Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File:                     Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier:          9XoLbUy9ifyR9z+7Gs+zMUoy4HPYMH1iWz7EG/f/BNc=
Subject key identifier:   BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       1120
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number:          1116
Signing time:             Wed 11 Mar 2026 11:25:29 +0000
Manifest this update:     Wed 11 Mar 2026 11:25:29 +0000
Manifest next update:     Fri 13 Mar 2026 11:25:29 +0000
Files and hashes:         1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: EzmviX/wd4Xge6LzQSKrAKu4GcGa+yPe4GrpR5I5TME=)
                          2: ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa (hash: LKn7uI6AgBpHG4K40L0bjJxIVTlLba08ez5ruWOAl7Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 16:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4384 (0x1120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Mar 11 11:25:29 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
                    39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
                    c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
                    ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
                    fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
                    13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
                    15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
                    9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
                    ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
                    92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
                    82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
                    99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
                    39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
                    c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
                    02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
                    08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
                    80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:2d:d0:d6:0a:4c:cb:6f:3e:a0:f4:86:71:c0:f6:3b:f0:
         e2:86:78:06:87:65:fc:8a:7b:4e:e2:63:eb:99:58:b7:d5:51:
         42:80:ca:06:b4:a9:f4:82:49:8a:87:1c:39:e8:58:e2:35:46:
         88:7d:15:55:7e:6a:b8:e5:fb:9f:84:80:0a:81:e4:e7:4a:15:
         80:be:74:32:bf:fe:83:32:f0:d9:0e:05:58:32:5c:05:09:59:
         77:32:f1:fd:6e:fd:eb:30:e9:d1:01:aa:76:09:2b:49:15:4c:
         ba:b1:cd:d6:e0:64:42:0d:76:f0:e0:22:10:8d:b8:8f:95:36:
         17:df:d2:3a:cc:df:d9:d1:10:83:c8:95:55:e8:a2:96:8a:79:
         5d:4b:19:d7:cb:ca:76:07:32:1d:4d:c8:54:17:27:d0:51:36:
         ed:b7:4c:8b:41:0f:8a:e2:72:67:55:b7:82:ba:a2:8f:aa:34:
         0b:62:b2:02:fb:d1:b1:d5:39:54:09:67:da:b9:60:fd:e8:23:
         1b:4d:9d:68:cb:1c:09:f8:36:ac:db:b6:fa:65:66:cc:f9:81:
         f2:fb:52:47:45:8a:05:f9:c2:f7:0a:c1:49:ce:ed:89:95:c6:
         86:d2:21:4e:b0:fb:7b:af:3a:bc:00:81:0d:aa:a8:69:da:47:
         2e:ec:ee:3a
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICESAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2
MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNjAzMTEx
MTI1MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJERjVFNzRDMzI1RDRF
NTM3MjA1NkNBMEVBNzMyMzhFRjQ3NDFEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4JDoSqHKDOkFjFRFShzl4xs1euKJTsxXHe8xp7MhoYGoin6uj
G2blLdNdS8oRnlEN53vPCSefel3WT/2VO3QvzHg9hjYdn45nkhPURgNWAFMqUVkB
p+XJdBXMOT/qvij/4qLDtsgEoZvsHwFxmSMraa+BrbWhVaz7K+Dk/cIxgG4cBBt6
epKBurnYY71fGhofgXQMaIJINkWlx4BGjnxsCGGcwJm47cLBIiz2Ox9kyDDVbjna
tWXyrZ/6Ke+9b1xR88XmIAb0EiZH+PmIb6VmvwKP9Sxw5KlKz11wDpLNKQiQNUoA
IYELidhTa6slf4CXxVcv7LiGLJQX7wqEbhDfAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUvfXnTDJdTlNyBWyg6nMjjvR0HRowHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk
FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H
SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWjJMZ0NrX3Z6
ZGZ3VW5Qa0ZRSVl3Nm4tRXVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGX9LdDWCkzLbz6g9IZxwPY78OKGeAaHZfyKe07iY+uZWLfVUUKAyga0
qfSCSYqHHDnoWOI1Roh9FVV+arjl+5+EgAqB5OdKFYC+dDK//oMy8NkOBVgyXAUJ
WXcy8f1u/esw6dEBqnYJK0kVTLqxzdbgZEINdvDgIhCNuI+VNhff0jrM39nREIPI
lVXoopaKeV1LGdfLynYHMh1NyFQXJ9BRNu23TItBD4ricmdVt4K6oo+qNAtisgL7
0bHVOVQJZ9q5YP3oIxtNnWjLHAn4NqzbtvplZsz5gfL7UkdFigX5wvcKwUnO7YmV
xobSIU6w+3uvOrwAgQ2qqGnaRy7s7jo=
-----END CERTIFICATE-----
Generated at Thu Mar 12 15:21:11 2026 by rpki-client