Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
File:                     fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json)
Hash identifier:          TI7ANjvnmrLt58RdjF48v+Re0R+yP8xceIccOfO7+mk=
Subject key identifier:   9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Certificate issuer:       /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial:       0610
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
Manifest number:          0607
Signing time:             Thu 16 Apr 2026 11:02:47 +0000
Manifest this update:     Thu 16 Apr 2026 11:02:47 +0000
Manifest next update:     Sat 18 Apr 2026 11:02:47 +0000
Files and hashes:         1: 8iU3wEzok3gKvIqLkgbHhsw6-eg.roa (hash: xN2RK1h4tjD0XjogrtTLV9kUMGsJJ+fW2BNxkFyGmEs=)
                          2: BdnHgYWxhScNUkJzMJgTK9EZj9k.roa (hash: uOPSkQQ3RPLaNEZfmE2R1qOR8Uqz3QJGq0JkmDWo7/A=)
                          3: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: LyLPvI28ej7HTkf5nUTDT/duMb0SBhwkxuddqv5twWs=)
                          4: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (hash: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
        Validity
            Not Before: Apr 16 11:02:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4:
                    d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1:
                    d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2:
                    cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af:
                    f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa:
                    35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c:
                    cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3:
                    98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60:
                    d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f:
                    4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc:
                    23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1:
                    b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4:
                    d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9:
                    44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46:
                    2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47:
                    a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69:
                    78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
            X509v3 Authority Key Identifier:
                keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:fe:e3:62:43:d2:8a:b9:ba:78:62:75:6a:44:6a:39:9c:
         2b:f7:39:d3:d7:a3:96:15:17:ce:ec:a2:af:e8:68:ab:a6:f7:
         35:57:40:e3:7c:97:ea:44:d1:4e:2b:b3:0d:05:ef:b9:8b:be:
         de:13:58:ae:49:20:dd:d0:25:d5:a7:0c:05:b4:fc:54:71:62:
         57:2c:96:1c:ba:08:2e:79:6e:d1:8c:38:9b:b1:fa:eb:ff:3e:
         de:f5:7f:19:e9:aa:82:b4:03:2e:1c:6b:26:0f:40:6b:4e:58:
         72:e4:a6:e6:28:85:5c:75:f9:f4:cc:85:4b:3b:84:65:42:92:
         a7:6d:96:4c:e0:cf:c1:74:9b:25:66:71:11:b5:2e:22:e0:f1:
         97:2e:95:e0:7d:86:76:3d:f4:8b:1d:57:4c:70:91:59:42:5c:
         1a:5f:ba:ef:d2:c0:a1:eb:a0:7d:f6:e6:65:7a:e6:c1:bb:a6:
         91:d2:8a:78:f5:b5:3e:67:eb:56:fd:05:43:84:fc:0e:ea:c6:
         89:2d:ec:79:0e:97:5c:c7:ed:e3:4a:1b:f9:28:69:64:a6:3a:
         05:6c:61:f0:62:cf:ae:22:55:31:34:78:ed:80:5d:59:6d:d1:
         37:cf:f4:de:f5:97:d6:5c:b7:8c:57:a7:e2:a0:64:d1:69:63:
         1a:bc:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:56:28 2026 by rpki-client