Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
File:                     UwFoEtCVY1enrwWL7_Krcq8UPY4.mft (raw, json)
Hash identifier:          KGabR4lbMWMfXB1AezLPes6oebMpi1ZSDjdzl90EdAI=
Subject key identifier:   67:F5:EF:0E:68:17:C9:D6:2D:5B:5F:0E:FF:CD:EA:88:77:46:3A:4B
Authority key identifier: 53:01:68:12:D0:95:63:57:A7:AF:05:8B:EF:F2:AB:72:AF:14:3D:8E
Certificate issuer:       /CN=53016812D0956357A7AF058BEFF2AB72AF143D8E
Certificate serial:       02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UwFoEtCVY1enrwWL7_Krcq8UPY4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
Manifest number:          02
Signing time:             Thu 26 Mar 2026 03:28:24 +0000
Manifest this update:     Thu 26 Mar 2026 03:28:24 +0000
Manifest next update:     Sat 28 Mar 2026 03:28:24 +0000
Files and hashes:         1: UwFoEtCVY1enrwWL7_Krcq8UPY4.crl (hash: ziphY5+kCuoVZQf+KzrJ8kwcl8QktBMyMopY4fzY+sE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UwFoEtCVY1enrwWL7_Krcq8UPY4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 03:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53016812D0956357A7AF058BEFF2AB72AF143D8E
        Validity
            Not Before: Mar 26 03:28:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=67F5EF0E6817C9D62D5B5F0EFFCDEA8877463A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:0f:c8:d2:b8:ca:3e:2e:a5:74:ea:e7:be:
                    fa:62:5f:ad:d7:a4:7e:30:d8:a6:da:62:93:a7:49:
                    e3:0c:28:43:2f:da:a8:c3:d1:47:0e:73:bf:3a:a0:
                    f1:f7:8b:f2:60:56:e3:d5:4f:b2:61:1a:d5:44:cc:
                    66:41:cb:c1:e9:e8:93:e0:8c:0a:5e:37:64:09:76:
                    b5:dd:60:c5:1d:d2:00:71:8c:46:28:90:05:77:b6:
                    a6:65:09:54:08:59:e9:5f:c9:62:34:4e:cd:b7:ab:
                    dd:f2:a9:cf:62:5f:1a:a5:92:c2:e0:52:68:4c:e9:
                    96:8c:ae:38:12:eb:01:0a:1e:d4:ab:59:f2:3f:fa:
                    89:de:c3:c9:e4:65:3b:a0:82:60:5e:1d:dc:77:40:
                    95:85:83:fe:e0:cb:87:7f:43:fa:0a:74:1c:24:d2:
                    0f:d3:71:bf:fb:da:5a:8c:45:26:46:ba:22:56:cb:
                    33:c5:ed:e1:a8:b2:d5:43:f9:b6:e6:22:e4:0d:f7:
                    2d:2e:76:61:3a:3a:fc:9a:5c:1c:a3:a3:f7:7d:a8:
                    e7:58:80:87:83:d8:88:34:ea:66:aa:35:51:c4:31:
                    73:13:a3:ab:53:30:91:32:36:65:6e:ba:eb:1f:2d:
                    97:8c:e7:0b:1e:c2:42:37:8a:94:eb:93:d9:51:3a:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:EF:0E:68:17:C9:D6:2D:5B:5F:0E:FF:CD:EA:88:77:46:3A:4B
            X509v3 Authority Key Identifier:
