Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
File:                     THcKx8Jx2lspFcoBuVmI0EFPQHw.mft (raw, json)
Hash identifier:          Vaw9tSIcKZeeZwsW2bJ8bYFdbsBkRZOqLVImFGkGyPk=
Subject key identifier:   05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Certificate issuer:       /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial:       0170
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
Manifest number:          016C
Signing time:             Tue 21 Apr 2026 20:05:08 +0000
Manifest this update:     Tue 21 Apr 2026 20:05:08 +0000
Manifest next update:     Wed 22 Apr 2026 02:05:08 +0000
Files and hashes:         1: BERQJ4SepOAwCHhrmQcXKMV6QAQ.roa (hash: xwBrwphP0dOcpDUF5PRZlihDX54NlAP4Th/uwoNWRpc=)
                          2: THcKx8Jx2lspFcoBuVmI0EFPQHw.crl (hash: fRzv07zapPMNltOesgJLNlqO4K+fUKtnmZTeGiKzSjo=)
                          3: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (hash: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 02:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
        Validity
            Not Before: Apr 21 20:05:08 2026 GMT
            Not After : Feb 10 15:30:20 2027 GMT
        Subject: CN=05B63B0E8FCE1C5361B22FB87417DDA6E5B28D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:4c:b1:da:c5:51:53:77:f2:82:05:38:0b:
                    c2:c9:3e:79:2c:2c:49:53:6f:eb:ed:95:f9:b9:ec:
                    c0:b4:49:b1:31:da:b3:7f:dc:05:af:24:3a:72:f9:
                    61:41:6f:dd:03:f1:74:5c:ec:bc:97:0b:c4:d2:be:
                    61:02:f5:5f:50:cb:ec:ec:48:08:91:13:27:0b:42:
                    95:ed:95:ae:30:a6:10:25:0f:1d:96:91:f5:db:0d:
                    40:78:58:fd:7f:c4:31:d3:ed:d2:f5:96:43:7c:16:
                    6f:4f:05:80:99:6d:1e:2f:49:fd:78:2c:99:42:51:
                    b4:ee:9a:b6:b9:95:ca:ef:11:e0:4d:8b:60:40:da:
                    0d:57:aa:cd:e2:d0:54:43:35:3f:c0:cc:b2:ea:54:
                    35:7c:74:51:14:bf:f6:1f:82:a7:ef:3a:0b:ca:47:
                    b7:06:6e:1d:10:db:54:66:a3:68:f7:6d:97:f3:2c:
                    a4:a8:27:f2:f4:a4:f6:13:6f:6e:1a:a8:1d:cc:1a:
                    4a:52:e4:55:94:47:5d:66:dd:9c:9c:97:fc:89:56:
                    a9:a2:32:e7:51:7e:ad:12:34:79:6b:22:44:72:9d:
                    e8:99:f5:85:17:67:28:6c:be:3c:04:56:94:7d:fe:
                    68:6a:9b:c6:53:b7:d6:39:9d:7c:df:45:41:b4:a5:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
            X509v3 Authority Key Identifier:
                keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:3c:29:6f:90:45:79:02:18:03:60:9b:ff:43:86:0a:c4:
         62:6f:0a:f0:c3:7e:d6:82:ef:d0:d5:07:53:ed:be:7d:54:3f:
         83:b2:c8:71:2b:ba:d2:d4:93:40:97:0d:43:4c:c6:83:eb:2d:
         6b:e0:95:16:56:85:d9:ed:fc:1c:1f:b9:c5:f7:cf:d9:37:a6:
         b6:10:37:ec:98:0b:bf:d2:d6:06:8b:62:50:83:d1:28:96:25:
         69:41:b5:0f:c1:bb:7d:78:92:21:b1:d1:15:33:94:5f:c3:4f:
         4d:09:92:82:f3:21:53:dc:4b:18:a1:37:96:a7:1b:9c:3a:53:
         11:fa:9f:d6:a1:60:f2:7c:8b:5f:e0:25:20:65:33:42:42:73:
         6a:b8:1a:66:82:16:9e:56:36:af:dd:56:44:5b:ab:be:ae:96:
         6e:72:ae:ec:80:27:19:8a:eb:da:c3:67:c1:4d:cd:34:fa:a8:
         06:40:fd:90:bf:5a:ee:5b:89:ca:c6:ea:84:93:7d:a9:73:82:
         aa:9a:d1:72:27:f4:f5:d7:bc:29:64:fb:bb:37:3d:6f:73:21:
         c8:00:07:3c:aa:d4:7d:cc:da:3b:78:93:57:a6:e8:03:5e:09:
         fe:89:a6:d7:00:86:d3:65:34:ea:59:16:c4:c3:06:7f:3a:d6:
         58:a3:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:31 2026 by rpki-client