Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
File:                     q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft (raw, json)
Hash identifier:          NG/0U1rI6MQhEl0bJ446INBySqbbK6fg3k2zPenrL4g=
Subject key identifier:   F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Certificate issuer:       /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial:       08A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
Manifest number:          082C
Signing time:             Wed 25 Mar 2026 20:28:54 +0000
Manifest this update:     Wed 25 Mar 2026 20:28:54 +0000
Manifest next update:     Fri 27 Mar 2026 20:28:54 +0000
Files and hashes:         1: 0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa (hash: NB7AtyJ/gv5jdRxwaS5k9Y+cLlR3AyiNu4aspWF9yiA=)
                          2: 3f63BadjGAUYs1x3v4BGWhdZApY.roa (hash: tkPlWwXkwcu1oG6vW9aQalv5LL5xGga44ht1lPbEm40=)
                          3: 3o0MyGsph19QMioV8dAY38XyrUc.roa (hash: umOyiAyCMz6ZOB8ugCBEa2klieiuAsNSjRS3bcRXhko=)
                          4: 4T7hYy9R_gAPqja_uuLgoJCAcrE.roa (hash: QtGMxl+HFh5aMEuZ0sYHbmxReOl1vspkRkUoCc8Uq1g=)
                          5: 5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa (hash: vvplqjRtyDKlQoipChhhpH5hF9AumMJ25Z2F6CIx3Ww=)
                          6: 88dWmlI19qyWt2XW84Qm9g3a7lM.roa (hash: 55hAf7LVBaSU6FF/o58mzxfoknoy6+GPfHvjsN+IbDI=)
                          7: GIG8ZdyB5-c-1FoFLP4Ft_6LUJc.roa (hash: 4oBckO6paU72uWlQ+WBdkPSJ5BEE5JF4HeLlE/nNLLU=)
                          8: HkDv6JRmv3EUd0VuTcitV8iuAoc.roa (hash: ZLa5vFMilTLvMaHqpus8c0iR++yiqKOTufQvKaJhc7I=)
                          9: I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa (hash: Gba91SUvxGLQxat7+zKgk0aaFNGCHgI8m38yJgXpn3g=)
                          10: LrDQUDQhMEFoCs9fICylNFhe7C8.roa (hash: Fqh0M1J163IHLpVJ5y3GP71aMdX4Ro56qfgBCjSs69w=)
                          11: NqPoQSZZ4x4VcAJRTM0_ZIBWIc0.roa (hash: x4fWI7aJqKfK4EReYWkxiMYa3/Zm5/TNfNV3Qs48hSY=)
                          12: QmspA3o7EFmJUCDnLzODvmUWYB4.roa (hash: UrSR6CmDgr//cqTlkRevhIXCWr0eQetrrcLdair8v28=)
                          13: TQeU6wh8rfeYXSvna9sswcCjVuU.roa (hash: LT+qWXLS643Fc8KRgOY6t2pG3S7loOypQI0vSIGdPnY=)
                          14: XnF1O1tH17U8vavVryrpuRod5Bw.roa (hash: y3Qkt+7T0dpoSq61aviYDCfynRnDkEIu6UX/3q4znlE=)
                          15: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (hash: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4=)
                          16: dJpQtzndugIaMgKpkejUNi8lrZ0.roa (hash: nZlSzvE0stUK/grdixuxy9Ws4R/l340poF1OTnaXyZg=)
                          17: ffQedrZ__zOr9Kh_lmDecV09cVY.roa (hash: lDAZ686aBzLfXPTD0B8tadH4tII2dljEkHzs84KD01U=)
                          18: lEuDNkwq4gnXhdcbA0Q2VC12ndA.roa (hash: 9RP4YrOGY9ORX0seTrO07h9sco8W8UTLEiI+xKZsSTw=)
                          19: luycyQCVnCSeD4L7Alh2HW7K8WE.roa (hash: NKeSwfVC6MnpCu1V8tuFvgPHdMm3NDSYpXHpT7g9wMc=)
