Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
File:                     3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json)
Hash identifier:          WL3e73BXQYkDacONnJ1rdyetfuzUU+jFo5WjoLX7H5k=
Subject key identifier:   37:D6:6C:6D:1D:F2:B6:2A:3F:27:2D:E3:F5:17:C2:4B:FB:E5:AA:6E
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       6C1248A66335FB52CF33F278CEE3A78A0895A9ED
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
Manifest number:          12
Signing time:             Wed 13 May 2026 05:27:06 +0000
Manifest this update:     Wed 13 May 2026 05:22:06 +0000
Manifest next update:     Thu 14 May 2026 07:01:06 +0000
Files and hashes:         1: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=)
                          2: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=)
                          3: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=)
                          4: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=)
                          5: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=)
                          6: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=)
                          7: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=)
                          8: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: PydTx3rMrP8a4wN8fIxbuSsvhAP5sye8YStwBl14KR8=)
                          9: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=)
                          10: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=)
                          11: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=)
                          12: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=)
                          13: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=)
                          14: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=)
                          15: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=)
                          16: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:12:48:a6:63:35:fb:52:cf:33:f2:78:ce:e3:a7:8a:08:95:a9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 13 05:22:06 2026 GMT
            Not After : May 14 07:01:06 2026 GMT
        Subject: CN=37D66C6D1DF2B62A3F272DE3F517C24BFBE5AA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:15:44:c7:e8:e6:6e:5a:78:2e:27:99:6c:8c:
                    9e:5a:7e:b1:c6:0a:f2:c7:ab:1c:e9:50:af:47:62:
                    99:3b:b2:6e:6c:a8:03:c3:86:c8:d3:45:79:c3:3d:
                    a7:f3:7d:36:ed:97:aa:dd:bd:80:bc:d1:33:82:fb:
                    1e:a2:37:59:23:24:d7:30:28:09:2a:98:31:63:66:
                    99:8d:44:b9:e5:3e:20:da:80:b7:7b:b1:91:ec:81:
                    74:16:71:ec:cc:3a:94:24:a3:fa:8c:74:51:72:3d:
                    6d:a9:3c:c4:fc:09:f9:06:56:f0:23:8a:59:ca:a7:
                    02:63:ee:ed:03:4e:b5:81:a1:a8:4c:1c:b8:d1:22:
                    0b:11:4b:aa:e9:fd:41:8c:b4:04:09:82:86:9f:7f:
                    24:09:7c:fe:1c:c0:2c:7d:28:0e:a4:50:bc:43:8e:
                    a4:ec:f0:b1:a9:17:68:d4:40:fd:0a:14:59:0d:a1:
                    5b:39:da:4f:f5:d8:82:24:71:c0:08:37:72:8d:e6:
                    93:0d:67:79:4f:5e:f9:30:35:71:30:d2:bf:9b:e0:
                    c4:17:aa:22:9a:04:82:9d:6f:54:23:b5:fc:e6:4b:
                    d9:89:b8:63:4a:8e:9a:12:e9:63:4b:2a:f2:49:de:
                    c8:cd:dd:4f:b4:b7:ac:fe:f0:3c:92:af:4c:6d:ee:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:6C:6D:1D:F2:B6:2A:3F:27:2D:E3:F5:17:C2:4B:FB:E5:AA:6E
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:f7:2e:c4:e4:c4:dd:a9:85:0f:7e:3e:75:f9:93:03:67:
         93:d0:f8:49:3b:bf:43:43:28:26:90:ee:af:c3:74:a3:4a:55:
         1f:37:b3:5a:08:53:ab:d5:19:a0:10:73:d1:1d:37:00:0e:97:
         19:16:79:f4:4a:bc:68:ad:28:5a:75:cd:0f:4f:06:dd:e8:b7:
         a5:3c:5b:4e:a7:72:c2:21:52:22:04:bf:0c:ff:87:79:6c:45:
         91:4e:2f:f8:42:c6:07:e9:51:51:5a:cf:3e:7a:19:0c:56:ed:
         f5:20:22:a4:39:7c:3d:d9:55:76:15:fe:c3:40:5c:78:91:1a:
         a5:d3:24:46:2c:52:31:d8:0b:ab:10:03:38:ca:d3:82:9a:9e:
         5b:e5:6c:4a:eb:23:b5:d4:37:f6:1c:ea:62:23:99:0d:24:e1:
         b6:d0:15:75:0e:99:41:4b:4c:22:dd:6b:3d:ce:c0:b7:c4:f5:
         26:7c:1e:d5:2c:bc:e0:af:1d:eb:86:84:8a:94:d9:01:b8:02:
         5d:14:f5:f9:a0:b8:45:91:4e:5d:ed:2b:db:a9:61:cf:70:39:
         77:3f:1b:0b:68:86:a4:92:b2:fb:08:f2:76:22:04:4b:b7:9d:
         dc:6c:41:44:e6:66:f2:70:cc:13:79:17:06:40:04:fd:b7:6b:
         9e:c4:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:10 2026 by rpki-client