Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File:                     CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier:          dYZK4dK7GvmeihsvHADTapWreoPVJ76wPUObmB6i8rM=
Subject key identifier:   13:F6:E3:28:89:3F:1A:55:A5:E1:3F:49:FC:E4:7C:AA:48:05:E8:BB
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       062E72185BEA19DFF182B5A371CE1782553C69E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number:          0198
Signing time:             Tue 30 Jun 2026 01:22:47 +0000
Manifest this update:     Tue 30 Jun 2026 01:17:47 +0000
Manifest next update:     Wed 01 Jul 2026 04:30:47 +0000
Files and hashes:         1: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
                          2: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
                          3: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
                          4: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
                          5: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
                          6: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
                          7: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
                          8: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
                          9: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
                          10: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
                          11: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
                          12: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
                          13: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
                          14: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
                          15: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
                          16: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
                          17: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
                          18: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
                          19: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
                          20: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: bk7/L5Xkh2GAMnQKmP7cjoycZ4ZO2GsAcKAVQ7ROifk=)
                          21: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
                          22: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
                          23: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
                          24: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 04:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:72:18:5b:ea:19:df:f1:82:b5:a3:71:ce:17:82:55:3c:69:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: Jun 30 01:17:47 2026 GMT
            Not After : Jul  1 04:30:47 2026 GMT
        Subject: CN=13F6E328893F1A55A5E13F49FCE47CAA4805E8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:e1:53:94:98:92:ff:41:19:1b:7f:42:5a:
                    71:6f:03:dc:5e:7e:68:e2:5e:24:37:1c:c8:3e:1b:
                    02:58:b5:2b:9c:9c:d0:ee:c2:24:68:8f:d6:a7:20:
                    14:30:2a:c5:8d:c0:57:7c:79:75:25:94:77:8f:1c:
                    b2:9d:7f:93:f4:27:8c:ca:34:38:5a:6a:ab:d1:94:
                    aa:cb:9a:ee:f3:fb:99:cc:4c:54:78:b4:9c:1a:37:
                    3d:35:98:b6:fa:d8:40:65:e0:e8:77:d9:bc:db:21:
                    f1:7a:2f:44:79:1a:c1:5f:54:7c:4d:b6:38:86:9f:
                    ed:7b:83:c4:c9:cf:f8:e3:e0:81:f0:e6:03:df:b7:
                    05:4b:7f:36:88:d1:35:22:83:d6:93:06:42:ff:2f:
                    be:0c:6a:21:a4:bc:6a:a9:7c:34:92:64:e8:72:62:
                    6a:e2:ef:a7:60:eb:84:aa:71:33:99:e1:f6:87:4c:
                    f5:41:fc:a5:ab:bb:7b:cb:10:c3:a2:55:ec:8e:75:
                    20:c3:bc:f7:02:a9:71:fb:e0:b3:4a:3f:c5:b2:98:
                    2c:4b:b2:d8:69:82:12:6d:38:27:2b:0a:b0:d7:53:
                    68:d6:ef:97:83:01:0c:bb:b2:57:22:2a:36:b7:64:
                    3c:59:98:cb:e3:af:ab:76:ec:ca:aa:94:c2:a6:8b:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:E3:28:89:3F:1A:55:A5:E1:3F:49:FC:E4:7C:AA:48:05:E8:BB
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:a8:ec:0c:b6:14:7d:cd:1b:35:d1:ed:0b:ca:44:ea:47:
         14:d6:30:6b:3a:f4:a5:70:ec:c9:ec:05:5b:f7:fb:3e:d9:6b:
         63:6c:04:9f:b3:de:87:bc:28:d4:0a:52:46:a0:24:93:15:c1:
         d9:e1:22:2d:67:b8:e1:01:f1:79:de:bc:c8:4b:47:a4:d7:c4:
         f8:2d:3d:0b:ec:20:25:fa:48:e9:59:0b:15:0e:64:d3:37:a5:
         f0:ab:de:50:6a:36:3c:2a:45:3b:b0:95:7e:f7:a7:10:0a:9b:
         17:b7:99:e7:f7:80:89:52:a4:76:0c:cf:e7:58:38:64:22:9c:
         50:42:87:22:13:87:3e:a0:bc:e3:6d:1d:fc:f3:05:c0:70:a7:
         0a:bb:00:d2:2d:75:78:50:ef:9f:13:2d:a3:2e:ef:ac:1a:17:
         fa:6d:3d:b2:3a:a2:f3:49:65:c0:8c:ef:20:c8:ff:37:ff:cf:
         e2:38:86:4c:25:a2:57:10:b9:ed:dc:18:c8:d8:68:94:69:32:
         ff:0f:24:7f:93:9b:c8:30:ce:2a:34:8f:e6:f2:28:dc:26:a1:
         a1:30:fa:8b:6e:f9:14:bd:b0:5c:e8:89:b9:8e:50:6c:02:fe:
         bf:26:5f:7c:94:38:a1:89:d3:3b:24:03:21:b4:8b:35:89:5c:
         9b:54:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:56 2026 by rpki-client