                          20: o626lk6kU65aHOXqgfxmubwtLOk.roa (hash: JoYElnku35E7GuOzrfNMYseTGS1epI/0LyHXeQUW4UU=)
                          21: ogod4tREKKVUZJhHB4WjUpzplkE.roa (hash: R9MnN7pJfp5ko72gvks4bfv/8xa8aDgc/apRlRi2pbI=)
                          22: q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl (hash: 4JtaIsXnFOukOpvHNIl0Hb6a1/9l3znXnGKgeEZ/u6E=)
                          23: qph_IFR3oKkcveb27M5eZ1xyRxk.roa (hash: VFGcAzUTJfdPA9guAnWBUwVPumt1YYSt1Q3PGwIWXpg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 18:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
        Validity
            Not Before: Mar 25 20:28:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F0E17ABFCC5CFF6401BBC9F49F2C6398CC507D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:31:ee:85:bf:d6:ad:e7:34:1c:85:d0:c0:
                    79:d7:0b:33:9c:bc:10:5d:53:1a:da:6a:4b:93:5c:
                    79:25:02:49:e6:06:ad:25:43:85:00:df:14:85:b4:
                    a4:2c:67:ff:34:04:a6:f6:e3:10:23:1d:03:47:5e:
                    fd:0f:f5:8c:69:67:91:92:16:28:ed:14:a3:8b:23:
                    db:76:2f:53:2f:8a:54:78:81:f6:1e:2d:62:c2:cb:
                    15:9f:80:e9:c2:7e:ae:63:10:7b:25:72:16:85:1d:
                    ee:72:66:0a:d6:63:3c:76:38:3c:70:2f:ea:06:e1:
                    26:cc:73:4c:8b:5a:c8:19:98:68:b3:fb:1e:a3:f1:
                    11:4d:b3:06:7d:30:87:4e:d2:98:fa:f2:54:0b:23:
                    36:e4:c8:31:df:fa:18:f9:be:4c:60:66:d5:59:9d:
                    77:f4:09:4e:ce:c2:81:cb:35:f7:42:54:87:c2:f4:
                    99:93:67:80:7b:37:60:d6:c4:94:a8:77:e8:0e:65:
                    e0:22:3b:71:83:5e:4c:0e:7c:0d:95:83:7a:c5:d1:
                    3c:3e:f0:c1:d9:f1:9e:e4:15:4b:60:e7:a7:c2:2d:
                    38:1d:f5:80:46:cd:ae:e0:48:d7:4a:1b:e4:c4:9a:
                    65:48:93:8c:f6:7f:f2:27:59:4c:cd:a6:34:98:e8:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
            X509v3 Authority Key Identifier:
                keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:1c:ae:f7:8f:fa:48:4a:eb:b2:78:e7:ce:1e:fc:37:83:0b:
         bc:81:47:99:12:3f:24:ab:56:0b:81:75:df:79:9c:09:a5:ea:
         c9:dc:be:9b:ec:f9:14:ab:c3:44:cf:52:4b:97:9d:d8:b5:88:
         b3:e1:ef:f5:03:8a:df:37:24:f6:bc:0b:1f:54:10:77:19:0a:
         ac:12:8d:4b:0e:9e:0a:4e:18:37:5c:27:d5:78:ba:a5:13:6c:
         cb:df:fd:16:df:bb:78:01:da:db:b2:4b:0d:a6:42:cb:df:cf:
         c8:cb:dd:73:5f:3d:f5:19:95:a0:10:3a:f8:51:e3:e1:cb:79:
         71:55:fa:78:9c:2f:cf:09:35:3e:fb:09:3b:b4:74:bb:65:67:
         6d:2b:ab:71:73:6c:f1:90:e3:5b:64:87:63:9c:5e:8c:8c:0f:
         bd:f6:46:a9:4c:b0:fc:b9:62:7d:1b:84:5a:2e:5e:25:ec:7a:
         4a:9e:8c:d4:e9:b1:1f:9d:c7:0d:25:a6:6d:46:1a:67:9f:1b:
         89:5d:4b:2c:9c:62:d8:fa:48:5a:ea:22:ae:bd:3c:fc:a1:15:
         48:5b:25:06:b1:d7:88:9f:e6:ff:1a:c9:9a:5b:ee:3e:41:10:
         8f:29:ca:67:24:60:e5:9e:d6:11:cb:62:a4:46:77:52:af:00:
         6c:1c:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:28 2026 by rpki-client