Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
File:                     _HUspZ646u8j0iXcZ6oIUgHx95w.mft (raw, json)
Hash identifier:          vRekflfBdn+sEDHTBWh9ay97S7RfV50Ir+s9L+ukYjw=
Subject key identifier:   DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       0173
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
Manifest number:          015E
Signing time:             Sun 08 Mar 2026 00:54:28 +0000
Manifest this update:     Sun 08 Mar 2026 00:54:28 +0000
Manifest next update:     Sun 08 Mar 2026 06:54:28 +0000
Files and hashes:         1: 2lZrAQFs5JeFRvIu9_vUL-lZAJs.roa (hash: Ehunx7WJc4NH6Z1OXEr3Ms2UYSpLCEyTe+1nSV400ps=)
                          2: 6A9Cq4xKNjzRXOjTQgOFWDeGVRM.roa (hash: 22r9bnKSIYKIJGoYKuBrWS1s4IkO2x0BNoQRshyfJxs=)
                          3: FKzUqrBc2GTGOPMi4H6lgpJ9Xn0.roa (hash: K47Gf7ErRLldd42bTVxbWXKmUHf+OoDeWhl+X6UtNHQ=)
                          4: JC0131RCTbuw5uzVEFEpLz2gfe0.roa (hash: qKRwYWU24k/8mciplr/1WSInTz0AiZbkubRoIGmLy18=)
                          5: KIITV7eWhVy2oyjflPz5VX2jgW4.roa (hash: lWCYvPowyiiCW0rJqficFkjP3myn6ivGv6yghD3b/2M=)
                          6: MeSnDkveUHki7x33-BPejYOo0h0.roa (hash: xVWReYWzQ3Def41EjS/9OU+AR3j8MKb9o9tnGr6xTWs=)
                          7: Qi9r7SAykhgYWpQpenGJzFGB1UU.roa (hash: Wd935ORM1zUW1vIUChYKNwzMto8YW65lLr6IEYcZtVI=)
                          8: U7bAfTWGmHG24QF2lLYEpbwPxc4.roa (hash: MfQOCKHyiF+fAF3p74/zm1pH+l+X5w8UGzW8sioG4qM=)
                          9: ZzDet4OhBFJBDsMRiAcU09vIsTU.roa (hash: yCh4rYmagAQmsI5z29QEk0IVnWk1yHzKHpnLW5nJPTg=)
                          10: _HUspZ646u8j0iXcZ6oIUgHx95w.crl (hash: 7VBwyeBe1byZU+sfRafvfu6Cs79u0KCm6jQwGt3UwJQ=)
                          11: bSjv46tqE8U83zZv-6VkdOkU_SY.roa (hash: 6Pn+KM+ypxW5ap0tMIcxnq5BdTW+Aa04U81FtQTBkCg=)
                          12: bfaAbBXNTIy4JkKMMcppzg8kFn8.roa (hash: ii1pYAckY0Wug+EbGW7SCn/HiLNypt9vsLsIQnJ0LxM=)
                          13: eHajrlo7z6lH7awC77fcXY_0djE.roa (hash: nL5vlV0mmaYyOIcfgSiQ+BWk1EmmkxVAiK9ti2D6T84=)
                          14: gKZ9rYhVRTGBE8igk-t0e2zy2c8.roa (hash: KbAGC+m1Sq/GC+MOAl45LYGuODNz6TWFSyFo+xZzEC8=)
                          15: tig2O7Gwf-1DIg9MCn8shqDHVY4.roa (hash: uhFNZWpMJ2htr5dI+ElHPlR4tPyGLdeTM/NnNY5kLgI=)
                          16: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (hash: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=)
                          17: wWIF46KOlJ6Ji66uprRX1_kOLII.roa (hash: 0HB6pKDMLPF/WkvAD+H+77/GNQBy0MbivA1mrgjPQ5U=)
