Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
File:                     zE7-l8nB6kjwGh-GXdYX67EzUaE.mft (raw, json)
Hash identifier:          HkDrVUC7GvKcrpeLfA7KOWk256a2vISNRjhnuRpevkg=
Subject key identifier:   DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
Authority key identifier: CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1
Certificate issuer:       /CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
Certificate serial:       0266
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
Manifest number:          025E
Signing time:             Thu 12 Mar 2026 23:25:29 +0000
Manifest this update:     Thu 12 Mar 2026 23:25:29 +0000
Manifest next update:     Sat 14 Mar 2026 23:25:29 +0000
Files and hashes:         1: r8boz4jBdZztL_izZVGfhqDuooE.roa (hash: TlUVGa4sphWGhDx//uUjzcMnpnFrJwG51Qzv51S2VWM=)
                          2: vDrORrFm7k39BuC9jdbHK4wit7c.roa (hash: 1Kb0WJOh7IMaquSPxMONz4pqLmPmKVqAW2zKx1fWMXc=)
                          3: zE7-l8nB6kjwGh-GXdYX67EzUaE.crl (hash: VceMTkYVfhFJlZvpqB7Yl7bNhkm8ONx8uvZN7gSP6Bw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 06:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
        Validity
            Not Before: Mar 12 23:25:29 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DE9B9DFE646B2A3DD11788D2D73B53FA4FD0AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:cf:f5:2c:a2:87:7b:b6:c9:41:7c:04:49:
                    62:35:99:68:87:a4:10:8e:b5:7b:54:c1:71:4e:5d:
                    e8:b2:eb:7e:e0:e7:9e:81:ed:e0:bf:e6:3c:cd:c1:
                    2b:59:4f:66:da:60:4a:b9:30:21:f6:77:39:38:32:
                    68:2f:b5:ac:10:40:e0:a9:6c:c2:67:12:2f:41:42:
                    dc:df:71:75:60:6a:cd:77:81:00:cb:73:a3:12:1c:
                    fd:a6:c6:46:c7:46:30:57:15:65:0b:a9:b6:e2:a2:
                    4f:55:d1:e8:ab:23:e5:87:84:f2:38:19:82:13:a6:
                    7e:e4:81:c5:07:07:d1:5c:14:3d:e3:4d:ae:14:86:
                    ad:28:f3:35:7c:c8:c9:80:7f:bf:1e:f6:a5:42:85:
                    de:9c:47:0c:b1:37:b6:74:0c:78:e6:cc:b4:ee:19:
                    b7:4b:80:2c:8a:b8:6e:35:84:39:1f:f3:a6:2b:f6:
                    1e:17:13:74:20:47:a7:a1:0a:22:cb:ee:59:9c:ad:
                    9f:5a:83:a3:8b:87:c1:9c:5f:87:77:51:2d:74:16:
                    1a:2d:5b:2d:08:5b:02:3b:1c:33:ca:fb:57:e9:4d:
                    41:ea:80:14:b8:de:5b:89:cf:09:3f:b1:38:d6:31:
                    2a:8e:fd:76:e0:8b:51:52:96:25:d8:41:d5:cc:d1:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
            X509v3 Authority Key Identifier:
                keyid:CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:0f:99:45:54:33:83:f0:f6:59:fc:5b:2e:92:f9:13:68:
         82:6c:8b:d3:62:6d:9a:2d:a7:bc:51:d0:6a:36:89:74:ad:5c:
         21:47:ca:51:df:11:d2:07:e3:e9:77:ff:e0:cc:71:49:89:8f:
         21:c9:8b:54:22:90:f7:62:9a:dc:4e:d0:55:33:68:d9:8e:fc:
         64:7b:c7:a5:c8:85:0d:c8:59:ec:2a:38:c3:78:a9:b0:64:54:
         96:8b:81:c9:05:f5:64:50:ed:40:16:08:ff:11:56:5a:90:58:
         3a:fe:0c:d1:ab:f3:07:03:e2:9c:a2:50:99:91:c7:27:a2:95:
         a3:b9:85:07:7d:41:e1:c2:8d:e9:0b:e8:25:f7:aa:3e:a9:22:
         86:33:59:70:bf:13:e5:04:b0:3b:63:d2:7d:a5:8d:3d:83:1b:
         d4:d3:e1:d5:ad:51:8a:a1:fb:b0:53:87:8c:07:99:af:a3:8b:
         85:20:13:d1:5f:a6:eb:7e:b8:fc:f1:14:2d:7c:3d:f6:05:22:
         27:1c:98:19:97:2f:08:1a:ca:64:22:44:97:a7:df:d6:a6:29:
         3b:07:25:c0:1b:a5:1e:0b:4c:52:57:b3:8f:b6:58:ab:eb:6b:
         9f:79:82:ef:4f:7c:7c:ac:bf:eb:9f:d2:a3:13:5e:c4:5d:62:
         24:c7:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:30:41 2026 by rpki-client