Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          EZRkZ5IlCxJyOUMJ9VB5/o05UWpzR6oqG4nWdkOVsAg=
Subject key identifier:   DA:E8:63:8E:AF:6A:25:AA:1E:17:AA:8A:DC:6F:2B:93:A8:79:D4:F1
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       2F435CCB8928ADFF8037E01FCA4F75B3E728A266
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          8E
Signing time:             Fri 14 Aug 2026 21:53:33 +0000
Manifest this update:     Fri 14 Aug 2026 21:48:33 +0000
Manifest next update:     Sun 16 Aug 2026 01:32:33 +0000
Files and hashes:         1: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
                          2: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          3: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          4: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
                          5: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          6: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          7: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
                          8: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          9: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          10: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: flXCB9XymDKBb8i68khg6hy0cH1f6nZnyC5GcFyPdn8=)
                          11: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          12: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          13: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          14: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
                          15: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 01:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:43:5c:cb:89:28:ad:ff:80:37:e0:1f:ca:4f:75:b3:e7:28:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: Aug 14 21:48:33 2026 GMT
            Not After : Aug 16 01:32:33 2026 GMT
        Subject: CN=DAE8638EAF6A25AA1E17AA8ADC6F2B93A879D4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:4e:2d:34:4f:79:1d:44:69:1f:c9:ac:ec:
                    9b:10:fd:d6:fa:6a:90:5d:4e:aa:a9:26:bb:6c:1c:
                    80:e7:da:cb:ea:76:a4:b9:9d:27:ce:9f:30:7a:17:
                    48:a5:b7:36:2c:f9:eb:9e:e0:da:a8:85:9e:81:0e:
                    64:c1:a4:a4:77:6a:81:62:57:66:d2:c4:06:c3:de:
                    7d:65:0e:e9:61:e2:58:c0:49:94:95:f2:80:df:a7:
                    92:3f:1d:94:ed:6c:4d:aa:5e:9a:f1:0a:f9:b5:ee:
                    23:02:80:65:73:04:b0:36:bf:34:65:03:9d:31:26:
                    83:03:81:dc:33:98:77:1e:19:29:6d:31:ef:18:48:
                    91:38:52:27:86:6b:0c:a8:96:cf:15:4e:f1:1e:97:
                    47:8c:a3:03:be:c4:7d:83:89:42:ec:09:1e:4d:c3:
                    67:f3:21:a2:c7:b7:91:e0:8e:f7:cc:66:96:e8:47:
                    c6:80:71:97:f3:7d:d8:4c:09:af:0a:b2:f7:9c:88:
                    b3:8c:3f:6b:4a:77:60:5d:fc:c5:bb:e1:fb:0d:b5:
                    30:7f:c3:a8:75:66:64:23:12:60:cf:46:88:91:f5:
                    41:96:65:88:52:fe:66:49:82:ee:59:73:c8:f1:d1:
                    8f:eb:e9:7d:a6:36:62:90:a2:39:3b:55:58:a3:6a:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E8:63:8E:AF:6A:25:AA:1E:17:AA:8A:DC:6F:2B:93:A8:79:D4:F1
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:42:0d:ef:74:fb:d1:a3:06:04:4d:cf:4f:19:62:1d:15:a4:
         a7:99:b5:a9:a4:c4:e7:2c:9e:54:36:8f:e8:3b:d4:9f:99:ad:
         c2:3c:46:bf:55:dc:2a:f9:38:3b:40:12:45:ce:a2:63:cd:ab:
         c8:2f:7b:9a:08:ba:e5:bb:4d:41:66:d6:65:8a:4a:f6:59:2e:
         95:ea:74:68:26:1e:f9:2b:55:8b:ba:91:c6:44:53:1d:69:88:
         97:c9:89:a5:ad:c3:99:97:78:c6:ed:86:57:e9:bd:d2:11:b6:
         c2:8c:a0:d6:b1:b0:c9:e9:57:4b:1b:d8:de:4b:5c:d5:45:43:
         61:78:48:50:b6:75:d4:c0:84:ee:58:10:8a:b2:9b:32:4e:7b:
         13:11:00:88:ce:0d:d9:fd:cb:1e:7e:4d:f0:d3:70:e3:61:71:
         08:17:c8:03:a2:8d:9e:ac:22:ad:27:ab:76:ba:b0:45:de:3e:
         57:d7:c2:6e:a3:ff:63:d9:51:8d:e2:94:76:f6:d6:32:ae:2c:
         9a:ba:23:3f:02:46:19:e3:53:04:f4:63:22:51:96:93:c5:75:
         18:5e:68:1c:90:cf:ee:82:30:a2:4f:1f:51:2d:7c:c3:ca:19:
         1e:62:7b:bc:dc:3e:24:5e:00:fd:c8:af:21:dc:48:6a:2d:ab:
         bc:be:94:15
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUL0Ncy4korf+AN+Afyk91s+coomYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQUFGNDc1QkNDMDJDREJCREI0Qzk3NDRFQkUzMUNF
RUVFMzA2RDAeFw0yNjA4MTQyMTQ4MzNaFw0yNjA4MTYwMTMyMzNaMDMxMTAvBgNV
BAMTKERBRTg2MzhFQUY2QTI1QUExRTE3QUE4QURDNkYyQjkzQTg3OUQ0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhk4tNE95HURpH8ms7JsQ/db6
apBdTqqpJrtsHIDn2svqdqS5nSfOnzB6F0iltzYs+eue4NqohZ6BDmTBpKR3aoFi
V2bSxAbD3n1lDulh4ljASZSV8oDfp5I/HZTtbE2qXprxCvm17iMCgGVzBLA2vzRl
A50xJoMDgdwzmHceGSltMe8YSJE4UieGawyols8VTvEel0eMowO+xH2DiULsCR5N
w2fzIaLHt5HgjvfMZpboR8aAcZfzfdhMCa8KsveciLOMP2tKd2Bd/MW74fsNtTB/
w6h1ZmQjEmDPRoiR9UGWZYhS/mZJgu5Zc8jx0Y/r6X2mNmKQojk7VVijapOXAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU2uhjjq9qJaoeF6qK3G8rk6h51PEwHwYDVR0j
BBgwFoAUEwqvR1vMAs2720yXROvjHO7uMG0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUEFHSUMv
MC8xMzBBQUY0NzVCQ0MwMkNEQkJEQjRDOTc0NEVCRTMxQ0VFRUUzMDZELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzEzMEFBRjQ3NUJDQzAyQ0RCQkRCNEM5NzQ0RUJF
MzFDRUVFRTMwNkQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQUdJQy8wLzEzMEFBRjQ3NUJDQzAy
Q0RCQkRCNEM5NzQ0RUJFMzFDRUVFRTMwNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHQg3vdPvRowYE
Tc9PGWIdFaSnmbWppMTnLJ5UNo/oO9Sfma3CPEa/Vdwq+Tg7QBJFzqJjzavIL3ua
CLrlu01BZtZlikr2WS6V6nRoJh75K1WLupHGRFMdaYiXyYmlrcOZl3jG7YZX6b3S
EbbCjKDWsbDJ6VdLG9jeS1zVRUNheEhQtnXUwITuWBCKspsyTnsTEQCIzg3Z/cse
fk3w03DjYXEIF8gDoo2erCKtJ6t2urBF3j5X18Juo/9j2VGN4pR29tYyriyauiM/
AkYZ41ME9GMiUZaTxXUYXmgckM/ugjCiTx9RLXzDyhkeYnu83D4kXgD9yK8h3Ehq
Lau8vpQV
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:31 2026 by rpki-client