Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft (raw, json)
Hash identifier:          c0vJmDRrbMGT7YpDiDmyjwZFOP1zvyfurL1eeu7MxzU=
Subject key identifier:   85:33:A5:F3:85:B6:C7:F0:11:D6:06:59:FB:91:E9:79:77:34:F8:07
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       429CBCDAC2AB1FF59E8F4A0C1620BDAC0B915BD0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
Manifest number:          4E
Signing time:             Tue 30 Jun 2026 11:03:43 +0000
Manifest this update:     Tue 30 Jun 2026 10:58:43 +0000
Manifest next update:     Wed 01 Jul 2026 11:26:43 +0000
Files and hashes:         1: 34332e3235312e35362e302f32322d3234203d3e2037343833.roa (hash: akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=)
                          2: 3230322e3134382e3231362e302f32332d3234203d3e20313530323838.roa (hash: m08nUkgvFXMEH7SggQHbf7ARa6naXodQWHDQXXeGTPs=)
                          3: 3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (hash: VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=)
                          4: 3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (hash: d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=)
                          5: 3232332e32362e382e302f32332d3234203d3e2037343833.roa (hash: upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=)
                          6: 3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (hash: +YgRbud11NwMXtsHlxKeCKoLNbKSArtu1pVEp4QdVGE=)
                          7: 3130332e3232392e35302e302f32342d3234203d3e2037343833.roa (hash: Urdua04twOmjpORnRC30OfM9aTU8JD3/+D+NxZwpsX0=)
                          8: 3230322e3134382e3231362e302f32332d3234203d3e2037343833.roa (hash: pdotTZ9puPXODwvqbe0OXjdVjFyCK/vBj236sVdgVKc=)
                          9: 3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (hash: 79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=)
                          10: 9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl (hash: rSLIMc394ybMCD1zpWeEF+Xgzfd+qSsRNxyvBuitkFw=)
                          11: 3232332e32362e382e302f32332d3234203d3e203231383539.roa (hash: YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=)
                          12: 3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (hash: RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 11:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:bc:da:c2:ab:1f:f5:9e:8f:4a:0c:16:20:bd:ac:0b:91:5b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Jun 30 10:58:43 2026 GMT
            Not After : Jul  1 11:26:43 2026 GMT
        Subject: CN=8533A5F385B6C7F011D60659FB91E9797734F807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:d2:ce:d4:b4:97:3c:2e:16:c8:74:60:aa:
                    c8:19:a6:c8:0c:5d:3b:1d:f6:c4:44:94:f3:56:09:
                    9c:03:8d:b1:e0:54:a9:98:8c:7c:36:e0:8b:2f:ae:
                    89:a3:34:f1:1e:af:1b:20:0f:7d:4c:0c:0b:19:65:
                    f4:da:23:22:c7:65:36:0d:42:ab:c0:8b:52:22:fd:
                    bf:b4:c9:d6:e1:d6:57:ea:9d:f3:71:db:a3:2e:41:
                    0b:75:a1:ca:7d:71:45:51:bb:1c:32:51:d6:c6:a1:
