Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
File:                     EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json)
Hash identifier:          ktaKnvWULy4VDjgFLJryNV2p+lDExt6sgoiJvEqY+hM=
Subject key identifier:   E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Certificate issuer:       /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial:       04E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
Manifest number:          04C3
Signing time:             Tue 14 Apr 2026 23:34:59 +0000
Manifest this update:     Tue 14 Apr 2026 23:34:59 +0000
Manifest next update:     Thu 16 Apr 2026 23:34:59 +0000
Files and hashes:         1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: bJWK2R8YnkpjdDrOWmggjpO5j2ImCf9uG0TfjcTZ0cc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 22:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
        Validity
            Not Before: Apr 14 23:34:59 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93:
                    48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d:
                    64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d:
                    2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e:
                    a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57:
                    8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99:
                    07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea:
                    86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72:
                    51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40:
                    f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76:
                    d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c:
                    fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11:
                    f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e:
                    2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b:
                    30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9:
                    c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a:
                    09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
            X509v3 Authority Key Identifier:
                keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:9b:62:b5:39:e3:f8:2e:d2:db:c4:7e:36:f3:77:c5:58:
         2d:43:b6:6a:e3:bb:c5:1c:32:a9:bc:d7:e8:69:23:de:0f:a1:
         8f:b8:71:d9:3d:5b:ba:ae:44:e5:a4:a5:38:c5:1f:ab:b8:5d:
         36:dd:49:9a:9a:45:37:e9:02:4b:b6:2c:8e:ae:78:a8:70:e8:
         35:73:e5:45:3c:47:bb:1a:11:ec:24:3d:d9:91:dc:7a:54:9a:
         7c:ab:e8:86:2b:12:71:91:6d:53:fd:b2:a7:ba:2b:88:d2:5b:
         bf:c6:17:fa:e8:69:93:55:31:25:a2:fd:6e:51:0a:8e:62:72:
         26:47:93:5e:08:a8:21:c2:7a:bd:67:59:d0:d2:47:9c:2d:52:
         02:ee:17:d3:2d:33:15:a4:f8:f6:8d:8c:86:9d:31:3e:e4:33:
         e3:ca:2e:c8:f7:3a:98:5d:41:69:16:5a:0e:ce:f6:e3:f3:44:
         18:50:c6:2a:92:cd:70:ae:55:41:5a:42:9c:cb:2f:92:a3:0d:
         c4:e7:05:08:c7:7d:e9:9f:91:39:9e:66:a8:57:6c:fd:76:a3:
         1d:8e:3d:cb:63:99:0b:fd:fc:33:87:2b:0d:3d:c6:72:4c:e1:
         b7:5c:85:ca:d3:18:95:a0:9b:d1:7b:45:18:af:6d:22:e2:df:
         bb:87:33:33
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTE0
NjVGQzM0QTA4NzgxMzI5QzQ4ODIzRjQ5MTA0NzY1QjVDMzMzQjAeFw0yNjA0MTQy
MzM0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwMEZBMTQ4OTAxQjk0
OTBDN0Q4NkU5OThGRjJFNDNEMkVBMUREOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmq2/tWhRv+85fE8pDk0i+KeRbZCev0j7Y0SbNXWQxNMP+f1+T
WnVZAXWLLSoZC5fDG3Dw1MR2JROmfqLIT+6pZXg+UlBEQGnoV4xsgt9goWqioVSJ
H1p1mQf5/tBa/4Nq2/FUQktS6obSlT88T6d9qx47tTqKclFL88xaHEAksJHrFl7C
QPS07fkBlGTvKOffSVH/dtBZtxKEXyAZK3cix6BvHP7c1scdIWbFAVnfv55REff6
Jl2rsg249/CEfKAgjivwJNC0Ya7DgIoCIIF/OzDw0EN2cKla/cyi8v5nuchuvoNU
/rUZh5CtJshIignFJM8bO6zapdXDNFmKIiYBAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU4A+hSJAblJDH2G6Zj/LkPS6h3ZswHwYDVR0jBBgwFoAUEUZfw0oIeBMpxIgj
9JEEdltcMzswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBSUpJ
Ti9FVVpmdzBvSWVCTXB4SWdqOUpFRWRsdGNNenMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0VVWmZ3MG9JZUJNcHhJZ2o5SkVFZGx0Y016cy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIQUlKSU4vRVVaZncwb0llQk1weEln
ajlKRUVkbHRjTXpzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AJ3mm2K1OeP4LtLbxH4283fFWC1Dtmrju8UcMqm81+hpI94PoY+4cdk9W7quROWk
pTjFH6u4XTbdSZqaRTfpAku2LI6ueKhw6DVz5UU8R7saEewkPdmR3HpUmnyr6IYr
EnGRbVP9sqe6K4jSW7/GF/roaZNVMSWi/W5RCo5iciZHk14IqCHCer1nWdDSR5wt
UgLuF9MtMxWk+PaNjIadMT7kM+PKLsj3OphdQWkWWg7O9uPzRBhQxiqSzXCuVUFa
QpzLL5KjDcTnBQjHfemfkTmeZqhXbP12ox2OPctjmQv9/DOHKw09xnJM4bdchcrT
GJWgm9F7RRivbSLi37uHMzM=
-----END CERTIFICATE-----
Generated at Wed Apr 15 18:34:02 2026 by rpki-client