Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          9iJlzu6C5W7G0woptWmFts/elsYNv5Fw+0qMBW5ky4A=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       150D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          1247
Signing time:             Sat 07 Mar 2026 20:54:00 +0000
Manifest this update:     Sat 07 Mar 2026 20:54:00 +0000
Manifest next update:     Mon 09 Mar 2026 20:54:00 +0000
Files and hashes:         1: 0EV9Waq_8Cf2qfNaIc6o1Ce1S7U.roa (hash: sYZtEfovuYI6eGXv2fre/IamCcA0mP3GieUs/1LghjE=)
                          2: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (hash: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas=)
                          3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: /U6N/WhXngza5yXllCDR7k6zbWybEGCLYGJDPP5xNLo=)
                          4: 3hmGqCK4MfQ8p--8Knz4PLEsf4I.roa (hash: Nr/0iXAvSXdC3uAy1eKOiiSrzdWZjWoevPteFP22oDA=)
                          5: 45QmnsqdWOqNKxUfS08P7N5eAaw.roa (hash: FLKv90LqqAqfzW4ka4s7u8EQzLV4bNEoQgjjXQI2gvk=)
                          6: 4XfHzwZwVYmznZ5CCJNJ3lOjuEI.roa (hash: bR4SxyCJGeiJnHEswyFDofE+8/L6j5PhW5a8nMPotCE=)
                          7: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (hash: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408=)
                          8: 5lDuntK7WIoZk0sgHBscqc9RL6w.roa (hash: JX4YhXuPQCIu5bsUWEJxrMbMu1FR56LLIvAcdHfMem0=)
                          9: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (hash: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=)
                          10: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (hash: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=)
                          11: AFcm7pM8j5ejCMlAh-5j8-sOEbc.roa (hash: rW1JSOnwV0njBGop5mlA7nJRWoQdJziVa3ds1Te44jo=)
                          12: AY_50U5vPMRrl8HUUZiPEYGKnto.roa (hash: YyY5kyPyrcgvMnbVZJIfrN9oOpX8/EgZ0i89QU4P1aY=)
                          13: IS2LrxQcXYojyogdnit3pCUydBw.roa (hash: Tm+olkR0aKGzvS4I3+QR4fxXgoLKRa9UwrX3bgTbZEU=)
                          14: IVibC69SMkVPpFh5VWNu00soZzc.roa (hash: 4mj7nxLKJP4DJj4m3Jnj5IvmoJabF77XGRvFCH7i908=)
                          15: J50ylXuhdas2KjTervlhvK74aq4.roa (hash: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=)
                          16: O7EZ6j9V8cFiV9bX-EKBNkNR4Z0.roa (hash: 6gvliBqdvkpnm0vNb3P2yjHmVmhuLehtXWxM0187/5s=)
                          17: SbMnpJykKnyhfqRzZl_0BM-hFZs.roa (hash: 7rwtW35hihjLl/meUt1h7x94RGg2ejnRblaYIEqj3Ws=)
                          18: TaZFT0Z2aEjX_uleljN2tnB7EGA.roa (hash: PP4dO6TDk2s0Y0yKfFtB/rhNJMl15PM+18VPx1ms1bM=)
                          19: VPB09wxEXC4KnKhZaK6kgG661Nc.roa (hash: KuU6jWQ8Q2obz6ui/H5nMGWvB/CcAJ5QzqLfteaezWk=)
                          20: W75m8ClI26gr6u2_zu3FGxiwYc0.roa (hash: rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=)
                          21: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (hash: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=)
                          22: YRHxiXt805LQZ1d8Y2knw4hnN54.roa (hash: NISqLBuTIae3loWvUIDNUzIZtFP30DLGraPTFixxuSo=)
                          23: ZAiGeVD6b-J66tqwkFsZu7Vj4os.roa (hash: X0Wzw79OqatqPrnFcGfAjOJKu6KRgTGGpZArjlzvW0g=)
                          24: izVRQ7JLPoikKp5m-2SqYrAutUQ.roa (hash: HBf6u6pm8Xxecg4TSXECUcvkRPQipEAyoXUxPHY1K2M=)
                          25: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (hash: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=)
                          26: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (hash: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=)
                          27: t-6GfITkRkCZ0DXF1cPUbmXyp-o.roa (hash: 0dRYHzwpqJViiMUMNEZdGm56VlcO6Z1ptTcdyNhGmmc=)
                          28: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (hash: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=)
                          29: yzyNApNJEI49g97BvptpQk2LDZ4.roa (hash: TxxKBZ0glxRQ9j0CWLC8FZvuWkUNUyHuLNRZ5LUHCcQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5389 (0x150d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Mar  7 20:54:00 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:b5:4b:6c:0e:cf:e1:3e:e8:88:75:0e:4b:db:c1:2d:c9:
         35:d9:e0:f6:d2:0c:bf:7a:ee:b9:70:f6:b2:31:b6:d5:ca:78:
         72:73:f7:0e:96:7a:37:8a:46:85:ec:ee:9b:67:d0:42:f4:ad:
         fb:7f:6b:d5:a3:d0:b3:8f:08:ac:bf:31:7f:e4:7f:78:0f:f2:
         c2:f7:46:cd:08:2b:ad:a0:43:38:52:41:db:37:0f:50:58:63:
         52:20:a6:3b:17:2a:74:71:53:f3:61:6b:6a:f7:55:ac:b7:e4:
         3c:be:19:dd:2e:ba:b6:42:ef:aa:bb:25:72:a2:fd:28:da:68:
         71:35:8c:fa:00:9f:02:8a:32:6f:05:b0:1d:cb:e5:82:2a:ca:
         99:4f:39:80:93:3f:6e:76:d1:00:9f:b9:60:39:4f:f9:6a:a8:
         0f:04:65:f7:a2:24:18:08:3f:17:bf:f8:b1:77:01:e3:91:b9:
         22:f0:77:33:b5:0f:5c:6a:ac:d9:85:78:21:6a:1a:8e:32:01:
         a5:b1:7d:b4:a3:59:a8:ed:93:02:2a:15:73:68:65:61:3e:3e:
         16:d0:ed:ed:5d:25:a7:49:8f:bf:cf:b9:f5:09:bd:e2:86:d0:
         a8:e5:ea:8d:43:4e:ba:d0:56:9f:c8:3d:3c:70:96:df:ee:4b:
         b3:27:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:59:45 2026 by rpki-client