Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          fg5p3c4lz22JGHT5C5JqWV5oZ/+HuUe7+dfYXQnk3tU=
Subject key identifier:   E0:72:AC:9F:25:30:6C:BE:DB:47:2C:02:51:BE:21:E6:41:EE:52:0C
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       6DE8063FBD903940A4E4EF82EC295ED63482C577
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0217
Signing time:             Sun 04 Oct 2026 07:24:28 +0000
Manifest this update:     Sun 04 Oct 2026 07:19:28 +0000
Manifest next update:     Mon 05 Oct 2026 08:57:28 +0000
Files and hashes:         1: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          2: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: 9rH4VJjDBLJFFDmu2WcZyZNzDDkfwmealKZvCgA2n1g=)
                          3: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          4: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          5: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          6: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          7: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          8: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          9: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          10: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          11: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          12: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
                          13: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          14: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          15: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          16: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          17: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          18: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          19: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          20: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          21: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          22: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          23: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          24: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 08:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e8:06:3f:bd:90:39:40:a4:e4:ef:82:ec:29:5e:d6:34:82:c5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Oct  4 07:19:28 2026 GMT
            Not After : Oct  5 08:57:28 2026 GMT
        Subject: CN=E072AC9F25306CBEDB472C0251BE21E641EE520C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:d6:1d:b6:49:12:ed:11:c2:2d:01:77:11:
                    c6:28:1f:01:03:7f:27:c6:01:96:e9:98:75:c8:c3:
                    8f:1c:60:8b:5f:62:3e:e9:3a:42:51:c2:ef:ac:91:
                    c8:d7:aa:0c:4f:19:5c:20:ab:b9:72:ed:21:fe:c8:
                    53:48:c1:ff:d7:51:78:37:bc:4d:c2:3c:35:ce:eb:
                    2d:65:26:cc:0f:03:0b:e5:31:3e:33:8a:32:f2:65:
                    9a:4c:f9:d9:94:10:89:0e:10:ca:7c:bc:55:85:75:
                    ec:0e:37:c0:eb:f1:f2:4a:ee:66:cc:84:71:ec:bc:
                    ab:6b:5c:65:d7:8c:ca:86:04:fb:6f:2c:e0:78:90:
                    46:b4:0e:2a:b8:3f:d7:25:8e:07:aa:cd:0d:1a:2a:
                    7a:bf:89:40:62:06:20:53:74:fd:dc:6b:3f:27:7a:
                    39:62:10:22:54:77:30:54:17:b4:64:48:90:e4:31:
                    cd:8d:5c:34:a5:71:b9:e5:dc:cf:f1:cb:39:c8:3a:
                    80:4b:6e:e2:3c:a1:81:72:d7:1c:dd:9b:09:f4:14:
                    74:42:df:16:41:b6:ac:69:e9:f9:e4:26:04:50:28:
                    7d:9b:93:9d:69:fb:63:1e:7d:5a:5e:ef:68:31:76:
                    3c:58:0f:8f:23:31:18:ec:89:76:80:00:70:2e:d0:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:AC:9F:25:30:6C:BE:DB:47:2C:02:51:BE:21:E6:41:EE:52:0C
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:70:7a:26:6b:c3:0b:59:d2:f1:7d:b9:f8:33:fe:d0:f4:b7:
         c8:b1:b9:51:20:ea:20:b5:9c:ff:d3:f1:e4:80:4a:9b:64:22:
         a8:6d:0c:6b:f8:1c:31:b9:02:c2:10:22:76:dd:55:84:76:95:
         46:9b:f0:90:d5:f8:93:5d:9f:e6:25:ec:4b:ce:51:13:75:67:
         f3:61:a9:15:40:c9:63:e6:0a:f3:72:0d:e3:85:96:a4:8f:ce:
         cc:56:c3:d5:9f:d8:07:d9:fb:dc:3d:39:4a:30:ad:3c:b9:2b:
         3b:70:fe:a1:86:00:e2:9c:cb:d1:fa:36:dc:e9:39:ea:4d:8d:
         99:f5:85:91:a8:24:fe:65:83:d3:65:83:f5:c8:b6:be:bd:0c:
         b9:56:bb:e6:91:c5:67:82:84:f2:f0:9f:8c:cd:ba:20:81:03:
         c3:74:37:e0:88:5f:d0:13:fa:7e:19:ae:e7:f8:7b:dc:1d:fa:
         8f:56:fd:41:04:e7:5a:ef:f6:2d:3b:50:f3:bc:e2:6c:73:8e:
         f0:1e:80:b4:69:76:16:e2:d3:c9:a7:b7:45:1d:52:72:79:ab:
         d1:98:57:df:b2:07:5b:b2:15:16:da:a0:14:7a:67:5c:62:5f:
         e0:b0:8b:89:12:6b:a2:69:f2:3f:e8:11:49:89:ce:5d:36:c3:
         12:d0:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:01:11 2026 by rpki-client