Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
File:                     5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft (raw, json)
Hash identifier:          sRqzj6OYl0poAZ/cEwJpCjg/mBdM1DmWdrHaBMRCoHU=
Subject key identifier:   74:7E:63:BC:BD:80:E6:AA:87:DD:45:9B:C4:F7:AA:42:25:C4:79:2E
Authority key identifier: E7:18:8E:27:DB:99:80:5D:79:8D:26:78:F5:BB:76:BE:09:D8:7B:52
Certificate issuer:       /CN=E7188E27DB99805D798D2678F5BB76BE09D87B52
Certificate serial:       CD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
Manifest number:          CD
Signing time:             Thu 26 Mar 2026 11:00:08 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:08 +0000
Manifest next update:     Sat 28 Mar 2026 11:00:08 +0000
Files and hashes:         1: 5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl (hash: 92B7IXAHLW0OKnYDSQAcbGZRQMlAvOWJfmj3EueO7YA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 08:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7188E27DB99805D798D2678F5BB76BE09D87B52
        Validity
            Not Before: Mar 26 11:00:08 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=747E63BCBD80E6AA87DD459BC4F7AA4225C4792E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:81:fd:a1:a2:ae:ac:8e:23:da:fb:44:0b:
                    8a:ad:1c:99:37:ed:60:9a:69:80:23:03:cc:7f:56:
                    d1:0e:18:58:c3:13:e0:7a:e8:b2:70:bc:93:60:32:
                    7a:d1:c9:b4:2b:ed:41:87:ad:38:4e:1a:0e:9c:00:
                    fb:39:6d:b0:72:ea:e9:51:ab:bc:43:5e:46:ab:d8:
                    90:b1:1d:4e:3d:23:ed:76:97:20:af:8a:cf:80:81:
                    60:f9:31:15:ad:62:e5:a1:a7:89:9e:02:85:12:40:
                    54:59:9c:f8:b8:e6:17:4e:71:fb:9d:2d:e2:db:25:
                    26:0d:7b:c4:ab:fc:a1:43:67:b3:1d:9b:9b:09:c8:
                    e7:bd:26:d3:df:f3:a2:7b:8a:6f:35:ac:1e:fa:33:
                    67:b4:13:9b:65:db:97:9e:f4:95:5f:8b:99:18:46:
                    04:a1:f1:92:01:66:9a:08:ca:1d:4b:05:48:de:b8:
                    fb:6a:01:2f:ed:f8:e0:53:81:59:e2:59:e3:1a:ec:
                    49:88:f4:e7:38:3e:7e:2f:52:b4:f6:5c:d8:7f:84:
                    37:c3:8b:2f:d9:23:8a:fc:49:db:90:3e:3b:53:60:
                    31:82:f0:ef:48:69:f3:32:6f:24:68:b3:74:60:ff:
                    74:80:c4:d6:c6:c1:e6:4e:1e:12:80:09:d8:7b:d3:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:63:BC:BD:80:E6:AA:87:DD:45:9B:C4:F7:AA:42:25:C4:79:2E
            X509v3 Authority Key Identifier:
                keyid:E7:18:8E:27:DB:99:80:5D:79:8D:26:78:F5:BB:76:BE:09:D8:7B:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:ea:72:3f:e3:2f:10:86:bb:3e:14:a3:c2:07:0a:f5:b7:
         e7:79:fd:a2:ea:61:af:95:0b:71:4d:e6:6a:62:db:7e:3d:ca:
         e1:38:26:19:b5:ab:68:19:7d:ae:fb:e4:3b:80:1a:07:de:5f:
         cb:46:cc:64:2e:08:f7:5f:e6:a7:36:06:4a:06:ce:1d:a0:fd:
         f2:9a:5e:60:8d:fa:c4:bd:bd:ea:8c:ca:1f:6d:2c:d0:a2:43:
         55:6d:de:31:fa:47:b3:2c:1c:f2:33:9d:2d:c1:f1:3e:86:71:
         1a:94:79:87:2f:53:f2:5b:00:c1:72:51:99:e0:a8:47:06:ff:
         f8:31:8a:70:5d:b0:fa:67:41:93:13:91:bb:3c:17:6a:ac:fe:
         1b:43:21:50:3b:37:6c:e7:79:0b:86:43:68:27:55:12:0b:b5:
         42:8d:bc:6d:52:ba:33:49:00:01:5f:be:22:66:c9:7d:2a:3e:
         b9:7c:65:1b:34:34:90:c7:23:c7:92:02:fc:1b:31:b2:53:49:
         4f:76:ed:b2:e6:ef:91:a8:a7:37:e0:56:ee:41:30:03:21:7c:
         86:32:a9:a0:01:0f:08:b2:b0:81:5e:dd:31:b9:f3:d4:d5:16:
         ab:63:46:02:7b:71:20:06:60:91:84:00:3e:25:5a:6d:2a:4c:
         a2:6f:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:13 2026 by rpki-client