                    30:bf:88:c7:de:91:75:0d:0f:46:81:01:0d:e9:02:
                    65:62:40:9f:8a:d2:1f:27:26:e6:ba:0a:6a:8c:d4:
                    8f:ef:a1:22:ec:fb:a5:16:09:7a:34:63:79:12:d0:
                    b1:cf:6e:3e:d9:53:1e:1b:88:cc:f1:c1:9a:f3:14:
                    c7:47:65:07:65:a0:38:ab:de:76:93:87:ab:c7:4f:
                    21:ab:e9:ed:4a:fe:e8:96:0e:13:d2:15:b3:f9:bc:
                    7b:d8:4e:25:ac:7b:3e:fd:7d:bf:43:9f:6f:f8:4a:
                    71:3a:46:aa:96:5f:23:79:91:74:55:78:ce:dd:9d:
                    59:41:94:cd:d2:ab:89:17:bb:94:97:67:33:4c:c0:
                    29:d6:e6:48:66:3a:44:77:94:1e:11:ac:30:04:0b:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:A5:F3:85:B6:C7:F0:11:D6:06:59:FB:91:E9:79:77:34:F8:07
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:80:7a:62:22:a5:01:70:a8:e7:01:c0:1c:a7:71:76:d5:
         50:04:5f:a9:2b:bb:41:31:e8:3e:dd:83:79:8c:1b:45:0c:e4:
         74:9f:ad:35:56:d4:33:54:c4:01:f6:af:4a:06:b0:0b:63:45:
         b0:87:ad:ea:2a:2d:ba:c5:bf:82:87:79:af:92:f2:a2:ef:bc:
         3f:08:88:0f:76:44:b6:0c:ee:e0:b3:1f:f3:31:70:d6:d0:d4:
         00:18:3e:6b:2b:6b:06:ef:45:38:26:fb:99:aa:6b:8a:56:65:
         37:d9:20:66:ec:86:53:99:1f:43:e7:6b:8a:d1:87:55:30:cf:
         7e:86:36:6e:98:0f:24:3a:46:29:d5:27:48:42:fb:21:ca:d4:
         1c:a4:9c:28:e8:bb:9d:5c:11:fc:dc:37:ea:3b:0e:31:cf:39:
         83:bc:25:0b:fb:f6:84:f7:0e:b8:b4:89:f3:c0:54:e7:80:8f:
         c4:36:c8:99:5f:3f:ee:bc:e0:03:57:2e:6c:41:ac:a5:49:42:
         34:37:b9:39:dc:58:5f:e0:7e:35:88:be:9f:a2:1b:c5:90:2f:
         18:59:ca:fc:61:d7:1c:51:a8:6b:f3:01:4c:99:c1:92:94:af:
         39:db:b8:99:f5:81:34:1b:15:90:f3:eb:0f:55:7b:63:aa:5b:
         b2:56:82:e9
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUQpy82sKrH/Wej0oMFiC9rAuRW9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA2MzAxMDU4NDNaFw0yNjA3MDExMTI2NDNaMDMxMTAvBgNV
BAMTKDg1MzNBNUYzODVCNkM3RjAxMUQ2MDY1OUZCOTFFOTc5NzczNEY4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1tLO1LSXPC4WyHRgqsgZpsgM
XTsd9sRElPNWCZwDjbHgVKmYjHw24IsvromjNPEerxsgD31MDAsZZfTaIyLHZTYN
QqvAi1Ii/b+0ydbh1lfqnfNx26MuQQt1ocp9cUVRuxwyUdbGoTC/iMfekXUND0aB
AQ3pAmViQJ+K0h8nJua6CmqM1I/voSLs+6UWCXo0Y3kS0LHPbj7ZUx4biMzxwZrz
FMdHZQdloDir3naTh6vHTyGr6e1K/uiWDhPSFbP5vHvYTiWsez79fb9Dn2/4SnE6
RqqWXyN5kXRVeM7dnVlBlM3Sq4kXu5SXZzNMwCnW5khmOkR3lB4RrDAEC5pnAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUhTOl84W2x/AR1gZZ+5HpeXc0+AcwHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lDTE9VRC8wLzlDODA3NDhC
MkRBRUE3Q0MyMjI3NTlFMTE2QUEzNEFGQUNDN0VBMDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRpoB6
YiKlAXCo5wHAHKdxdtVQBF+pK7tBMeg+3YN5jBtFDOR0n601VtQzVMQB9q9KBrAL
Y0Wwh63qKi26xb+Ch3mvkvKi77w/CIgPdkS2DO7gsx/zMXDW0NQAGD5rK2sG70U4
JvuZqmuKVmU32SBm7IZTmR9D52uK0YdVMM9+hjZumA8kOkYp1SdIQvshytQcpJwo
6LudXBH83DfqOw4xzzmDvCUL+/aE9w64tInzwFTngI/ENsiZXz/uvOADVy5sQayl
SUI0N7k53Fhf4H41iL6fohvFkC8YWcr8YdccUahr8wFMmcGSlK8527iZ9YE0GxWQ
8+sPVXtjqluyVoLp
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:45 2026 by rpki-client