Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
File:                     5f38rnFoBdOTzrEk62PtHC37t3w.mft (raw, json)
Hash identifier:          lA0q6uITVGyxiquiKlknQYo3gZbJARDCvVHEjeSIpu8=
Subject key identifier:   A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
Authority key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C
Certificate issuer:       /CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
Certificate serial:       0DE6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
Manifest number:          0DE6
Signing time:             Mon 13 Apr 2026 12:02:01 +0000
Manifest this update:     Mon 13 Apr 2026 12:02:01 +0000
Manifest next update:     Wed 15 Apr 2026 12:02:01 +0000
Files and hashes:         1: 5f38rnFoBdOTzrEk62PtHC37t3w.crl (hash: vR2FQzmascoJg/wNXExfXcHmT4Vh5W3XnI7OXoIx7bU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 23:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
        Validity
            Not Before: Apr 13 12:02:01 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A6D65D49A5CC3DC9AFD8750C1C1A040DA9C3244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:b3:22:1f:80:4d:a4:41:cb:b5:2c:67:10:
                    11:45:d0:d1:36:db:89:26:a5:73:07:e2:3e:89:b7:
                    a3:1a:dc:16:cc:eb:da:3b:5f:d9:ec:f2:d6:3f:a1:
                    fb:cf:ee:5a:77:75:90:77:18:44:96:6d:28:4a:9e:
                    71:8a:fa:85:27:a7:a5:4a:0b:b3:9e:93:9a:ba:7f:
                    42:7a:db:bc:07:83:e5:87:d5:a0:2f:26:30:99:b0:
                    2b:a6:2b:d3:59:8c:99:24:c0:3d:aa:e7:a6:50:37:
                    3a:1c:e3:00:fb:80:7c:e6:50:0d:a1:35:f1:af:30:
                    ab:90:dc:d8:8e:09:dd:a1:3e:16:9f:88:cc:a1:2f:
                    35:5b:b9:a6:a0:28:b4:be:3e:93:26:06:f9:9c:f0:
                    ce:e6:e2:c4:6f:07:93:7a:b1:40:a0:65:57:4f:7f:
                    66:fc:68:e1:02:1f:34:e4:62:9b:0e:13:3d:f9:18:
                    ba:af:6f:39:72:22:f5:57:35:03:f5:cc:62:ef:09:
                    00:e1:a4:03:1f:c5:56:84:a5:c0:26:04:fe:b2:4d:
                    67:3a:3c:2c:f6:28:fc:68:24:eb:de:82:35:03:50:
                    d1:03:e7:7b:e6:3a:4f:78:b6:b7:69:e5:ed:45:01:
                    77:f3:ef:7e:01:4a:33:fe:36:5d:2a:d6:6b:15:fc:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
            X509v3 Authority Key Identifier:
                keyid:E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:1f:45:9b:6d:26:eb:b5:26:5f:f1:91:a7:f7:51:a7:56:
         66:e4:a3:bc:fe:a7:ba:56:32:79:de:1a:93:cf:3e:1d:53:35:
         14:5d:81:eb:64:8c:c4:f1:61:6f:3a:bb:30:eb:d0:35:88:1d:
         1a:39:f5:d4:e8:19:c6:fd:8f:e4:9c:1e:e3:74:3b:ce:42:3e:
         fd:aa:6e:4f:86:cd:83:ae:f2:62:81:bf:fd:4d:c5:a9:a0:1e:
         c4:83:2c:e1:b5:ef:59:e5:16:f2:90:fd:9b:1b:f9:eb:ec:5b:
         5c:af:5b:a1:d9:81:a7:50:74:91:67:8e:5d:da:f1:29:e3:23:
         de:25:07:2a:77:14:fd:62:9f:43:ca:a8:2c:36:d2:8e:50:02:
         08:93:14:5a:90:00:94:b2:51:c6:f9:b5:09:54:d6:8a:1c:7f:
         8c:9f:26:23:80:73:79:b3:89:0f:a4:56:54:e3:33:8a:b0:fe:
         10:6d:c2:ec:d0:f8:fd:60:be:ed:a4:90:b5:fd:83:3c:2c:59:
         69:21:db:51:00:48:53:6e:ce:e1:80:a3:90:13:9e:a6:9b:62:
         ad:e4:1b:dd:a4:32:bc:74:08:aa:1d:1e:25:1e:33:c0:ee:4d:
         bf:36:b3:af:8d:a7:59:63:9c:ed:b6:df:6d:7e:d7:c7:da:2c:
         4f:e3:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 20:12:07 2026 by rpki-client