                keyid:53:01:68:12:D0:95:63:57:A7:AF:05:8B:EF:F2:AB:72:AF:14:3D:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UwFoEtCVY1enrwWL7_Krcq8UPY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:e3:c6:90:84:f0:0e:14:1c:d4:46:fb:37:34:9f:f9:e0:
         ec:1a:ba:5e:7c:c6:2a:9a:74:3d:e5:95:ec:c2:97:0e:31:65:
         a6:91:b5:b6:88:f8:4b:9a:36:36:6c:a1:de:75:e6:7d:6f:49:
         39:ad:34:45:f9:26:2c:2f:0b:28:89:14:c0:38:2b:1e:56:2f:
         c5:ac:f3:46:e2:c8:4b:37:72:e2:c4:8c:46:99:23:81:8e:5b:
         37:0d:67:4e:c0:9e:e5:c4:d9:ac:3d:b2:34:f1:49:78:b9:c9:
         5c:52:55:b6:94:bb:f8:3b:48:62:b5:4b:1f:8c:87:79:12:f7:
         b8:ee:77:ad:26:46:15:6c:7e:68:9e:5d:3c:78:f3:c7:62:29:
         a2:90:e3:83:ca:70:2e:33:fa:14:bd:8b:0b:84:20:9f:21:1a:
         63:9a:0e:81:20:cf:e1:3a:24:f2:b3:e4:44:0c:15:93:da:d5:
         11:87:34:b2:f7:ad:bf:2a:b2:bb:47:48:d5:a2:de:cc:c5:50:
         dc:f6:cd:d2:ec:de:96:6b:7e:36:33:40:9a:7f:d2:9d:17:b4:
         e3:ab:6b:c3:03:c6:4a:07:f5:a2:2b:40:34:53:c9:af:e5:f5:
         68:25:f8:15:17:da:e2:a5:08:23:03:f9:2e:84:a4:ae:d2:7f:
         1a:b5:2a:05
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzAx
NjgxMkQwOTU2MzU3QTdBRjA1OEJFRkYyQUI3MkFGMTQzRDhFMB4XDTI2MDMyNjAz
MjgyNFoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoNjdGNUVGMEU2ODE3QzlE
NjJENUI1RjBFRkZDREVBODg3NzQ2M0E0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKarD8jSuMo+LqV06ue++mJfrdekfjDYptpik6dJ4wwoQy/aqMPR
Rw5zvzqg8feL8mBW49VPsmEa1UTMZkHLwenok+CMCl43ZAl2td1gxR3SAHGMRiiQ
BXe2pmUJVAhZ6V/JYjROzber3fKpz2JfGqWSwuBSaEzployuOBLrAQoe1KtZ8j/6
id7DyeRlO6CCYF4d3HdAlYWD/uDLh39D+gp0HCTSD9Nxv/vaWoxFJka6IlbLM8Xt
4aiy1UP5tuYi5A33LS52YTo6/JpcHKOj932o51iAh4PYiDTqZqo1UcQxcxOjq1Mw
kTI2ZW666x8tl4znCx7CQjeKlOuT2VE6KEkCAwEAAaOCAg8wggILMB0GA1UdDgQW
BBRn9e8OaBfJ1i1bXw7/zeqId0Y6SzAfBgNVHSMEGDAWgBRTAWgS0JVjV6evBYvv
8qtyrxQ9jjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HTE9CQUxQ
TFVTL1V3Rm9FdENWWTFlbnJ3V0w3X0tyY3E4VVBZNC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVXdGb0V0Q1ZZMWVucndXTDdfS3JjcThVUFk0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0xPQkFMUExVUy9Vd0ZvRXRDVlkx
ZW5yd1dMN19LcmNxOFVQWTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAR8DjxpCE8A4UHNRG+zc0n/ng7Bq6XnzGKpp0PeWV7MKXDjFlppG1toj4
S5o2Nmyh3nXmfW9JOa00RfkmLC8LKIkUwDgrHlYvxazzRuLISzdy4sSMRpkjgY5b
Nw1nTsCe5cTZrD2yNPFJeLnJXFJVtpS7+DtIYrVLH4yHeRL3uO53rSZGFWx+aJ5d
PHjzx2IpopDjg8pwLjP6FL2LC4QgnyEaY5oOgSDP4Tok8rPkRAwVk9rVEYc0svet
vyqyu0dI1aLezMVQ3PbN0uzelmt+NjNAmn/SnRe046trwwPGSgf1oitANFPJr+X1
aCX4FRfa4qUIIwP5LoSkrtJ/GrUqBQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:27:17 2026 by rpki-client