Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          vf0nRUBSHHOVdwyudm//qMoADALQBnyD3vRwFG6Ij9A=
Subject key identifier:   51:AA:90:4A:90:D9:3B:9F:78:73:67:C1:68:DE:F3:C1:6A:00:75:FB
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       38A7F1804569D1F1FE122746CDD27D9123D0B81B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          F1
Signing time:             Tue 30 Jun 2026 07:43:49 +0000
Manifest this update:     Tue 30 Jun 2026 07:38:49 +0000
Manifest next update:     Wed 01 Jul 2026 09:30:49 +0000
Files and hashes:         1: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          2: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          3: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: MPONNlifiMKZHRNulPuuqT2Kqb8UKlPsHJxSeyfSua0=)
                          4: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          5: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          6: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          7: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          8: AS38841.roa (hash: nxzMK5a5psSGWqQh7uS65r+Bir+kgcqBJpBkh4oUAnE=)
                          9: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          10: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          11: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          12: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          13: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          14: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          15: AS9924.roa (hash: Doml2lPoEKapy33lmKSoH0QBWU/HPBkeZaZ/j+Xwv+w=)
                          16: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          17: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          18: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
                          19: AS131611.roa (hash: UCz+rwuylcu0rVH2Vr+NNwNfHAZ+V+Ki80+e+mrGvAg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
                          rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a7:f1:80:45:69:d1:f1:fe:12:27:46:cd:d2:7d:91:23:d0:b8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: Jun 30 07:38:49 2026 GMT
            Not After : Jul  1 09:30:49 2026 GMT
        Subject: CN=51AA904A90D93B9F787367C168DEF3C16A0075FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:2d:cf:48:bd:16:87:d5:22:97:a8:7f:97:
                    a5:52:ec:a7:dc:44:66:86:53:a8:ba:40:74:51:67:
                    46:6b:71:b1:91:8e:01:5e:23:22:7c:18:48:aa:a8:
                    59:97:cd:22:ab:c8:7f:dd:74:03:a0:e1:e2:2e:6d:
                    01:6a:4d:97:0e:42:c9:2e:e1:89:b4:53:aa:a0:0c:
                    a2:0e:f5:31:e3:a9:0a:4a:55:f5:6e:3a:ef:01:a9:
                    e4:1f:0f:c8:8b:19:ba:c1:19:e8:65:2b:36:b7:de:
                    53:27:bb:b6:db:82:61:8c:e7:4d:4d:49:58:09:0b:
                    80:45:61:a3:c0:a9:35:65:37:4c:f7:32:27:fe:95:
                    ed:57:ea:09:0d:b8:30:f3:bc:78:e4:4c:4a:f4:fb:
                    b5:c6:c5:17:b0:f3:3e:2c:19:ed:f4:39:ad:9f:54:
                    61:fe:50:20:31:9e:7c:1f:37:c2:33:4d:46:1c:91:
                    da:9b:d1:42:a7:8f:ba:2d:0c:70:db:a7:98:29:66:
                    db:5d:94:28:1c:3c:c6:c9:01:51:3c:64:a5:8b:70:
                    78:37:91:73:cc:7c:5d:02:ca:6e:94:00:b7:0b:c9:
                    35:20:6f:74:55:c1:d6:81:64:0e:dd:09:52:f4:f9:
                    5a:3a:35:6d:e6:9f:80:e1:b5:59:59:44:a2:ed:c5:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:90:4A:90:D9:3B:9F:78:73:67:C1:68:DE:F3:C1:6A:00:75:FB
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:1b:b3:d9:7f:ee:f6:cf:16:83:f3:be:1a:11:97:e4:32:
         e2:b6:34:62:08:cb:98:0f:d5:8b:bc:b5:27:c0:f1:21:92:e1:
         13:35:2c:d5:fe:4b:c1:63:91:57:84:1d:3d:b3:3f:af:a9:8a:
         f1:f5:6c:00:ae:c5:bd:6f:0e:b4:78:bd:45:00:07:e7:e4:3e:
         4d:75:99:68:da:ca:24:22:93:2f:e1:84:4e:11:fc:4a:10:51:
         d2:63:e9:bd:a2:ae:2f:26:40:12:e4:ca:0b:e7:2d:aa:53:00:
         10:35:4c:50:5a:f4:c0:eb:12:5e:71:a9:a2:34:17:61:82:74:
         8d:80:4c:86:9b:85:7c:bc:8d:ce:73:e8:5c:57:f2:41:77:51:
         36:9f:4a:58:ad:4e:a4:88:8e:44:77:76:12:e5:fa:0c:71:61:
         df:1f:a4:85:77:27:a0:15:c0:2d:b6:ac:e5:cb:64:39:7a:98:
         28:2f:c6:28:cc:e2:9c:7a:27:73:ff:b9:23:a5:13:11:55:db:
         f2:a8:01:c5:80:21:bf:a6:63:de:ec:42:d6:94:48:aa:8d:5b:
         f5:6d:4d:b5:b5:5a:b2:1c:bf:97:66:ce:ae:48:97:b4:18:02:
         44:7c:26:c8:7b:0f:39:87:9d:99:24:f0:89:8f:50:e5:ef:d9:
         b8:c5:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:17 2026 by rpki-client