Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft (raw, json)
Hash identifier:          2wznrPs3/jOIkCxYx5iBPit/QYLAllllCpy9gVyMqE0=
Subject key identifier:   EF:78:E7:A9:80:1B:6E:FC:92:A4:C0:3E:D5:B3:C9:43:14:03:55:2D
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       34A610A3352192E69EA9F2BD44EB19A20D150BA5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
Manifest number:          8B
Signing time:             Fri 14 Aug 2026 16:37:19 +0000
Manifest this update:     Fri 14 Aug 2026 16:32:19 +0000
Manifest next update:     Sat 15 Aug 2026 18:40:19 +0000
Files and hashes:         1: 34332e3235312e35362e302f32322d3234203d3e2037343833.roa (hash: akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=)
                          2: 3232332e32362e382e302f32332d3234203d3e203231383539.roa (hash: YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=)
                          3: 3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (hash: VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=)
                          4: 3230322e3134382e3231362e302f32332d3234203d3e20313530323838.roa (hash: m08nUkgvFXMEH7SggQHbf7ARa6naXodQWHDQXXeGTPs=)
                          5: 3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (hash: +YgRbud11NwMXtsHlxKeCKoLNbKSArtu1pVEp4QdVGE=)
                          6: 3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (hash: RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=)
                          7: 3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (hash: d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=)
                          8: 9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl (hash: SBsxxlPgab5sgK+qhLOhiat1Pd2EaTCtyDzYv2WcB/E=)
                          9: 3230322e3134382e3231362e302f32332d3234203d3e2037343833.roa (hash: pdotTZ9puPXODwvqbe0OXjdVjFyCK/vBj236sVdgVKc=)
                          10: 3232332e32362e382e302f32332d3234203d3e2037343833.roa (hash: upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=)
                          11: 3130332e3232392e35302e302f32342d3234203d3e2037343833.roa (hash: Urdua04twOmjpORnRC30OfM9aTU8JD3/+D+NxZwpsX0=)
                          12: 3130332e34322e3134342e302f32322d3234203d3e2037353338.roa (hash: Qe+ovrMgMGDKSff+XNlFUW2gMROzUSZnKrKr/wuVPHI=)
                          13: 3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (hash: 79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 18:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a6:10:a3:35:21:92:e6:9e:a9:f2:bd:44:eb:19:a2:0d:15:0b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Aug 14 16:32:19 2026 GMT
            Not After : Aug 15 18:40:19 2026 GMT
        Subject: CN=EF78E7A9801B6EFC92A4C03ED5B3C9431403552D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:16:09:bd:3e:68:01:be:e0:87:db:31:59:
                    97:68:35:4e:72:2a:b6:50:62:2b:54:49:1b:d2:32:
                    92:96:d1:fd:52:b4:14:29:ae:42:48:6a:6e:b2:15:
                    f0:dc:00:9a:fb:5f:72:eb:df:3f:ae:eb:77:d6:e8:
                    fb:29:64:0a:2e:01:47:54:69:d6:37:a1:b6:3b:78:
                    61:08:99:91:42:66:19:a3:01:d8:dc:80:78:66:d2:
                    e6:fa:af:e1:74:3b:52:df:ae:d8:d9:06:06:de:df:
                    ab:16:fb:01:84:72:5d:01:b6:cf:98:5f:f7:f4:41:
                    e2:76:f6:d7:da:8a:82:46:77:f3:1d:07:5b:8c:bc:
                    1e:5f:ac:b6:f5:80:3c:77:a6:cf:b7:02:d7:83:86:
                    06:b8:1b:6f:9c:cc:0e:fb:d0:51:4a:11:e2:68:f3:
                    03:e3:c7:c7:23:24:9f:99:a6:0d:e0:df:66:bc:7c:
                    3f:3a:0e:ad:07:78:77:74:2d:de:fd:82:fe:9f:64:
                    c8:71:ba:75:1d:a7:dd:27:f4:4a:26:39:7f:da:3c:
                    cb:74:b9:da:d9:a5:74:ed:35:fa:a4:57:00:1a:30:
                    d6:3b:86:22:c3:ec:ea:76:3e:95:67:07:c8:d5:b4:
                    4d:89:09:af:bc:83:58:08:96:4f:8c:a5:b7:c2:3e:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:E7:A9:80:1B:6E:FC:92:A4:C0:3E:D5:B3:C9:43:14:03:55:2D
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:a3:dd:8e:eb:80:1d:d4:9f:f6:1c:3f:a4:20:34:d7:a4:
         6c:55:85:1e:6f:0c:29:89:47:3c:09:c9:b2:c8:0c:e2:44:73:
         eb:86:fe:68:32:e2:03:0b:0b:bf:3c:50:0d:b5:23:06:3c:b1:
         e1:57:7a:7c:73:f3:60:f6:a9:eb:20:de:8d:35:93:f1:0f:41:
         70:47:75:b3:67:5b:d8:bf:f3:76:75:56:c8:e8:18:58:29:9e:
         57:41:8f:92:a7:a0:db:5d:0d:65:81:87:72:de:a9:a8:c5:ba:
         aa:d7:0c:d7:c2:3f:c9:91:41:64:8d:e9:d1:55:b1:83:29:8f:
         b0:e1:2c:4e:99:1e:03:3f:b2:e1:91:c0:e2:83:80:31:f2:25:
         7c:11:83:88:76:31:8e:b3:58:ca:ae:89:9b:5f:47:7c:37:6b:
         78:63:4b:77:7d:66:2a:00:f4:38:39:b1:53:c6:1f:8a:cb:6e:
         1b:f1:4f:c8:ae:d2:96:e6:5a:5a:75:12:39:29:53:fc:b9:2d:
         25:e3:95:e7:79:27:d2:7c:8f:00:ff:8c:e9:66:a4:1c:a2:6c:
         ca:76:de:af:c5:30:7d:90:2c:a0:40:3e:d0:c2:9b:b3:91:b8:
         52:2b:96:ba:ce:15:c1:8a:6d:48:32:59:be:5a:85:7c:c4:0d:
         94:0d:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:27:27 2026 by rpki-client