Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
File:                     fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json)
Hash identifier:          g2NUYValm/1c8HMKI2xjtAYHEfvD1ILDBR1Ky+jQgf4=
Subject key identifier:   9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Certificate issuer:       /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial:       0613
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
Manifest number:          060A
Signing time:             Mon 20 Apr 2026 23:03:43 +0000
Manifest this update:     Mon 20 Apr 2026 23:03:43 +0000
Manifest next update:     Wed 22 Apr 2026 23:03:43 +0000
Files and hashes:         1: 8iU3wEzok3gKvIqLkgbHhsw6-eg.roa (hash: xN2RK1h4tjD0XjogrtTLV9kUMGsJJ+fW2BNxkFyGmEs=)
                          2: BdnHgYWxhScNUkJzMJgTK9EZj9k.roa (hash: uOPSkQQ3RPLaNEZfmE2R1qOR8Uqz3QJGq0JkmDWo7/A=)
                          3: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: GNr1HXLfOeui5Nc98Z6a1Zxatcin8DF6Sh/nDuC/dVw=)
                          4: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (hash: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
        Validity
            Not Before: Apr 20 23:03:43 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4:
                    d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1:
                    d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2:
                    cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af:
                    f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa:
                    35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c:
                    cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3:
                    98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60:
                    d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f:
                    4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc:
                    23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1:
                    b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4:
                    d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9:
                    44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46:
                    2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47:
                    a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69:
                    78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
            X509v3 Authority Key Identifier:
                keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:3d:b8:13:ad:5b:6e:46:2e:aa:5e:04:39:27:e3:03:c4:
         fb:aa:2b:ba:1b:7c:8d:93:7f:df:fe:f5:c5:1d:1b:75:18:0d:
         a0:4f:e5:5b:27:f4:a5:f9:02:24:3c:70:31:c5:f7:a2:db:60:
         0d:9a:e8:24:5f:19:72:05:b3:15:b0:f7:27:11:11:49:ff:25:
         88:fe:93:b9:74:5e:84:40:c6:a8:18:56:f9:ae:04:7d:ed:62:
         c3:13:6f:de:00:34:5d:be:27:3f:00:c0:3c:79:33:60:1f:7f:
         d0:94:f5:b6:08:d0:ae:e7:5c:45:e8:12:88:0a:46:4f:b4:9a:
         a1:b4:72:ba:fe:a1:02:a3:f3:d9:3c:c9:c8:af:68:fe:96:10:
         a9:da:5a:a5:48:da:45:f5:00:87:a1:63:d8:20:0b:47:4d:22:
         dd:8b:45:f9:fb:23:26:e6:e1:aa:09:6d:f7:57:06:30:0a:8f:
         fe:18:7f:24:19:ef:a7:38:bf:22:0b:6a:e3:32:94:ed:65:75:
         51:fc:6b:37:e0:5f:33:b3:27:89:cf:07:7b:83:8d:76:e2:9a:
         f9:a1:b7:c5:d7:ab:31:58:7a:b2:0d:74:f5:b0:58:ca:87:b9:
         8c:fa:11:bf:d3:72:f2:e4:23:53:0c:18:59:fa:53:82:fc:de:
         a0:40:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:29:39 2026 by rpki-client