Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          C8ivuscCBP/iyxV6e42BTmPh4fKjun9tF5PiLfs20v0=
Subject key identifier:   08:0F:B4:34:53:4F:28:55:B8:6C:81:C7:33:22:76:A9:E8:33:30:FD
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       2CBE00F75EC17238A0F42EFFAEE0C43D876D125B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          D1
Signing time:             Sun 04 Oct 2026 00:08:27 +0000
Manifest this update:     Sun 04 Oct 2026 00:03:27 +0000
Manifest next update:     Mon 05 Oct 2026 02:31:27 +0000
Files and hashes:         1: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          2: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: io0l2rBSx0As2+AvW8I8xuG1SQqS1aQTXpey7XqutVo=)
                          3: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
                          4: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          5: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          6: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
                          7: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          8: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          9: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          10: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          11: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
                          12: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          13: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
                          14: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          15: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:be:00:f7:5e:c1:72:38:a0:f4:2e:ff:ae:e0:c4:3d:87:6d:12:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: Oct  4 00:03:27 2026 GMT
            Not After : Oct  5 02:31:27 2026 GMT
        Subject: CN=080FB434534F2855B86C81C7332276A9E83330FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:85:15:02:67:72:59:f7:de:86:5c:69:c0:
                    c9:68:a3:b7:3c:81:60:72:57:35:97:b1:67:0c:3c:
                    3f:73:10:54:9a:6f:d3:1f:cf:aa:ec:c0:4e:07:9a:
                    ce:ff:e7:68:d8:02:75:51:de:df:f1:12:e5:94:2d:
                    0c:e6:58:fb:14:29:6a:3e:a5:5c:0b:bf:a1:a4:5c:
                    71:98:76:68:2b:c3:01:93:62:f0:b3:a1:05:51:b4:
                    02:d6:73:58:7b:2f:6d:2f:f9:0b:08:ca:54:e2:61:
                    d2:c0:e3:48:37:98:4f:02:6d:72:ee:f0:5a:79:5e:
                    19:c6:00:bb:42:08:8c:81:89:2e:8a:65:e3:61:e6:
                    98:09:c7:4c:0a:17:da:6e:10:9f:48:ca:f1:c4:d3:
                    14:a9:d6:47:7a:a1:5f:9f:6a:60:ff:7b:e0:26:c2:
                    20:e9:93:eb:47:81:fc:3d:9d:5a:56:52:45:b8:54:
                    81:14:2d:55:55:d7:92:2d:da:f1:db:bf:72:ea:dd:
                    97:00:44:70:5e:50:d6:69:d6:f8:65:86:4d:aa:e6:
                    28:6f:be:30:47:1d:d8:71:40:ce:aa:91:16:43:81:
                    4a:dc:de:23:3e:99:90:4a:4f:bf:b1:1a:9a:b5:29:
                    2e:60:0f:d1:18:44:b3:74:0c:58:2a:db:a9:66:ee:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:B4:34:53:4F:28:55:B8:6C:81:C7:33:22:76:A9:E8:33:30:FD
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:b9:53:d6:ff:7a:32:2c:77:05:27:9b:cf:cf:40:91:f4:
         0b:35:b0:eb:22:58:da:7c:b3:74:56:96:e2:4d:05:49:3b:6b:
         40:7d:43:f0:4f:10:37:ab:ab:5f:4e:cb:4e:94:49:25:b5:69:
         15:d3:aa:d8:89:46:ea:df:13:5d:46:5e:a8:00:2d:fb:30:d6:
         0c:df:28:29:e2:f0:29:52:3e:5f:1f:e4:58:d1:ad:bc:0e:46:
         94:13:47:26:b4:c6:4b:0a:86:ce:ef:63:72:30:73:81:7c:8d:
         34:28:de:36:f9:af:88:f8:8b:43:38:c2:f9:ab:4b:74:cc:57:
         34:d2:92:de:1b:78:cd:58:46:c1:ee:14:75:2a:06:1c:8e:f4:
         9a:08:b6:d8:6c:30:f4:0a:fb:7a:03:27:b0:88:f1:4e:ee:75:
         92:73:3b:9d:94:48:de:cc:bb:35:f2:85:3d:93:b9:12:34:7c:
         91:57:e5:04:fb:13:fa:d5:21:63:a5:77:bd:6b:3c:ff:f9:df:
         d8:fb:13:6a:75:65:ba:e4:3d:58:4d:dd:2e:74:ef:2c:cf:f1:
         11:1d:fb:a1:05:3f:21:c5:ff:a3:35:38:b6:65:7d:a9:d7:e7:
         ed:c5:e9:2d:26:e3:88:9e:c1:a6:ec:e0:2c:65:6d:2e:c4:0e:
         65:5d:c3:fd
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULL4A917Bcjig9C7/ruDEPYdtElswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQUFGNDc1QkNDMDJDREJCREI0Qzk3NDRFQkUzMUNF
RUVFMzA2RDAeFw0yNjEwMDQwMDAzMjdaFw0yNjEwMDUwMjMxMjdaMDMxMTAvBgNV
BAMTKDA4MEZCNDM0NTM0RjI4NTVCODZDODFDNzMzMjI3NkE5RTgzMzMwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfg4UVAmdyWffehlxpwMloo7c8
gWByVzWXsWcMPD9zEFSab9Mfz6rswE4Hms7/52jYAnVR3t/xEuWULQzmWPsUKWo+
pVwLv6GkXHGYdmgrwwGTYvCzoQVRtALWc1h7L20v+QsIylTiYdLA40g3mE8CbXLu
8Fp5XhnGALtCCIyBiS6KZeNh5pgJx0wKF9puEJ9IyvHE0xSp1kd6oV+famD/e+Am
wiDpk+tHgfw9nVpWUkW4VIEULVVV15It2vHbv3Lq3ZcARHBeUNZp1vhlhk2q5ihv
vjBHHdhxQM6qkRZDgUrc3iM+mZBKT7+xGpq1KS5gD9EYRLN0DFgq26lm7mjnAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUCA+0NFNPKFW4bIHHMyJ2qegzMP0wHwYDVR0j
BBgwFoAUEwqvR1vMAs2720yXROvjHO7uMG0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUEFHSUMv
MC8xMzBBQUY0NzVCQ0MwMkNEQkJEQjRDOTc0NEVCRTMxQ0VFRUUzMDZELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzEzMEFBRjQ3NUJDQzAyQ0RCQkRCNEM5NzQ0RUJF
MzFDRUVFRTMwNkQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQUdJQy8wLzEzMEFBRjQ3NUJDQzAy
Q0RCQkRCNEM5NzQ0RUJFMzFDRUVFRTMwNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtUblT1v96Mix3
BSebz89AkfQLNbDrIljafLN0VpbiTQVJO2tAfUPwTxA3q6tfTstOlEkltWkV06rY
iUbq3xNdRl6oAC37MNYM3ygp4vApUj5fH+RY0a28DkaUE0cmtMZLCobO72NyMHOB
fI00KN42+a+I+ItDOML5q0t0zFc00pLeG3jNWEbB7hR1KgYcjvSaCLbYbDD0Cvt6
AyewiPFO7nWSczudlEjezLs18oU9k7kSNHyRV+UE+xP61SFjpXe9azz/+d/Y+xNq
dWW65D1YTd0udO8sz/ERHfuhBT8hxf+jNTi2ZX2p1+ftxektJuOInsGm7OAsZW0u
xA5lXcP9
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:16:35 2026 by rpki-client