Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.mft
File:                     7Te7uNwwdrJ9nbWvSaNptNecbuE.mft (raw, json)
Hash identifier:          DTq0rj1hv5tuxY6Vbs7GyaifWtIErAcK43Iz55m//S8=
Subject key identifier:   AA:25:FE:6A:BE:A9:6E:AF:62:61:68:EB:A9:5E:F5:0C:AD:9D:31:53
Authority key identifier: ED:37:BB:B8:DC:30:76:B2:7D:9D:B5:AF:49:A3:69:B4:D7:9C:6E:E1
Certificate issuer:       /CN=ED37BBB8DC3076B27D9DB5AF49A369B4D79C6EE1
Certificate serial:       39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7Te7uNwwdrJ9nbWvSaNptNecbuE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.mft
Manifest number:          38
Signing time:             Sun 19 Apr 2026 03:32:53 +0000
Manifest this update:     Sun 19 Apr 2026 03:32:53 +0000
Manifest next update:     Sun 19 Apr 2026 09:32:53 +0000
Files and hashes:         1: 0K_ZUIeRj46ZC2ER4Crv3vqB8_8.roa (hash: vpUDAD+ddqs9DFVkqtpXYysL806VqgcDVTuLBQEVl5I=)
                          2: 7Te7uNwwdrJ9nbWvSaNptNecbuE.crl (hash: Aqh+SSBFjagf4bznExWRT169I7cFKzaVYnNTCPZVBaA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7Te7uNwwdrJ9nbWvSaNptNecbuE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 08:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED37BBB8DC3076B27D9DB5AF49A369B4D79C6EE1
        Validity
            Not Before: Apr 19 03:32:53 2026 GMT
            Not After : Apr  8 15:30:19 2027 GMT
        Subject: CN=AA25FE6ABEA96EAF626168EBA95EF50CAD9D3153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:be:70:e9:d9:35:f6:46:3c:08:f8:18:37:
                    27:f3:b8:0d:5f:b1:1c:8e:70:d9:d8:e8:10:72:f3:
                    06:24:ff:fc:2b:b3:29:72:e6:01:19:21:17:26:91:
                    3c:a6:aa:ee:ed:f8:c5:0d:be:b3:47:38:cc:2c:af:
                    bd:cc:e7:b1:5b:c2:2e:f9:f6:62:ff:4d:f7:7e:be:
                    bc:59:2a:bd:00:34:45:44:2a:8e:86:65:bc:0d:42:
                    18:38:b6:26:52:4c:0f:d6:17:89:c7:5e:28:7c:45:
                    a8:d6:46:61:b3:89:3a:9d:d2:39:33:96:74:b3:b5:
                    4b:54:41:43:34:ff:30:8e:78:a5:f8:6c:b2:44:e8:
                    c4:a8:8d:22:6e:d8:97:db:b1:2c:99:f0:d0:33:3f:
                    e8:2e:a0:3d:f3:47:d1:fc:f4:77:14:43:cb:f6:2d:
                    b0:f9:74:71:b6:fd:4b:26:5e:e0:2a:18:de:7f:10:
                    4c:75:b9:a8:f4:49:ef:47:06:9e:3b:f9:23:77:8f:
                    22:bd:fe:ab:dc:ab:0b:98:8e:4a:5c:a3:9b:f9:1c:
                    8e:98:da:3f:34:7c:90:10:0f:77:58:d5:53:9e:cb:
                    ff:57:2a:77:b7:de:dc:54:95:78:dc:09:95:7a:8d:
                    b4:7a:33:eb:6e:22:46:c9:3e:8f:9e:73:d2:39:ee:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:25:FE:6A:BE:A9:6E:AF:62:61:68:EB:A9:5E:F5:0C:AD:9D:31:53
            X509v3 Authority Key Identifier:
                keyid:ED:37:BB:B8:DC:30:76:B2:7D:9D:B5:AF:49:A3:69:B4:D7:9C:6E:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7Te7uNwwdrJ9nbWvSaNptNecbuE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CALEBTECH/7Te7uNwwdrJ9nbWvSaNptNecbuE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:17:dd:47:20:d0:1a:7d:bc:a0:a3:95:6c:97:07:03:df:0b:
         3f:f0:94:5c:ea:55:5e:21:57:29:67:86:ad:e5:48:10:ee:df:
         13:1f:3d:fd:df:69:f0:4f:65:7e:4d:da:76:61:8b:97:76:ba:
         36:c0:0f:98:eb:53:12:e3:5a:60:a7:6e:a5:45:8c:f9:48:8d:
         46:fe:79:4d:fa:3b:20:07:72:70:2d:db:c6:35:55:db:b6:a8:
         45:c4:ce:f6:19:39:de:8e:ef:61:21:7d:2f:52:ce:d6:9f:d7:
         1c:63:db:f9:df:3e:b3:98:77:49:c3:5f:c4:18:ea:f7:c9:a4:
         2a:a4:1d:d3:bb:48:d3:73:56:21:99:69:27:28:f0:00:a5:87:
         b6:5e:27:5e:23:1f:e9:c2:c1:8f:7a:9f:05:c3:90:2a:38:26:
         e1:ca:7b:1c:d8:1a:ca:77:93:f1:ac:83:99:95:6e:43:13:98:
         8c:f1:c9:8b:28:8e:61:bc:2e:6b:61:de:6e:de:3c:09:be:94:
         6e:fb:7a:0e:bf:6a:af:69:c9:23:a2:10:a1:70:de:05:9e:da:
         42:01:63:66:40:66:43:16:7f:df:13:34:42:f6:b9:09:52:2c:
         d3:ac:6c:db:48:bf:1f:10:a0:21:22:79:1c:c1:35:e6:99:fa:
         4d:5c:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:20 2026 by rpki-client