Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
File:                     VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft (raw, json)
Hash identifier:          Z4UtJd5eTJ5YyBWe8XNDrDdork872DwGqhJXC9kFfMA=
Subject key identifier:   29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
Authority key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37
Certificate issuer:       /CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
Certificate serial:       029F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
Manifest number:          029D
Signing time:             Sun 01 Mar 2026 18:22:56 +0000
Manifest this update:     Sun 01 Mar 2026 18:22:56 +0000
Manifest next update:     Mon 02 Mar 2026 00:22:56 +0000
Files and hashes:         1: 2vz-xMzPl8hiyTavYHJYKLC1WPY.roa (hash: W5GyxgtP1ONLKY2Y7pIwNIhLloHANzxzrB/mIxHajfQ=)
                          2: VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl (hash: HA6lR4HZO5TY6yDqkFuoBERm6k4Dhy6SU6OCiKGYdUM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 00:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
        Validity
            Not Before: Mar  1 18:22:56 2026 GMT
            Not After : Oct 16 15:30:20 2026 GMT
        Subject: CN=299015F48D1083B855C395EA13C4A54DCA5D3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:39:7f:a8:68:20:a5:fe:a8:ef:85:35:a5:
                    cc:92:73:f6:fe:ef:ef:7f:79:ef:71:b5:99:e1:b1:
                    7a:1f:ea:23:5c:62:b4:cc:1f:e2:f4:c4:f9:5b:2a:
                    f4:6a:9e:6f:ef:2a:fe:38:c3:ac:21:5b:51:54:d7:
                    59:52:5a:73:fa:a9:d3:cd:b7:c0:42:d4:c7:07:b1:
                    f3:c8:db:96:0f:07:7b:be:f0:8b:5f:7a:a0:f0:13:
                    22:36:3b:d7:0b:0d:05:4f:07:fc:67:93:4c:c1:28:
                    2e:ed:6a:d9:ac:22:ed:8c:ea:9d:f9:cd:c1:ad:9b:
                    e1:ce:58:56:af:9b:88:07:bd:66:86:e2:41:87:e8:
                    44:98:15:74:9e:05:55:21:37:bc:31:2e:b7:be:8c:
                    15:90:a9:12:8c:92:5c:61:be:69:94:e5:b8:29:03:
                    1c:6b:ab:19:44:ce:f6:69:4f:2a:da:9c:4d:b8:9f:
                    0b:f9:ad:ba:0e:8c:75:80:95:1f:34:4e:6b:d6:0e:
                    ed:89:3a:11:a3:8c:01:69:60:40:36:1d:ec:e2:8d:
                    74:bd:47:05:f5:3d:19:3a:cd:49:5e:2a:fd:f4:d2:
                    54:d5:a4:b2:89:f5:a5:37:a2:5f:17:ad:8b:f6:36:
                    4b:a2:c7:db:56:bb:9c:46:6a:97:57:b4:c3:d4:0c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
            X509v3 Authority Key Identifier:
                keyid:54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:81:d4:f8:e1:b7:e3:4e:67:08:3c:d4:70:f4:2b:ad:b8:
         47:6c:26:5f:4b:4b:db:f1:65:14:d8:d0:ff:81:fc:5e:29:ef:
         88:b0:36:29:1c:50:6e:a5:55:3f:c1:d0:20:3c:fc:fc:92:cf:
         22:7f:e8:66:e4:21:72:81:b8:25:73:0c:f6:6b:eb:69:18:00:
         b7:d5:70:f4:82:59:21:0f:7e:32:9e:46:ce:3d:0c:a6:67:97:
         a2:9a:af:9d:67:85:87:4d:55:52:77:28:94:f2:26:e6:4f:79:
         a6:3b:09:e0:3d:b9:02:3a:2b:b2:17:8f:25:3f:6e:a7:68:b7:
         61:ca:4a:95:82:a5:26:8f:95:ab:c1:a0:8a:2a:04:74:a8:80:
         d2:16:44:63:7b:35:3f:e4:40:e1:6b:c4:34:d0:84:58:60:07:
         79:32:83:e3:83:61:cc:95:e1:90:59:6a:1f:a9:28:90:36:a5:
         23:9f:f2:70:f2:e4:af:b8:9c:cb:f2:05:81:fe:ca:ad:af:f1:
         0a:f1:57:36:14:ae:69:03:bf:5a:21:f0:39:fe:0b:6f:5e:25:
         67:4c:59:35:b2:fd:50:1e:e5:5c:4f:1e:ad:3d:72:42:a6:fe:
         e4:58:4c:00:2f:22:dd:aa:a3:4a:6e:5c:a0:63:52:bd:b1:2c:
         3d:44:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:31 2026 by rpki-client