Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
File:                     bjmMUswqB52pAUghCshTKMEbvpY.mft (raw, json)
Hash identifier:          kIlGaILwJsPiw5C5QEoapsgRiah7eO03IfoeIKVQk8E=
Subject key identifier:   B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5
Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
Certificate issuer:       /CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Certificate serial:       0BA0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
Manifest number:          0B7A
Signing time:             Tue 14 Apr 2026 23:33:41 +0000
Manifest this update:     Tue 14 Apr 2026 23:33:41 +0000
Manifest next update:     Thu 16 Apr 2026 23:33:41 +0000
Files and hashes:         1: PjuFv-cHJl1U1NRos7-i5XtJWFI.roa (hash: GKa+NZY1X6D7Aa52E2mtdOgtTWnennJrcxeIgMF3IfY=)
                          2: WT6gTX3hIzq98DT6oT-twkl40XM.roa (hash: QCAJ/XbvXdIWcwBf6YklJkLxCRD1OR5vhKzhA0rDzGA=)
                          3: bjmMUswqB52pAUghCshTKMEbvpY.crl (hash: BgI3QfuHgJ6mA8gM6piCti8qMlL0a9OlJwhRQWOq9Fg=)
                          4: gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa (hash: 5seE7nbY8E8X+eQ6IkxdxFGQ4ameURjyy29bJ/nfaV0=)
                          5: vIrTjaJghNUba_yq6tjczw9WShk.roa (hash: /J5D/MO5UJxHznkt5OGnZ5kO6B77uiD/IojhmNsIaMs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 13:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2976 (0xba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96
        Validity
            Not Before: Apr 14 23:33:41 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B1D9FBC3BC759AFC3559C32E305EB537DDFF15F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:e9:19:43:8f:21:7f:b1:a0:84:3e:3b:4e:
                    2d:8d:1b:15:13:2b:34:b2:6c:c7:a0:a4:3d:52:8e:
                    47:fe:cc:51:4c:57:96:af:64:ee:d7:89:6d:75:d3:
                    ab:79:f2:49:86:b0:7b:17:8c:7f:dc:e0:02:06:65:
                    58:10:0f:85:51:65:c0:b6:ab:94:2c:41:78:a6:ac:
                    8b:81:cd:44:92:5e:e6:76:ab:59:a4:49:9e:dd:26:
                    ed:50:2b:04:3a:1f:af:52:74:59:0e:7c:0d:78:ad:
                    05:57:68:11:e6:df:0b:97:c2:1e:70:21:cb:b9:ca:
                    35:5b:0c:29:53:5d:c8:5c:c4:83:3f:73:3a:64:bd:
                    04:50:5e:3e:be:61:43:89:3c:d7:01:e1:1f:b7:c4:
                    cd:75:5f:45:a9:35:2d:88:48:45:41:bb:f6:0e:69:
                    69:ae:8a:37:00:9c:1e:8b:9a:81:df:d7:c0:c6:d7:
                    56:59:6b:26:38:4b:a4:d4:8b:01:2b:43:ad:34:bb:
                    91:d9:59:d2:74:2e:a6:ea:82:a8:cd:7e:0f:5e:ee:
                    50:3e:1a:22:a1:51:24:a6:71:78:a8:dc:cc:66:d4:
                    8a:9a:e3:ac:d2:49:06:18:19:63:8d:bf:19:3a:4a:
                    f3:d9:79:c4:a5:4d:b8:85:53:74:79:33:ca:c8:8e:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5
            X509v3 Authority Key Identifier:
                keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:63:8e:90:b0:0d:65:2c:d7:bc:b3:9f:55:e3:46:e2:7b:e4:
         de:23:0e:ce:c1:12:bb:75:eb:f3:cb:7a:16:58:56:3f:dd:af:
         de:d2:80:aa:7d:a6:cf:24:6e:c2:33:65:2c:20:ea:d4:27:ec:
         4b:f7:a0:67:3b:cc:2f:f8:48:f6:8d:be:75:1d:d0:5d:71:8a:
         43:0d:2c:09:9b:65:7d:72:d6:e9:00:2b:8e:84:d0:84:19:1d:
         c5:79:ae:7c:31:58:05:47:43:d4:a7:2b:e5:84:53:48:c6:72:
         30:6f:f6:98:df:84:8f:73:90:5a:bf:da:12:b1:62:41:3b:88:
         4d:5f:8f:58:d5:46:5b:c7:66:bc:b7:eb:44:04:8f:c4:b3:0e:
         16:5f:3a:08:39:9a:4d:21:2e:5b:af:35:f8:66:28:29:89:5b:
         4e:3f:07:ff:17:6d:a9:83:ec:7f:64:58:89:4e:fd:89:b7:da:
         42:69:8a:d2:6a:80:11:d4:82:4b:22:7e:96:8c:e3:f8:b7:98:
         8c:3e:db:74:bf:88:97:b9:dc:4f:90:9f:89:20:76:3c:96:c1:
         ed:29:54:ec:58:22:a4:ae:34:5f:00:16:3e:30:bb:32:81:48:
         1a:d3:2c:5c:4d:71:b5:f2:67:82:dc:83:2e:ce:f6:db:f2:c3:
         e3:9b:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 10:32:03 2026 by rpki-client