Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
File:                     -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json)
Hash identifier:          wYIpoeWuH+chqd4e5S/8eX6QWtCpEBe18JUADZMrzKU=
Subject key identifier:   CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       0642
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
Manifest number:          0641
Signing time:             Thu 26 Mar 2026 17:28:12 +0000
Manifest this update:     Thu 26 Mar 2026 17:28:12 +0000
Manifest next update:     Thu 26 Mar 2026 23:28:12 +0000
Files and hashes:         1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: BzozZBCKUqjZyrWIbiGWBsF8VN2xSHtRw9vXnRNvdE0=)
                          2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 23:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Mar 26 17:28:12 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e:
                    02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac:
                    40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf:
                    af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da:
                    b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f:
                    d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed:
                    bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9:
                    d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73:
                    63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1:
                    bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c:
                    21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8:
                    01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02:
                    89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3:
                    ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca:
                    3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd:
                    f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38:
                    96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:c6:ef:7d:a9:c9:3c:cc:6a:46:da:6e:63:34:24:e7:5c:
         57:91:fa:56:d0:19:ed:3d:79:d7:81:d0:6e:ac:dd:05:12:e9:
         78:f4:c7:da:f6:51:47:66:b8:15:01:ac:6e:26:a7:2b:1b:e0:
         f4:1f:db:62:a6:20:fe:fa:d8:34:69:f8:e3:6d:25:65:4c:9b:
         96:58:22:30:9c:d9:04:cd:04:2b:d1:b8:d2:d4:3e:8d:20:1a:
         7a:c9:bc:0b:3c:5a:ae:5f:dc:9d:03:4c:75:f2:01:61:b2:c0:
         de:d5:09:6c:02:23:8a:2d:d0:82:b4:1c:32:15:c4:59:f6:df:
         a7:e4:24:5e:19:67:90:f3:b2:34:7b:bb:80:db:cb:e6:9a:49:
         23:fd:87:58:6f:fd:75:09:9f:8a:80:6b:ff:66:d3:b2:2a:64:
         84:03:fa:71:19:4c:0d:06:c5:bc:ee:1d:28:3c:49:da:d4:2d:
         79:22:f0:b1:ff:77:49:82:f0:a0:7b:ff:54:1d:69:8a:25:79:
         e4:4a:3a:8e:e9:b1:df:fc:54:5d:5a:a9:fa:3c:ac:12:6e:aa:
         7b:24:f5:68:6f:f7:c6:7e:a4:66:37:1a:e5:4f:49:1c:3a:ae:
         d5:fc:80:b5:43:f3:bf:f7:e8:a5:27:d7:b9:43:58:b3:18:cf:
         93:4c:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:50 2026 by rpki-client