                          18: yMdtYDsBDYQNxMTBu0WJy2fqwz0.roa (hash: SLRr3YZ135D5mFAS5iEErcjTF+dFECOQDSrmmD+9I5c=)
                          19: yqsZsdHjFzqqMq3U6hrl-U6Strk.roa (hash: 1yvvdh8h871LmVCob9jKyk7hpyhqZO0PqpztGpBO4pU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Mar  8 00:54:28 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=DEFF8141E2DE64B1118927328C2D59C66278E59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:4e:5c:da:be:9e:de:b7:29:af:72:f2:25:
                    5d:77:d2:2d:f8:c9:e6:cb:72:b1:9b:a4:cd:57:f6:
                    36:0f:be:04:d2:08:d2:3b:b2:40:d9:05:22:dc:e6:
                    ab:90:56:72:d2:20:d6:b0:cf:3c:33:9f:34:e7:d9:
                    fd:56:0e:28:f3:4a:e2:5e:13:23:56:26:80:01:ce:
                    e5:1a:04:81:b4:72:54:19:1f:cb:0d:c1:2d:40:a9:
                    68:21:e0:89:87:35:3e:d3:ac:06:dd:58:3e:46:96:
                    a6:fd:60:eb:26:b8:fa:d6:64:74:bb:cc:de:ed:a1:
                    5d:28:d6:1d:26:ac:65:65:66:2b:8d:42:7a:85:a0:
                    f7:cf:13:d8:12:d5:cd:88:f2:ba:0f:40:52:24:ef:
                    23:eb:93:bc:40:a0:74:2c:ff:26:16:d9:52:ea:e2:
                    0d:de:e7:e8:ca:4c:08:80:c3:60:5a:26:13:0f:9a:
                    7f:cc:ce:42:81:55:a3:d0:52:b3:fe:a9:65:43:8d:
                    e3:0f:5b:d9:8f:7e:1e:a0:24:93:4e:b2:74:c6:3a:
                    44:e4:91:6a:49:a2:df:12:5c:16:19:0a:8b:a1:52:
                    15:ea:d3:80:87:8a:52:fe:7e:ba:af:44:4b:8f:a7:
                    17:97:d9:e4:1c:90:20:b3:32:c9:ca:0e:6d:f7:5f:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:53:81:7f:2b:07:86:1f:be:fc:e6:dd:c3:fc:10:1d:17:ba:
         4a:65:ff:ad:d5:5a:33:3b:09:40:b1:df:e4:85:fd:a5:b8:da:
         01:a5:a4:7c:a9:65:07:cf:f7:bf:5e:76:0e:6e:48:6f:ea:9e:
         57:32:88:14:d1:96:2c:c3:61:5b:7c:f9:a0:8c:c2:2d:7c:20:
         b1:04:6a:37:c3:b5:76:16:f9:00:ae:cb:ca:71:56:93:e4:f1:
         f7:ef:4e:32:51:5f:e4:6c:74:24:71:91:78:ad:f0:da:9e:48:
         89:1a:f3:98:f6:2d:dd:3f:33:fc:ee:80:8a:85:5a:f1:e5:15:
         8e:b1:0e:32:c2:b3:4b:07:f0:c4:39:42:32:c6:cb:c3:ec:3d:
         fc:4a:56:12:c5:b5:bd:cc:3e:07:46:71:ff:23:f0:c4:67:07:
         5b:5d:e3:ff:6d:71:25:a7:ec:c3:98:c6:a6:74:b4:2b:2a:2a:
         ff:1a:fc:47:fe:c7:2b:5e:84:f6:cd:7d:3f:77:b6:6b:9f:e4:
         f2:29:69:c5:e0:df:19:9d:b5:41:a2:5a:40:37:79:4e:43:d9:
         f6:7e:5f:00:86:f2:23:12:fa:e9:f7:dc:9a:fd:78:f5:9b:6b:
         5c:c8:9f:80:ea:eb:f4:c9:e4:3a:b9:09:9a:b2:09:d6:bc:fd:
         7e:59:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:37:58 2026 by rpki-client