Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File:                     9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier:          3N7FL5ZGhysY68ZzDhqC+mAfcjOfBBjC1EZsnM03i8k=
Subject key identifier:   6C:AE:3B:2A:24:E4:3F:CC:51:72:6E:F1:CA:6D:7C:72:B3:19:A7:7F
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer:       /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial:       6D9C9F155C9B41A3488656792C893A5C235D85B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number:          82
Signing time:             Fri 14 Aug 2026 20:23:24 +0000
Manifest this update:     Fri 14 Aug 2026 20:18:24 +0000
Manifest next update:     Sat 15 Aug 2026 22:56:24 +0000
Files and hashes:         1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: VFT3bKT9SreoNuF2d5fk8goqfdRsLgicSholWFIbDBE=)
                          2: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
                          3: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
                          rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 22:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9c:9f:15:5c:9b:41:a3:48:86:56:79:2c:89:3a:5c:23:5d:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
        Validity
            Not Before: Aug 14 20:18:24 2026 GMT
            Not After : Aug 15 22:56:24 2026 GMT
        Subject: CN=6CAE3B2A24E43FCC51726EF1CA6D7C72B319A77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:e0:be:41:51:11:82:9f:cb:19:19:74:94:
                    ef:63:4a:79:08:6d:d7:56:9f:88:2e:60:01:22:9d:
                    86:af:ff:46:f0:31:35:d7:f9:8e:d1:70:b4:ac:ea:
                    f7:87:ec:72:ac:23:e1:12:6b:72:1b:29:48:27:34:
                    15:f2:67:48:50:6b:fd:09:8e:83:d5:cd:b6:40:ea:
                    51:60:15:8f:ed:db:fe:65:3e:7c:01:16:d3:bc:c4:
                    b4:de:c0:76:94:e1:b3:e3:80:12:3a:9e:31:83:37:
                    ec:4d:83:2b:db:99:61:31:6d:36:b8:8f:e6:2b:6c:
                    d4:ec:e9:ac:5a:2c:b6:38:92:6b:d2:fb:b3:63:6c:
                    ed:05:94:17:be:ad:ff:a8:3b:f0:b0:d7:cf:92:a9:
                    b7:dd:49:bb:ed:cf:39:48:f7:30:d4:db:73:00:5d:
                    93:a5:65:23:17:44:f1:65:28:4d:93:81:64:de:7b:
                    90:44:3f:b3:92:6c:de:57:77:bb:b0:7f:89:bb:14:
                    43:91:eb:4e:15:6f:a3:f7:94:ec:50:ad:b2:46:bc:
                    b7:44:ad:d0:6b:c5:97:d5:70:fe:03:6f:1d:c7:d3:
                    dc:c2:7c:b2:75:60:d7:4b:4a:63:88:03:c1:c6:bf:
                    33:b6:c4:63:63:39:c3:43:48:62:8f:e7:74:6f:e6:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:3B:2A:24:E4:3F:CC:51:72:6E:F1:CA:6D:7C:72:B3:19:A7:7F
            X509v3 Authority Key Identifier:
                keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:c9:be:e1:b1:3c:4e:41:28:ba:23:25:95:8a:3f:6b:7e:
         ba:ec:83:70:23:44:d5:7a:7d:4e:c3:c8:75:f5:57:2e:f2:51:
         06:b2:83:0a:b2:87:08:6c:d9:fe:ca:c7:6f:9c:70:0f:ff:0e:
         ba:c5:da:e6:9f:35:ab:ad:2d:f2:c9:43:27:1b:02:5c:fb:ce:
         0d:d8:b2:27:52:98:32:9a:f2:9c:02:c4:7c:dc:fe:c1:1d:bc:
         70:ae:c8:b9:8f:6b:86:1b:d5:dc:1a:77:ae:0d:8a:9a:2c:35:
         e3:cc:64:31:fa:26:e1:50:1e:bc:9d:ac:a4:4b:c9:d4:22:89:
         cc:af:cc:8e:ce:a8:e6:68:a9:41:0e:96:bf:e3:9e:4e:0b:5f:
         7d:1f:db:94:c2:e6:07:28:a9:d8:26:1b:3e:39:88:53:5c:88:
         bd:17:37:83:b5:07:06:ec:ea:28:25:89:27:1c:c2:20:bf:3a:
         8a:3d:c1:15:6f:ba:34:04:00:af:ab:b8:9c:52:7b:0b:7e:ac:
         9b:5a:d7:00:f0:eb:01:ac:55:46:ff:95:d0:7c:49:ee:b6:ec:
         46:9c:66:bf:f0:d3:0a:7c:6b:98:3d:b4:96:bd:1a:82:b3:89:
         f0:3a:e4:79:23:c1:98:36:01:bd:f8:46:07:94:1f:a2:0c:62:
         df:e8:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:47 2026 by rpki-client