Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
File:                     Nf-QMGtHp94DB_DjNbTcfyfepPs.mft (raw, json)
Hash identifier:          sEqhj3mRSxsTMZ2D9AuUx+PgQ9VvNbs5NrZ6v2S/FJU=
Subject key identifier:   E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
Certificate issuer:       /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Certificate serial:       02C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
Manifest number:          02A0
Signing time:             Wed 25 Mar 2026 09:28:55 +0000
Manifest this update:     Wed 25 Mar 2026 09:28:55 +0000
Manifest next update:     Fri 27 Mar 2026 09:28:55 +0000
Files and hashes:         1: 4L30LnOQIS99TlCPOUpwEFLfEQg.roa (hash: yWCDDFR7pLNm/S7nzB+Bwx+TZYuB7g0e+ipjO4ErgF0=)
                          2: 5pHluZOCvmCnma3oGF8YHhIrmWE.roa (hash: 1uJrZLpcghEn/31+TQno69AakJlARhPv2cfKSe25le0=)
                          3: 7sWHqjtuFZF6vfze4cooKQTNG84.roa (hash: zNpZoBqha6lP0xYX43TwKvMCr3L1XS7tZ2T4cGBMoy8=)
                          4: Nf-QMGtHp94DB_DjNbTcfyfepPs.crl (hash: oAozMmpebJ1hlwMOaugF4khkWkqya6TscTvZ+FywBfw=)
                          5: UvtueMrLc5JR86hFNcyL82bBAeY.roa (hash: h68S4ml8LxhHUpTxXv6A1JFJ0zEZaOkwhLeU7V+YXmA=)
                          6: c0Ik_Jn94TXCYMWdYjn7JtoC3BI.roa (hash: DF1/43/z7g5lo3B0Xvgg/aHRFlmr25fzJwBLpiFz6CA=)
                          7: dUMVw1KtS1rD4iHpZduTfFnnmG4.roa (hash: Ua58WYzJMUq4ppF9jBMRvqNZ7v0BrHCdT39gbN4zhc0=)
                          8: fAvqcJePLbE6lDivhviBuoC2Y-o.roa (hash: 2FqppnZlc8ZzofcCwbHjuYS2u/jDxDh09cDGWJCFHFI=)
                          9: mxp_3m8tdAasVqTRgLSJiv2kR2o.roa (hash: Ea+c9GOpiuo2YrSSdaYmgo9b3b1GlkKAYFnbeZ66bxI=)
                          10: n-TI-E3bbOd7GVkIKr1DEYB2xFs.roa (hash: FaU8z81QSL63TUEPpQjz5l6hNIIJ1BMnSe7E5BzIKu8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 18:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
        Validity
            Not Before: Mar 25 09:28:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E45532861649BCA1C67E7545CEB5F894BDFFD091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:e2:59:25:3a:65:d3:1b:58:67:35:c6:95:
                    6d:d9:b4:cf:c6:2d:2f:a9:6f:b5:c0:e1:57:79:27:
                    dc:7f:bf:58:a4:09:08:98:40:53:e2:93:cb:e8:a7:
                    a8:27:c3:a2:99:fc:94:69:37:5d:bb:21:29:27:db:
                    10:55:98:76:0e:de:ac:05:5b:12:02:61:1b:cb:7a:
                    3f:9c:e7:6d:24:03:01:56:56:ac:04:e5:f9:07:0f:
                    ce:fb:c2:e5:e2:12:ba:e4:37:24:3c:f3:44:b8:94:
                    a1:9d:c1:dd:5e:fb:93:93:60:3a:96:f0:1a:52:0e:
                    02:f3:6e:02:41:97:1f:e6:75:89:fa:81:91:fa:15:
                    2c:f3:6d:39:ff:17:d5:7d:4f:60:54:2d:92:9e:d3:
                    5f:a6:e3:a9:73:9d:7f:33:ae:1a:09:4f:8d:3b:9f:
                    96:bb:bc:b3:ff:ba:42:09:27:cf:ff:85:56:19:e3:
                    31:5b:99:6a:ca:61:0a:2e:64:94:9d:8b:a5:fa:58:
                    50:b5:46:51:d2:e7:01:3e:1b:04:fc:4b:37:ff:3e:
                    16:d3:02:e5:e6:24:e7:b1:47:b2:d1:0d:ec:50:ff:
                    13:d7:66:76:a9:fb:5b:a1:00:cc:0d:16:5a:dc:77:
                    d2:e6:d3:a3:1e:1a:8e:7a:b3:f3:69:24:fb:e0:0c:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
            X509v3 Authority Key Identifier:
                keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:07:75:9e:62:8e:c4:4b:e3:66:9e:c1:3c:cc:11:6e:b6:
         52:da:e7:a5:25:b9:79:a3:94:25:95:82:2b:db:e8:3a:a6:7c:
         f3:ef:17:f6:ff:cc:f7:b8:23:0a:a6:07:5f:d7:98:f3:6f:08:
         4e:8c:f7:17:de:fc:53:5f:0e:22:72:f5:ae:69:a0:03:58:ac:
         74:d8:d6:2f:f5:71:72:e6:c6:51:c9:e4:57:ab:9f:84:31:db:
         18:9c:7d:c1:f0:c3:c8:11:b5:7a:8c:9f:c0:ff:6d:29:c2:9e:
         35:21:52:db:35:1a:bc:44:93:f8:05:bd:22:aa:a6:c0:c8:21:
         8f:55:51:19:fa:b2:12:cb:e1:60:fa:32:84:7c:49:60:ad:44:
         9f:29:79:22:d0:82:16:5b:88:e4:6d:77:a9:ff:0e:70:62:9f:
         79:d9:d6:8d:47:94:ce:8e:14:09:a2:dc:a4:10:ea:82:db:66:
         e1:af:9f:b5:32:97:48:bc:09:ea:05:6a:ed:a2:b8:07:fb:35:
         a0:f4:0f:26:4d:12:ec:01:c7:ce:ff:a3:3d:71:a3:16:0f:dc:
         4d:1e:ae:44:ed:97:dd:26:49:bf:1b:55:6b:ac:7d:e8:9c:42:
         d9:12:7f:f6:b9:c0:56:7c:33:bd:f9:f7:75:ac:fd:a9:2f:c0:
         f9:f8:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:35:32 2026 by rpki-client