Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
File:                     CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json)
Hash identifier:          xhLR8EL1UAnKV9C/2Thzrzx7xZQE3hzdrajkRRyeqCc=
Subject key identifier:   12:6D:28:A0:98:EE:0D:B2:5D:9D:19:F9:27:6F:C4:2B:AE:BB:4F:03
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       777E0E6B0423230A08B18717552E7C26EB6C26F1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
Manifest number:          E0
Signing time:             Fri 02 Oct 2026 15:48:42 +0000
Manifest this update:     Fri 02 Oct 2026 15:43:42 +0000
Manifest next update:     Sat 03 Oct 2026 19:25:42 +0000
Files and hashes:         1: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=)
                          2: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=)
                          3: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=)
                          4: 323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (hash: mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=)
                          5: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=)
                          6: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=)
                          7: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: LafxFDRJ2+FQHjNn9xZGPJZZ0A0vBMHUhFSLEK7DHP0=)
                          8: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=)
                          9: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=)
                          10: 323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa (hash: vsm9UGN6tHY0aNAGBXgIpoDTNmnsxdu9OsGwN4Md6uM=)
                          11: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=)
                          12: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=)
                          13: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=)
                          14: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=)
                          15: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=)
                          16: 323430323a373165303a3a2f33322d3438203d3e20313334383233.roa (hash: Ezk288EMxD5xtLGFhHQ06ty+ECxin6l3nT7k5oesNiA=)
                          17: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=)
                          18: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=)
                          19: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=)
                          20: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=)
                          21: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7e:0e:6b:04:23:23:0a:08:b1:87:17:55:2e:7c:26:eb:6c:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: Oct  2 15:43:42 2026 GMT
            Not After : Oct  3 19:25:42 2026 GMT
        Subject: CN=126D28A098EE0DB25D9D19F9276FC42BAEBB4F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:84:b1:cb:cf:4b:49:8b:65:fc:bc:0e:88:
                    87:8b:67:e0:80:47:3f:1f:8b:12:bf:3d:fa:52:2f:
                    b9:67:7c:a7:ee:c8:e5:7e:fe:e6:04:1d:ff:8d:d5:
                    15:5f:de:cd:ad:76:36:d3:54:bb:89:af:9e:62:65:
                    33:6b:de:e0:16:fd:85:ca:c1:b9:94:06:0f:12:d9:
                    f6:23:56:fd:a9:1e:9c:b1:de:c9:ae:34:b1:81:94:
                    93:b3:17:6e:cf:2b:c0:1c:ea:c5:ed:e1:cf:62:d0:
                    06:34:be:08:e9:07:89:a8:7e:89:11:14:06:6f:b2:
                    3a:e9:07:e1:a3:fc:f4:d0:09:c7:89:7d:8c:0c:22:
                    c5:a0:f2:5e:8e:a1:dc:63:22:43:77:b3:b8:bd:47:
                    1d:85:12:1f:15:69:4e:fe:df:10:0c:bf:19:20:9c:
                    c5:6e:c8:1e:29:fa:4b:ac:3f:db:dd:56:37:31:ba:
                    13:dd:6a:2e:14:28:1f:56:60:91:5f:0c:49:72:a8:
                    4f:b5:40:3f:85:f2:0b:91:54:6e:a4:0a:6f:77:b9:
                    d0:dc:b2:98:0d:03:a9:4b:ff:7e:f4:f0:c7:cc:a5:
                    d2:42:80:99:09:5d:44:73:c7:5c:28:61:cf:cb:a1:
                    47:da:d4:87:d6:9f:5a:55:89:5f:6b:31:6e:a2:2f:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6D:28:A0:98:EE:0D:B2:5D:9D:19:F9:27:6F:C4:2B:AE:BB:4F:03
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:62:3c:81:c9:45:ae:ef:7d:28:e8:8e:d7:79:cb:b1:d1:bf:
         57:10:2f:9d:ae:90:40:4f:25:72:9e:d6:04:60:75:81:09:11:
         7c:30:e7:22:b4:25:ba:d1:7d:90:33:b5:14:00:a8:0b:e9:03:
         33:d6:8c:20:42:91:e7:26:e9:f4:38:5b:5d:76:c3:45:fd:28:
         38:12:90:13:7a:45:ee:8e:74:a1:ff:b9:6b:e5:61:50:7c:15:
         2f:13:53:41:8a:09:4d:ee:55:ad:78:ba:57:3b:d1:b4:04:f0:
         05:a3:2a:19:47:f7:d7:a4:02:21:46:31:d3:9c:3f:c7:c2:44:
         c8:af:bf:fa:f8:3c:c0:77:48:12:11:7e:5e:12:12:79:34:ef:
         d0:9c:bb:85:14:a1:00:e2:5e:28:89:7d:42:af:d1:e5:38:2b:
         a0:a5:05:fb:e1:63:a4:0d:3d:ef:40:da:88:19:96:54:16:2f:
         f2:2a:5a:08:fe:c4:f6:49:3c:3e:09:20:87:91:75:a4:40:97:
         c3:33:b8:b6:9c:54:35:a7:30:d0:f0:5b:2b:d9:ca:25:f8:4c:
         ab:41:84:61:49:5d:4d:fe:34:8a:08:5e:a8:d5:37:95:36:3e:
         26:71:6a:79:8f:42:0b:d2:80:18:d1:18:3b:15:0f:67:41:38:
         51:c6:99:9c
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUd34OawQjIwoIsYcXVS58JutsJvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjEwMDIxNTQzNDJaFw0yNjEwMDMxOTI1NDJaMDMxMTAvBgNV
BAMTKDEyNkQyOEEwOThFRTBEQjI1RDlEMTlGOTI3NkZDNDJCQUVCQjRGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviYSxy89LSYtl/LwOiIeLZ+CA
Rz8fixK/PfpSL7lnfKfuyOV+/uYEHf+N1RVf3s2tdjbTVLuJr55iZTNr3uAW/YXK
wbmUBg8S2fYjVv2pHpyx3smuNLGBlJOzF27PK8Ac6sXt4c9i0AY0vgjpB4mofokR
FAZvsjrpB+Gj/PTQCceJfYwMIsWg8l6OodxjIkN3s7i9Rx2FEh8VaU7+3xAMvxkg
nMVuyB4p+kusP9vdVjcxuhPdai4UKB9WYJFfDElyqE+1QD+F8guRVG6kCm93udDc
spgNA6lL/3708MfMpdJCgJkJXURzx1woYc/LoUfa1IfWn1pViV9rMW6iL+5NAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUEm0ooJjuDbJdnRn5J2/EK667TwMwHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC9DRTExQkRENDRG
NjY3NzY2MjRDNEQ5QkUxNDVDNDk5RkQxNDRGRUFFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmI8gclF
ru99KOiO13nLsdG/VxAvna6QQE8lcp7WBGB1gQkRfDDnIrQlutF9kDO1FACoC+kD
M9aMIEKR5ybp9DhbXXbDRf0oOBKQE3pF7o50of+5a+VhUHwVLxNTQYoJTe5VrXi6
VzvRtATwBaMqGUf316QCIUYx05w/x8JEyK+/+vg8wHdIEhF+XhISeTTv0Jy7hRSh
AOJeKIl9Qq/R5TgroKUF++FjpA0970DaiBmWVBYv8ipaCP7E9kk8Pgkgh5F1pECX
wzO4tpxUNacw0PBbK9nKJfhMq0GEYUldTf40igheqNU3lTY+JnFqeY9CC9KAGNEY
OxUPZ0E4UcaZnA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:38:49 2026 by rpki-client