Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
File:                     CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json)
Hash identifier:          40V/4onX7MGso7C4q5TGjLxb8Gvd02kt8R2/ZhmEBUI=
Subject key identifier:   56:BE:38:6A:70:8D:EE:D8:87:DC:89:D3:94:BE:F6:B6:D5:01:0D:CA
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       60991DBB025BE753DBF28C6FFD968AE9593B05C1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
Manifest number:          99
Signing time:             Sat 15 Aug 2026 01:08:59 +0000
Manifest this update:     Sat 15 Aug 2026 01:03:59 +0000
Manifest next update:     Sun 16 Aug 2026 03:57:59 +0000
Files and hashes:         1: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=)
                          2: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=)
                          3: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=)
                          4: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=)
                          5: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=)
                          6: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=)
                          7: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=)
                          8: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=)
                          9: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=)
                          10: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=)
                          11: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=)
                          12: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=)
                          13: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=)
                          14: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: vLEv5Ktd7E7QFpzPxOnnzACQ6kXXtN2Wz2voYe9dsLU=)
                          15: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=)
                          16: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=)
                          17: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=)
                          18: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:99:1d:bb:02:5b:e7:53:db:f2:8c:6f:fd:96:8a:e9:59:3b:05:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: Aug 15 01:03:59 2026 GMT
            Not After : Aug 16 03:57:59 2026 GMT
        Subject: CN=56BE386A708DEED887DC89D394BEF6B6D5010DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:2b:63:ca:50:48:5d:f2:96:c4:ba:3e:b1:
                    6a:c8:34:3a:50:06:37:15:73:40:ac:03:10:27:b5:
                    8f:c4:dc:a5:51:0f:8b:a1:8d:37:ca:e6:a1:92:56:
                    4e:d0:1c:44:15:7f:a0:6f:4a:0b:a0:dd:34:02:fe:
                    f4:a5:45:53:36:dd:ce:69:68:ff:54:e5:e2:1f:3b:
                    45:22:51:16:2b:f3:83:6a:c2:93:dc:35:5d:73:54:
                    30:ab:34:22:fe:be:96:99:c3:5b:2e:19:ce:d6:97:
                    04:f6:8f:f5:be:31:70:0d:31:74:33:49:a4:bc:93:
                    03:d0:f4:e9:12:76:08:43:3e:e0:64:3d:ef:88:72:
                    45:20:11:09:64:24:1c:f9:f4:68:c6:f9:cb:d2:ad:
                    3a:10:7a:16:24:50:06:90:1f:a1:06:7e:f8:ef:7b:
                    e4:c2:5a:78:a8:30:77:c5:7e:1d:9c:86:2c:73:2a:
                    79:90:b6:f4:68:f1:8f:73:9e:f5:a6:19:46:0f:4f:
                    cc:ad:41:16:d7:35:4d:ff:d7:f4:95:92:e5:9f:89:
                    27:87:bd:27:e0:32:50:52:f4:61:7a:a4:22:6a:4e:
                    a5:f0:ce:94:04:f0:85:44:ec:4f:ed:3e:b0:5a:d9:
                    7f:f3:d9:9b:49:5f:6d:3c:cd:db:2a:5c:76:61:81:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:38:6A:70:8D:EE:D8:87:DC:89:D3:94:BE:F6:B6:D5:01:0D:CA
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:6c:03:2a:5f:02:14:7f:2d:d7:3c:00:77:ac:c5:47:9c:
         b5:02:ce:1d:0d:f8:ee:9c:71:d1:00:5d:d3:f1:dd:c3:a6:e2:
         28:85:2e:a9:bb:bc:07:36:ff:d3:b5:01:f7:04:fe:3d:09:e5:
         0c:20:ae:ee:b2:84:4e:fc:3f:51:f7:c3:fe:67:62:cb:81:04:
         bf:cd:a4:ae:72:29:bd:01:4d:43:5a:61:5e:e2:ed:9d:e1:a2:
         24:10:ff:e4:7c:28:19:91:6c:c5:a2:40:9d:ca:09:fd:5b:85:
         e3:3d:e4:81:ef:ad:d0:e6:95:9e:f3:ff:86:5b:36:86:c1:b4:
         75:f4:79:5a:bf:9d:5f:09:92:62:55:bd:6e:e7:ab:da:dc:4a:
         90:61:dc:f4:42:a9:3d:17:2d:8e:6c:d1:e5:e8:a8:4f:5f:f8:
         a6:3e:21:10:47:bc:3f:2c:f3:20:5f:24:81:ef:16:33:64:e2:
         eb:90:f9:46:58:da:e5:54:2c:e7:50:34:9d:e6:8c:03:47:9b:
         9d:d9:5f:22:52:c2:4c:c9:c5:b1:65:e4:82:03:31:5b:56:d6:
         45:30:66:fd:ff:3c:6d:70:9f:70:12:f7:a0:de:56:52:1f:3c:
         1d:83:04:c8:e6:8f:27:fc:9d:45:a1:af:81:68:d1:f3:a3:fc:
         fe:5d:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:16 2026 by rpki-client