Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
File:                     csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft (raw, json)
Hash identifier:          KpmMqCcW4EemTOsUy6KzrYzMj1EcU+rq4Ls2F/pwWH4=
Subject key identifier:   F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Certificate issuer:       /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial:       02C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
Manifest number:          02B1
Signing time:             Mon 06 Apr 2026 00:30:16 +0000
Manifest this update:     Mon 06 Apr 2026 00:30:16 +0000
Manifest next update:     Wed 08 Apr 2026 00:30:16 +0000
Files and hashes:         1: 0IPQOd93kD2kNOW5B2eNgJYsD54.roa (hash: KLYZPgwyxXuSMmommOv0Du/CrtAQFimGoYtBuKC+acY=)
                          2: V2-e3j-C2M3f-IPF48ND24nzbIA.roa (hash: hFVoewVj78NZRFxiWLt4Uyz69EdAufx67waMMJXCdog=)
                          3: aVgvYuH5mqDNAknvRRG8QJRB_fo.roa (hash: HZBCn7rlmkjdYKYwq31T1rqQc9gvODFhzjrSpTbz+tA=)
                          4: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl (hash: dv0a41GuAJntQ62KRY5/b9vTCy44e+kAr5Bk9syz6u4=)
                          5: uu5G7HGxzW5ia56tt4mJl8N--5g.roa (hash: PsvjgyT4iOLRHHYzlHQE2uNnieAJwEovjNKBvdJpGu0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 08:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
        Validity
            Not Before: Apr  6 00:30:16 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F391F465C8CB2177FC08739816F643F8C728A5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:98:d2:0c:b8:66:38:9d:f1:d0:d9:06:52:
                    f1:32:4e:de:a5:0d:6c:90:58:85:27:b4:e4:69:d4:
                    94:2b:67:9d:7f:ad:a5:0e:b1:5a:f3:47:be:71:5c:
                    17:34:92:50:e4:9a:d6:10:6e:d4:47:87:03:ff:75:
                    ff:d9:1b:ac:2d:3c:b3:bc:44:f4:1c:75:f0:ee:39:
                    f3:5b:39:2b:6d:78:06:1b:dd:ec:34:58:df:4e:f9:
                    1d:03:e0:e1:3d:e7:7d:e2:c2:63:aa:c4:dc:17:75:
                    dc:d4:8a:37:36:d1:4e:31:af:3d:d2:0d:bf:8f:3c:
                    4c:4f:81:5e:c1:6f:6b:3a:77:99:28:0d:f2:ec:61:
                    24:8b:e6:54:42:c0:e3:6e:4e:73:03:ff:24:98:31:
                    27:27:aa:13:d7:ae:4a:2e:2d:e6:32:01:0b:81:24:
                    54:eb:c4:7f:cd:49:ae:b4:e5:d7:89:87:17:1e:ba:
                    a0:9c:07:51:6f:8e:44:c0:df:1d:72:fd:d4:1c:8f:
                    13:6f:61:3b:77:a4:bc:2c:e3:e6:bc:05:80:08:18:
                    49:dc:5c:9c:24:46:b7:90:31:b7:ee:45:2b:7c:59:
                    b1:b5:16:b7:12:21:14:5b:18:90:89:57:5e:44:43:
                    7a:c7:7f:c1:80:d3:05:88:1e:26:1f:6e:db:74:76:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
            X509v3 Authority Key Identifier:
                keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:e2:c0:0b:44:cb:00:81:ac:56:b3:ed:80:6a:a8:dc:c7:
         1f:ad:f3:fe:67:dc:1e:6a:af:35:4f:0c:fb:d0:34:03:b9:c0:
         48:e3:57:6f:6f:1b:d8:e0:0b:9d:65:fc:2a:c6:d9:ab:8a:6b:
         8e:36:c3:3e:b7:b4:d6:bb:32:f7:ba:da:10:f7:01:7d:0c:b1:
         c4:46:43:aa:9f:89:94:92:10:eb:02:3a:a6:b8:54:56:65:e1:
         84:76:37:18:32:e7:18:c1:d6:d5:d1:ea:f1:df:d1:99:3d:6a:
         37:f9:1b:1e:fa:6a:23:e5:73:f3:b5:25:4e:60:9f:29:f1:87:
         fb:cb:b3:d4:34:93:35:42:a4:4a:a1:18:a1:f3:b0:75:63:fb:
         a3:16:d0:05:16:f2:37:db:12:8e:c6:0d:ba:ab:9d:f7:8e:24:
         b4:ac:88:86:65:f6:ad:da:aa:06:cf:f5:af:ac:d1:dc:03:1e:
         e6:a3:2c:a0:78:76:45:00:d6:3e:11:b4:bc:fc:5a:60:2a:f2:
         43:8b:af:9d:6b:51:45:55:bb:f3:72:e4:fa:51:42:11:00:34:
         05:c9:cb:89:e1:2b:85:e8:84:7f:f7:32:8c:3a:81:f6:74:ec:
         fc:11:7a:84:34:7f:6d:4d:e2:07:cf:df:21:79:1d:14:ba:ac:
         06:d5:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 03:39:42 2026 by rpki-client