opr7xQr3QX74ipSYfN9BTRM3D1Dqro80//N/AWfiFl5gbeZ0FX5fJt3Uq8
o2UpkD/qq6k2td+DRi1WzkeMs6c8+T+zOPbME3vB0DUlaDrt/fPcjkxztU7v6aRf
WAPnknwKWHYWB1RHCNq69KGcDB53lBLH/vtUPOlfoSO+aU7MvWe3qPBQxjGs8vEo
Wde2xWwwVcXBufU1q9zYX9oJkutWYQ+McLjcc0THKdDD9FWb3NiaTTKOV9UmVdFb
i2OGwHa7v8SID0Cbicppcul5vbWelKCBgTtVgw6kWqTAxk1OqMw1K6u3bRUJAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUckozpQlp0pElpR/Jr3v3SxtJkxYwHwYDVR0j
BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w
LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB
RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1
ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Auj+j55HdIRlIE6
g24C9/4xgq9uM5e6oZQPpY0RkO4WqNm33T/yyMVziFH9Vz5U790eE/0d52J2LFbT
dR4OwLeNtsl11FfhQ2iegX1zZOVjU8Es5+LEArWm5iGkKTtqgYkzjl0LJV1+AHEp
4nz8zfkILcR40SzDoB7/zeC7tf6O6QpbwNHbBySGXNqvFjkOLWXZxe3PtxNvpfeB
kS7cUBFIDdsSxWj4RblyAmjnzijNQrl9zTEBd5dvILaeu+eM060rHDyZFnnBXEiT
ebaFVM7E5+j9iUypGqC5COUKEVaihEHWe8xP5yuSuZhbhcYhvLPqKw+Pu+smBkK5
uBwWPA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:02 2026 by rpki-client