Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          nOmPKVJmWEAzJvhXFVN3VWo+b6ZiISLBpQCue84a5Sc=
Subject key identifier:   D8:B2:74:E9:E9:7C:6B:5C:5A:98:75:A2:47:E1:D9:A5:77:85:F2:B3
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       775F34A3BEE09273A7DE6EABC21AB8E5F7D29675
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0159
Signing time:             Wed 13 May 2026 14:27:53 +0000
Manifest this update:     Wed 13 May 2026 14:22:53 +0000
Manifest next update:     Thu 14 May 2026 17:00:53 +0000
Files and hashes:         1: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          2: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          3: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          4: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          5: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          6: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          7: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          8: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          9: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          10: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          11: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          12: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          13: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          14: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          15: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          16: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          17: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          18: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          19: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          20: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: R3OWbDPgKjpQ31LYAT8OX0KJWAgxLKLXt56pYG1SYAw=)
                          21: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          22: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          23: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          24: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:34:a3:be:e0:92:73:a7:de:6e:ab:c2:1a:b8:e5:f7:d2:96:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: May 13 14:22:53 2026 GMT
            Not After : May 14 17:00:53 2026 GMT
        Subject: CN=D8B274E9E97C6B5C5A9875A247E1D9A57785F2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:2f:f8:9f:1b:8a:69:5f:b5:c2:28:72:0a:
                    af:f1:83:5c:cf:6e:99:de:de:d1:0e:44:1f:a1:b7:
                    d4:cc:d5:6b:8b:9d:88:61:fb:c9:d0:83:27:bb:dd:
                    23:02:48:f9:67:44:75:16:f7:2d:7e:22:6f:67:f6:
                    86:dc:83:31:9e:f7:c9:53:b1:a5:b5:1e:ed:d1:3e:
                    8a:47:23:e7:20:89:57:ff:75:5b:5a:33:9f:fd:6d:
                    f5:d1:9d:04:03:7a:d5:30:94:d4:d5:f4:8d:71:5b:
                    28:da:fd:21:50:76:09:e0:62:03:85:f5:70:31:67:
                    95:1c:7e:b3:fc:ce:c3:83:f3:1b:e1:52:3f:fa:98:
                    1f:49:d5:61:3b:cb:f2:c1:b1:98:3b:e1:a3:2d:14:
                    c6:90:f8:d2:7e:b6:ae:8a:e0:87:f9:c9:07:a7:ea:
                    96:5c:4c:01:06:3a:75:6c:7a:d0:9c:bd:3f:f7:af:
                    93:bf:6c:46:ec:18:07:42:f2:8b:da:f4:ce:4b:3d:
                    dc:43:69:16:70:b2:07:ca:03:b8:7b:bb:bf:04:0f:
                    0d:15:ea:a4:ca:ca:6a:c7:d0:d5:5e:49:3d:8c:a4:
                    42:3d:34:22:c4:56:4f:b4:a1:71:89:d7:4d:4b:94:
                    09:79:3a:3a:0f:aa:76:90:69:3a:78:96:83:ba:47:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:74:E9:E9:7C:6B:5C:5A:98:75:A2:47:E1:D9:A5:77:85:F2:B3
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:f3:a0:4b:25:f2:1b:52:7c:d1:8f:f4:8b:31:80:40:af:
         11:b7:ba:53:55:23:ca:cd:d1:2a:42:3f:88:4c:38:0e:5a:87:
         7d:43:f2:a6:4d:cb:70:9c:94:72:99:60:fb:66:9a:99:3e:28:
         66:d5:84:31:a7:7e:f7:a8:fe:b0:95:4a:c0:db:dd:27:1e:27:
         ad:d0:98:b8:1a:c9:f2:57:44:c8:d9:89:c9:fa:fc:cc:67:d5:
         5f:b9:42:71:91:0c:68:bb:75:84:a5:02:ae:4e:49:20:63:ab:
         58:15:62:00:2c:96:19:ac:0c:f8:ef:3a:35:41:64:46:40:59:
         69:24:c3:b9:ee:b6:ab:37:1e:24:c8:ba:0d:22:98:2c:53:eb:
         09:37:a5:da:ea:78:e0:1d:20:cc:69:f1:2b:ee:a2:f1:ee:20:
         51:20:af:fa:cd:40:6d:96:7f:35:80:fe:f2:88:5c:af:01:4a:
         e6:5c:55:71:58:68:c5:09:23:fe:0d:1f:eb:62:eb:cd:ef:fb:
         f6:bb:72:e0:4e:05:4a:0d:06:57:79:b4:91:9a:48:31:10:4c:
         07:79:91:26:76:a0:91:d3:6d:20:8c:6a:66:05:c0:cc:63:06:
         c5:31:e8:92:d9:7b:a3:b0:c0:0c:c0:93:39:e6:dc:4b:41:b1:
         7e:66:3a:f3
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUd180o77gknOn3m6rwhq45ffSlnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC
NDc0RTdGQjAeFw0yNjA1MTMxNDIyNTNaFw0yNjA1MTQxNzAwNTNaMDMxMTAvBgNV
BAMTKEQ4QjI3NEU5RTk3QzZCNUM1QTk4NzVBMjQ3RTFEOUE1Nzc4NUYyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLS/4nxuKaV+1wihyCq/xg1zP
bpne3tEORB+ht9TM1WuLnYhh+8nQgye73SMCSPlnRHUW9y1+Im9n9obcgzGe98lT
saW1Hu3RPopHI+cgiVf/dVtaM5/9bfXRnQQDetUwlNTV9I1xWyja/SFQdgngYgOF
9XAxZ5UcfrP8zsOD8xvhUj/6mB9J1WE7y/LBsZg74aMtFMaQ+NJ+tq6K4If5yQen
6pZcTAEGOnVsetCcvT/3r5O/bEbsGAdC8ova9M5LPdxDaRZwsgfKA7h7u78EDw0V
6qTKymrH0NVeST2MpEI9NCLEVk+0oXGJ101LlAl5OjoPqnaQaTp4loO6R4zfAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU2LJ06el8a1xamHWiR+HZpXeF8rMwHwYDVR0j
BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w
L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC
MkNCNDc0RTdGQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9DQ0Y4NUY5QTEyNEVCMzE1
RkE2RjVBMUIzODIzN0IyQ0I0NzRFN0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9rzoEsl8htSfNGP
9IsxgECvEbe6U1Ujys3RKkI/iEw4DlqHfUPypk3LcJyUcplg+2aamT4oZtWEMad+
96j+sJVKwNvdJx4nrdCYuBrJ8ldEyNmJyfr8zGfVX7lCcZEMaLt1hKUCrk5JIGOr
WBViACyWGawM+O86NUFkRkBZaSTDue62qzceJMi6DSKYLFPrCTel2up44B0gzGnx
K+6i8e4gUSCv+s1AbZZ/NYD+8ohcrwFK5lxVcVhoxQkj/g0f62Lrze/79rty4E4F
Sg0GV3m0kZpIMRBMB3mRJnagkdNtIIxqZgXAzGMGxTHoktl7o7DADMCTOebcS0Gx
fmY68w==
-----END CERTIFICATE-----
Generated at Wed May 13 20:36:11 2026 by rpki-client