Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
File:                     KY7S_WrVxbVoffYUonXC_ISNTpQ.mft (raw, json)
Hash identifier:          uyzLAST/aOl9HetLFBEK0UWAM4nT8nQr4LcmMjeTcII=
Subject key identifier:   B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Certificate issuer:       /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial:       040B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
Manifest number:          03FE
Signing time:             Thu 26 Mar 2026 10:57:49 +0000
Manifest this update:     Thu 26 Mar 2026 10:57:49 +0000
Manifest next update:     Sat 28 Mar 2026 10:57:49 +0000
Files and hashes:         1: KY7S_WrVxbVoffYUonXC_ISNTpQ.crl (hash: KKGOHeMA6nigLiViVBABv3vQKt9QFPLUdpDLqf4+Uzo=)
                          2: NlQidybSBeZHTZI3L4pKpirVIps.roa (hash: UIQb5c2F88EIT7UEI7F2iTP67ctCprgSSNLLg9Bho/E=)
                          3: eNy_6L-cDdzy9gYGpgWCKQ9JFV0.roa (hash: kgrLy2Dxerb5vSlDt7R16GUhBYYkorNYj7an5P4SDQM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 23:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
        Validity
            Not Before: Mar 26 10:57:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B03685E84040AEF372A7530642B60A22918BA415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:c5:43:f2:41:c1:58:1f:f2:6b:c8:89:6a:
                    9c:a3:c3:3a:ff:fe:f1:0c:55:e8:13:49:bf:8b:b1:
                    eb:13:04:81:5f:11:1c:73:a7:a4:04:51:38:8b:88:
                    02:49:da:61:e0:18:4d:22:f1:c3:fc:4c:3a:45:87:
                    9a:19:90:ea:21:1b:78:6f:57:b2:2a:b9:bb:d9:9d:
                    c0:45:9b:73:99:48:44:1f:ce:87:cd:70:d0:be:48:
                    ab:6b:2b:c5:68:21:79:93:1f:b0:2e:e6:9b:93:66:
                    ff:27:db:e4:4b:da:0c:11:92:be:a6:1b:37:36:5b:
                    79:72:cf:d0:6e:92:e3:7f:40:0c:2e:b3:41:f8:3d:
                    26:d1:ef:50:6a:a9:91:58:7d:23:a0:9e:98:7c:73:
                    73:6c:86:16:4b:cb:51:20:ab:91:5d:b8:73:a9:99:
                    8a:93:df:1f:80:52:25:2c:e6:1a:96:d8:75:5b:5e:
                    24:97:18:bb:69:70:30:31:b4:d0:0e:63:ad:2e:f0:
                    14:ef:af:34:38:cf:e8:58:9a:49:7a:ec:d6:4e:e5:
                    be:4a:f6:f1:21:d9:8a:c6:ec:7a:48:ef:47:3b:74:
                    ce:8b:6f:ad:f9:82:38:70:4f:4b:7f:b4:37:42:f8:
                    0a:3f:34:e7:64:83:55:ef:97:f6:e1:c8:b2:2a:d8:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
            X509v3 Authority Key Identifier:
                keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:6c:8b:1b:3e:9a:eb:68:49:96:9c:76:f0:fa:29:23:9d:
         3e:8d:82:da:a6:6c:5f:94:77:df:6b:76:bc:10:f2:44:91:94:
         4b:1d:c3:c9:14:ec:53:9b:f8:a7:13:16:3b:53:35:30:4d:89:
         95:42:44:b3:b2:94:c6:51:c2:94:0f:d9:3f:20:4d:77:5c:52:
         dc:80:2d:88:a9:09:7a:97:00:e3:95:02:65:de:c6:62:f6:89:
         cd:be:54:51:9f:5d:dd:a6:ef:3b:cf:8f:32:54:eb:d6:36:e9:
         07:3b:c1:03:58:a8:90:eb:d1:c5:2e:3a:17:b4:9c:2b:ac:a6:
         7f:91:9c:05:fe:81:ae:04:e9:d1:f7:10:85:bd:cc:7e:3d:c0:
         01:05:59:f2:36:8f:a5:de:c4:5c:7e:8f:55:81:e4:3f:b4:3d:
         4b:38:8a:98:bf:72:1a:3d:49:e9:78:fe:eb:86:93:b1:bc:ea:
         b4:30:2b:9c:db:01:45:92:b2:82:1a:40:9e:3c:6f:91:98:d2:
         63:d1:4e:ad:67:73:a3:bd:38:f7:2b:a8:62:e4:d2:c0:75:72:
         a1:03:6b:90:25:13:1f:1e:3c:3a:45:a3:9c:22:e7:c8:e7:d8:
         a6:21:16:69:8b:dd:02:fb:e1:e0:9d:6b:f0:d9:33:db:1e:0a:
         92:dd:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:52 2026 by rpki-client