Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          jhKleEooHiVl8GGvXVjPuvDTuPr+Lo7pMUsA4517lXE=
Subject key identifier:   EC:8F:F6:8B:D1:54:49:27:A1:9C:0E:58:BC:3E:C5:43:04:0E:9E:14
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       72C1EADFF4F349EDB03A2F5D31AA493761A7338D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          016D
Signing time:             Fri 02 Oct 2026 00:44:43 +0000
Manifest this update:     Fri 02 Oct 2026 00:39:43 +0000
Manifest next update:     Sat 03 Oct 2026 02:59:43 +0000
Files and hashes:         1: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          2: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          3: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          4: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          5: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          6: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          7: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          8: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
                          9: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          10: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: r3PMtfgHPtU8e0+zAuDscpZ8shqjVVeA9whUbxqvmh8=)
                          11: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          12: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          13: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          14: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          15: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          16: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          17: AS131611.roa (hash: UCz+rwuylcu0rVH2Vr+NNwNfHAZ+V+Ki80+e+mrGvAg=)
                          18: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          19: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 02:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:ea:df:f4:f3:49:ed:b0:3a:2f:5d:31:aa:49:37:61:a7:33:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Oct  2 00:39:43 2026 GMT
            Not After : Oct  3 02:59:43 2026 GMT
        Subject: CN=EC8FF68BD1544927A19C0E58BC3EC543040E9E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:e0:95:af:0a:c8:cd:de:8e:02:7f:cc:49:
                    88:a8:0e:28:41:0d:49:f4:b5:2e:e7:71:fb:69:ba:
                    06:de:52:2d:81:f2:19:d2:e3:72:dd:fb:a9:b4:70:
                    55:b0:83:ae:05:c8:c4:76:af:98:58:2a:f9:88:11:
                    4c:72:42:03:04:d2:d6:9b:87:d8:34:2e:51:2d:74:
                    e8:d6:3e:ec:aa:bf:e5:fa:39:44:1a:9f:dc:96:3f:
                    e6:ba:ab:af:01:25:fa:83:a9:8d:da:4c:7d:c0:4b:
                    5a:7f:2e:48:59:2e:79:98:3a:4c:50:79:aa:f7:7e:
                    a1:d3:e8:e6:16:b9:80:92:33:31:b3:d7:60:88:c3:
                    f5:18:fa:73:38:28:1f:f3:8b:2c:0e:86:6a:0d:2d:
                    e7:81:20:e2:4b:e9:e6:53:01:c2:e8:60:bc:9e:f2:
                    f7:78:34:78:e5:c7:3b:2f:0c:b2:a4:20:94:d6:b4:
                    42:ab:9f:e5:0a:36:c6:3f:01:27:57:22:77:d0:e6:
                    ce:b5:b2:41:6a:32:1f:eb:c6:63:4d:14:1c:6b:38:
                    4d:9d:e3:34:2d:a8:92:db:e2:b1:7c:be:26:38:c4:
                    27:08:28:db:16:e2:62:7d:1b:2a:f4:19:93:b2:44:
                    c6:87:94:d7:77:fe:34:3b:4e:86:29:cb:74:0a:5d:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:F6:8B:D1:54:49:27:A1:9C:0E:58:BC:3E:C5:43:04:0E:9E:14
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:92:ac:03:08:48:d7:91:07:b9:1c:c3:7a:74:ce:ea:15:4d:
         4f:66:58:95:19:e7:f3:fd:a7:64:85:fb:93:f4:c5:24:57:d9:
         1d:f1:43:49:8e:bf:77:5e:12:53:16:5b:4c:74:1d:68:21:c8:
         5d:cc:e4:67:d1:6d:de:c2:f9:35:45:e3:86:a9:80:79:03:f9:
         85:d9:4c:39:10:24:e7:35:c3:c1:b2:78:5c:b8:9d:a8:5f:a4:
         29:b7:15:32:98:d2:8e:eb:37:65:1f:2a:08:84:88:35:a3:1a:
         b8:72:4e:fb:52:48:12:d6:a8:d9:a9:e4:50:8c:69:e1:e5:0c:
         35:75:f4:04:07:cd:d8:1e:10:d6:ca:2f:c4:b0:12:ac:60:86:
         4b:2f:b3:df:76:06:03:d3:3b:7e:0b:2d:9a:0d:69:63:ab:60:
         f2:92:ae:9b:f2:3a:73:26:b3:37:02:a1:29:2c:81:57:f2:75:
         33:ae:86:81:59:d1:75:4b:55:43:c1:e0:9c:65:82:3a:d4:21:
         6b:cf:4d:ed:cc:a0:dc:86:0a:e7:7c:d5:81:52:a8:98:de:b4:
         cf:0f:46:35:cf:71:b7:9c:95:76:e7:2a:c8:19:cd:4e:6c:e2:
         25:41:9b:db:1b:fd:b0:e4:4e:fb:d3:b8:55:f3:1e:30:ea:64:
         f0:8e:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:23:22 2026 by rpki-client