Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
File:                     6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json)
Hash identifier:          dMlXjCgiJWED3YMIAkVmLVRSa/9kw9ClRvD3aX5U+NI=
Subject key identifier:   BB:4F:7A:5A:03:CC:A2:C5:E4:FE:83:CD:6A:35:26:D3:9C:D8:C7:EE
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Certificate issuer:       /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial:       4C94ACDC284BCA24E297D2D8EB9DA6E99DAB6411
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
Manifest number:          01CF
Signing time:             Wed 13 May 2026 16:07:54 +0000
Manifest this update:     Wed 13 May 2026 16:02:54 +0000
Manifest next update:     Thu 14 May 2026 19:51:54 +0000
Files and hashes:         1: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=)
                          2: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=)
                          3: AS17713.roa (hash: 6THe+d1M9IBbktnCoPGIW1RcAbmuio4tr67tKLdsscQ=)
                          4: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=)
                          5: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=)
                          6: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: r9yBS/4jdImuSTb+KXJkNhYL+/7ZJMTJUCNyTCPmn4M=)
                          7: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=)
                          8: AS17712.roa (hash: Wg4H8Fi4n92WsVNQZPoPRYKtdvnX3aJz4nbFyuqqLUg=)
                          9: AS1659.roa (hash: M7vlJ+pOYnQc6ZvkQ07/yOT39egw6Apz1FV4LHusFGM=)
                          10: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=)
                          11: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:ac:dc:28:4b:ca:24:e2:97:d2:d8:eb:9d:a6:e9:9d:ab:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
        Validity
            Not Before: May 13 16:02:54 2026 GMT
            Not After : May 14 19:51:54 2026 GMT
        Subject: CN=BB4F7A5A03CCA2C5E4FE83CD6A3526D39CD8C7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:6c:5b:d9:e2:95:af:8d:02:b3:71:4b:09:
                    99:11:36:f1:be:d9:b3:67:4f:bb:c1:cc:5d:22:98:
                    0d:35:73:88:9b:70:06:4d:4a:cf:7b:f0:cc:e1:84:
                    91:4a:27:8a:ec:24:07:71:22:88:7f:d5:53:d5:5e:
                    10:96:51:7b:22:52:a1:bd:a4:75:ed:f7:8f:e3:52:
                    12:ba:88:5c:f1:8c:b2:02:e2:de:66:94:5d:0e:59:
                    99:59:82:ac:6d:93:dc:d8:d9:62:af:b0:44:42:c5:
                    3a:97:e1:7d:84:33:73:f5:1a:b3:55:9d:9a:12:84:
                    97:5b:5b:ac:f9:7a:c5:4b:17:e7:81:38:b6:ea:a6:
                    5c:f5:10:81:d2:95:28:0a:18:0b:3c:1c:50:c6:ed:
                    80:0b:6e:7d:53:88:81:39:47:dc:33:7f:35:cc:75:
                    78:80:6c:cd:81:43:13:3b:b0:ad:bc:48:fc:cf:93:
                    1c:0a:52:01:62:bf:75:fd:78:dc:0f:a6:c5:1e:d0:
                    12:c4:c4:c7:5c:bf:62:ca:f1:e3:46:dc:47:65:a0:
                    6c:e8:02:90:10:7b:90:ff:0d:84:64:ad:c8:2e:bf:
                    92:5b:3d:fb:4f:a4:f4:ef:a9:f4:9e:4c:ba:e3:9a:
                    82:a0:94:3c:c4:de:2c:a5:48:59:fd:dc:7b:c0:fc:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:7A:5A:03:CC:A2:C5:E4:FE:83:CD:6A:35:26:D3:9C:D8:C7:EE
            X509v3 Authority Key Identifier:
                keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:fc:f3:e8:d8:68:3a:b0:55:49:ab:6b:5b:f3:9a:09:dc:62:
         36:76:b9:ce:c7:7b:43:c4:d7:bd:fe:3e:31:6a:66:5c:ea:9c:
         16:3c:bc:7b:18:46:7a:d8:94:b7:dd:8b:08:48:36:88:e7:0a:
         e6:f4:b1:99:43:1a:e9:d3:44:5e:54:da:b5:66:ec:b4:22:b5:
         2c:61:c7:72:30:58:40:19:bf:29:da:cc:0e:3a:9d:41:07:0d:
         e3:b3:9c:2a:79:5a:d8:bc:76:2f:e4:6a:66:17:fd:1d:ec:50:
         96:59:8c:4a:e6:72:ce:b6:27:ed:f3:fb:2d:4b:9c:53:e1:7f:
         45:a9:73:eb:42:ca:b7:f8:36:58:b7:c8:c2:e5:85:e7:64:d0:
         6d:27:db:5a:f5:2d:36:c9:52:1f:4e:a1:39:39:0e:5d:8f:69:
         ec:9d:69:79:33:a7:f1:e5:51:96:17:1f:33:91:4b:f6:7a:20:
         a1:2d:04:96:87:10:46:8c:fe:e8:73:bb:9d:23:04:eb:6f:db:
         ec:23:cb:91:25:20:c6:3f:a9:05:58:47:6b:83:ed:bc:04:a5:
         71:84:bc:9f:54:c6:5e:41:a2:24:b8:a4:c3:0e:4a:ba:79:93:
         e5:63:6e:08:5f:6b:19:13:3d:a0:ea:89:cd:db:37:90:74:02:
         6a:6c:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:11 2026 by rpki-client