Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
File:                     voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft (raw, json)
Hash identifier:          9ztuKvvsImekBqDhWtgu3fUZS6JNkfJkfHP9m6wJrXw=
Subject key identifier:   BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A
Authority key identifier: BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
Certificate issuer:       /CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
Certificate serial:       84
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
Manifest number:          83
Signing time:             Thu 26 Mar 2026 13:28:14 +0000
Manifest this update:     Thu 26 Mar 2026 13:28:14 +0000
Manifest next update:     Thu 26 Mar 2026 19:28:14 +0000
Files and hashes:         1: voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl (hash: +SHAhXEaF4zvPl4c4kAnbB6zFGT+dIWaoi7H0lbX74Q=)
                          2: wukFEv7SxYMTCpHl1xMZaKw7UIg.roa (hash: Go/WKcFAIp1nWMSvLyyotdpg3w0I/a2SuG9y/9UmA+E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 19:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
        Validity
            Not Before: Mar 26 13:28:14 2026 GMT
            Not After : Feb 24 15:30:19 2027 GMT
        Subject: CN=BC6A8D3265E57CE79D9C0B2CE807E8B75A090E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:a4:4b:ad:13:33:aa:a9:37:01:2b:13:ac:
                    08:0c:4b:ed:4f:eb:19:ad:d5:0e:2b:7d:0e:af:64:
                    40:4c:f7:c2:cb:b2:3b:e6:ed:e7:57:95:5e:27:1d:
                    2e:40:a0:2d:a3:36:ed:f1:d0:9f:f3:a1:99:e0:19:
                    aa:7b:f6:3c:e1:3d:e3:7e:d8:22:56:43:e5:9b:80:
                    77:db:a5:08:42:e4:53:81:f0:bb:b5:0f:90:15:ac:
                    30:28:f6:d7:7b:b0:e8:0f:6b:24:b8:8a:87:4d:c7:
                    26:74:89:64:9e:11:c2:16:17:d5:34:44:bc:7b:f0:
                    b9:de:16:d7:54:95:15:d0:6c:c9:3c:95:c6:39:9f:
                    81:82:a8:00:b7:e4:20:d3:04:fe:a1:a6:a5:2e:0a:
                    c2:68:d8:ba:2a:b9:65:33:cf:b7:21:f2:d9:87:3d:
                    fa:87:ba:8d:15:0a:55:e0:34:c4:7d:93:fd:f4:da:
                    36:94:09:78:d8:2d:41:a9:d3:4d:72:5b:7d:38:5c:
                    f9:8d:ac:4c:24:6f:0a:ac:c8:3c:89:5b:af:04:74:
                    5f:fd:4e:ee:5c:61:74:7e:65:0d:7a:67:9a:2d:47:
                    ad:24:a6:8b:d9:69:2c:13:4a:5e:2b:2f:a7:c9:87:
                    47:b6:bb:3c:2c:5a:39:2f:b1:4d:d8:e2:97:1d:ed:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A
            X509v3 Authority Key Identifier:
                keyid:BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:bb:24:91:50:f1:8d:97:1c:af:a3:8d:a2:62:dc:0e:50:
         cf:9c:59:75:4d:ef:d6:52:b0:86:8d:ca:7b:6d:6f:db:2d:39:
         6d:04:51:4c:23:60:47:04:2d:58:56:9b:5e:75:2f:b6:46:96:
         1f:06:d2:0e:31:6c:a1:b6:a5:e0:11:ac:41:15:8f:c1:a0:22:
         7c:56:27:45:3b:fc:62:4b:a8:6a:2d:34:11:0d:c9:d8:89:f8:
         b6:29:d8:f6:9a:ea:e2:27:13:28:ea:0b:65:32:54:68:94:ac:
         bc:84:61:ea:e9:20:23:e2:d3:32:38:c3:b6:ec:d1:cb:19:be:
         6e:d6:96:2f:9a:69:3f:de:8d:99:23:3b:dc:bd:e5:5d:5e:8a:
         c6:be:49:f8:08:71:1e:b6:54:94:e0:7f:40:14:c5:4c:56:cc:
         a4:07:4a:e9:15:17:8b:60:90:02:a6:b6:6d:67:16:58:27:3e:
         fe:7f:c2:c9:37:c0:01:7a:32:c9:8e:be:b1:5e:88:98:2f:2f:
         be:2d:07:c2:c6:4e:cb:74:0d:d1:7d:97:e7:8d:15:d8:f4:d1:
         f3:02:17:db:60:a2:c9:ab:00:5a:60:49:01:6c:e3:06:62:80:
         69:50:f7:f9:23:8f:a4:61:35:e9:0f:28:43:b7:ca:b5:f8:42:
         af:f3:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:40:46 2026 by rpki-client