Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
File:                     y6ZO6ni6NlZLwgRW4BonQEwJolo.mft (raw, json)
Hash identifier:          9wE8dTdjAlLuxV8fwoWHgbyvgHG9OheHnGsuQBus8CU=
Subject key identifier:   68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79
Authority key identifier: CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A
Certificate issuer:       /CN=CBA64EEA78BA36564BC20456E01A27404C09A25A
Certificate serial:       64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
Manifest number:          64
Signing time:             Thu 26 Mar 2026 08:59:35 +0000
Manifest this update:     Thu 26 Mar 2026 08:59:35 +0000
Manifest next update:     Sat 28 Mar 2026 08:59:35 +0000
Files and hashes:         1: y6ZO6ni6NlZLwgRW4BonQEwJolo.crl (hash: v2hox6I/gNNArdUajyG753cgfKCr6uAd/NXycfjo9Ow=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 08:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA64EEA78BA36564BC20456E01A27404C09A25A
        Validity
            Not Before: Mar 26 08:59:35 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=689209AF1A3790BB55B4AB95466E1B856767FB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:93:ef:c8:58:ed:da:ea:7b:dc:75:de:5b:
                    bf:e4:0c:ab:7c:37:43:1c:c5:df:01:cf:c1:db:77:
                    89:2f:78:84:48:41:e2:6e:30:2e:ad:e3:e0:b9:68:
                    15:43:c9:6a:aa:83:cf:28:4e:9e:e6:de:d7:bc:21:
                    dc:a3:4a:f7:7b:b1:19:ea:50:3e:95:68:6d:b8:fa:
                    e1:8a:1d:4e:f2:f0:43:c2:f5:c4:1f:64:55:47:93:
                    a8:3e:a6:fb:9f:6d:d9:c4:03:01:15:31:69:d9:f4:
                    37:ae:4f:25:60:ea:bc:08:d9:b3:8b:d1:ce:cc:f6:
                    d7:10:ab:90:59:4e:9e:f1:80:cb:10:f5:d9:ca:ac:
                    a9:23:3f:60:59:0e:d6:11:4e:85:01:e0:64:83:f5:
                    a8:1d:f4:18:69:bd:28:4d:8a:eb:66:26:bd:9a:8c:
                    78:63:00:43:87:f5:5b:e8:b1:9f:6b:63:8c:4f:c9:
                    21:34:bb:4e:ce:c9:5b:71:24:e0:8d:52:f0:f2:f7:
                    44:01:d8:78:b0:cc:b6:a6:30:53:a5:40:d4:26:3d:
                    a4:bb:84:6c:6a:17:e0:3f:77:87:97:2b:5e:45:73:
                    5b:16:c7:d5:f6:2d:49:8d:9a:39:dd:87:be:fc:7b:
                    10:a8:a4:1b:a2:92:95:2a:2d:8e:74:d8:5d:b6:81:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79
            X509v3 Authority Key Identifier:
                keyid:CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:8f:34:5c:fe:d4:7e:fe:91:9f:ba:d8:85:82:13:ce:b3:
         63:20:99:ce:e7:5d:1b:90:ac:cf:a2:5d:ae:c5:57:2a:a4:bd:
         9c:56:8c:7e:36:3d:78:84:c3:f8:ec:2d:3f:48:09:a4:6b:5a:
         c0:46:77:3c:38:d1:ac:4d:d0:0f:34:7f:38:6a:70:5b:1b:60:
         77:40:b8:e4:c1:2b:f5:b8:a0:5f:f6:98:6c:63:26:f7:ee:20:
         76:e2:46:49:b7:96:4c:a7:f6:a7:92:6a:4a:10:a2:d4:61:3e:
         a6:93:3e:e4:0d:df:12:41:f8:0d:03:ae:62:54:2d:1f:21:38:
         65:5c:42:1c:d0:59:e2:6b:17:79:95:ae:66:ef:b4:cd:85:0d:
         b5:3c:dd:d2:6c:18:05:b5:6e:46:02:80:63:55:fb:1a:bc:d0:
         70:c1:d0:76:8b:1a:3b:a7:86:8a:9c:c0:9a:52:1a:56:eb:8a:
         77:05:1a:e1:c4:c9:67:f3:47:88:db:ce:dc:47:d3:46:6c:e6:
         36:c2:25:b1:74:18:3d:84:ca:69:33:d1:b0:d5:4b:b5:89:cc:
         0c:8e:b7:be:e7:19:08:ec:e3:28:75:d1:50:bb:db:ad:79:05:
         c2:d7:68:6d:60:93:45:7f:09:de:7d:04:cd:a4:1d:ef:8c:26:
         af:83:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:11 2026 by rpki-client