Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
File:                     SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft (raw, json)
Hash identifier:          nrskkFT7QsV8ijAmruu2xKvaJCdwfI7W7VI23iYTIpA=
Subject key identifier:   F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
Authority key identifier: 4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97
Certificate issuer:       /CN=4AC29EB919D071916D744665F29341B00A036297
Certificate serial:       047F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
Manifest number:          047D
Signing time:             Fri 17 Apr 2026 04:33:37 +0000
Manifest this update:     Fri 17 Apr 2026 04:33:37 +0000
Manifest next update:     Fri 17 Apr 2026 10:33:37 +0000
Files and hashes:         1: -rM84dFnltLzFCWPl4AGxt3d70o.roa (hash: OBYLVbSP/fiL5gNwYlwz1qku0qGFB8y4odJJJJFQvN8=)
                          2: Nqa0Qhn4yvrq5vNhQmcCw7hAdSE.roa (hash: Y5nBa0ULJqBAX+uCNVgjgWDOtFmo25XLO+BS2Ijf5+0=)
                          3: SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl (hash: YVENdbCUduzOoweg8AoHt330+pY/zXcrxiJoRHFX59A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 10:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC29EB919D071916D744665F29341B00A036297
        Validity
            Not Before: Apr 17 04:33:37 2026 GMT
            Not After : Sep  9 15:30:21 2026 GMT
        Subject: CN=F49C525057A5F2379EFB80268997DF0D565AA5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:80:7b:34:42:0e:d7:d1:dc:e6:32:8e:60:
                    41:68:d1:15:3a:4b:a5:91:8c:ea:07:06:b6:bf:3c:
                    46:7a:76:2b:dc:f2:32:23:e1:6c:c7:7f:ae:65:4d:
                    af:22:24:f2:cb:97:ec:f0:b6:fd:2a:79:e1:5d:2e:
                    e5:84:c4:5f:4f:df:87:44:dd:80:34:32:6c:64:9b:
                    d9:d1:74:07:ac:53:fe:9a:6c:2d:ce:1e:aa:ba:97:
                    8d:72:49:e6:14:43:de:12:db:32:df:4f:3a:bf:94:
                    9c:fe:83:8b:98:04:e7:b7:08:ef:b8:d1:45:eb:44:
                    a6:62:82:ca:76:e3:f4:3d:53:0a:22:65:95:0e:3c:
                    46:d9:03:f9:ac:56:21:67:aa:98:c9:1f:49:00:06:
                    94:09:88:d4:1d:48:d6:89:47:6d:61:a0:79:05:34:
                    2d:10:19:b9:69:5a:bb:99:3b:81:b2:75:cb:e3:e0:
                    98:62:13:04:21:eb:be:fa:fd:24:ec:54:55:ee:c7:
                    73:ce:aa:bd:b8:ff:81:a7:5b:26:ba:1c:c9:1e:e8:
                    de:b2:55:4b:b6:b2:a6:65:e9:50:33:fd:50:84:ba:
                    e6:9b:df:0a:72:9d:a6:a8:27:8a:f0:8a:c3:6a:d5:
                    42:c3:f2:5c:cb:75:c3:36:d6:3b:c1:52:14:3d:f6:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
            X509v3 Authority Key Identifier:
                keyid:4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:c9:b7:66:47:22:d1:a1:bc:a1:ba:7e:52:4e:0a:75:68:
         11:45:9f:49:16:02:1a:31:40:e5:25:86:db:2a:33:6a:68:92:
         b8:9d:fa:d7:da:5e:97:c4:54:d0:af:67:22:99:0e:34:3a:c9:
         18:1f:23:6d:36:2d:b0:4c:1d:3a:03:bc:ff:19:6b:6a:1d:d2:
         62:b4:85:b0:63:98:d1:98:16:66:53:0c:bc:cd:b0:df:44:20:
         fe:ae:8c:c9:d3:4e:55:77:90:c7:bb:08:1d:1b:02:57:75:b9:
         44:57:3b:14:cd:b9:99:71:94:7a:c2:f5:ce:56:39:f3:30:a0:
         77:1b:0a:0e:ca:82:1a:b9:c2:bc:1e:3a:0a:25:f1:ba:8f:f5:
         2c:3a:dc:0d:b4:48:3b:2d:cf:a6:cd:ba:bf:2e:3a:fa:d7:64:
         9c:d9:e3:43:b8:96:61:13:20:96:c4:8f:a9:96:43:cc:63:67:
         be:b5:62:9c:f8:22:4d:4a:8f:56:8e:3c:ed:10:9f:52:5e:0a:
         1f:e2:9c:51:92:7d:68:e5:08:41:cb:29:f5:2a:69:6c:22:09:
         89:43:05:35:53:77:9c:ba:4e:72:97:fb:ce:e8:4c:28:b2:4e:
         14:14:ae:72:20:9c:7c:23:d0:7c:54:0d:85:f5:2f:45:27:ea:
         56:b6:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:52:57 2026 by rpki-client