Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File:                     JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier:          Md7hnyMFtNOey+TTaHKV2+tX5Yf1pkoLiABhvZ2OqPg=
Subject key identifier:   56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer:       /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial:       0568
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number:          0564
Signing time:             Sun 01 Mar 2026 19:22:46 +0000
Manifest this update:     Sun 01 Mar 2026 19:22:46 +0000
Manifest next update:     Tue 03 Mar 2026 19:22:46 +0000
Files and hashes:         1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: 2C3Z3znc/klJDWGf45N6CCzzyw5vtjpt2SUZaRC/qiE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
        Validity
            Not Before: Mar  1 19:22:46 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
                    3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
                    81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
                    cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
                    68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
                    c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
                    87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
                    2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
                    78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
                    80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
                    c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
                    a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
                    67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
                    4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
                    2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
                    b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
                    2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
            X509v3 Authority Key Identifier:
                keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:17:ff:e8:9b:54:62:ce:ad:ef:c3:de:54:3c:73:c0:5e:
         04:6b:02:9b:e8:b8:ac:19:f6:a0:eb:3c:bc:04:78:93:8c:5e:
         dc:7e:ea:2a:6a:29:99:10:6e:8a:ec:48:19:f0:35:70:d2:cf:
         0f:59:60:f7:5e:bc:ea:d2:98:46:ff:5f:c2:57:80:b2:fa:bb:
         ae:47:3c:24:a1:7f:2c:1c:8d:45:c7:9a:20:07:cf:94:4e:e4:
         d4:6d:54:1c:ee:42:3a:bc:1d:17:de:12:88:41:53:4f:13:b2:
         28:c4:7d:0b:28:b7:97:ae:f1:59:35:58:9c:09:83:c9:aa:fc:
         8c:a6:5e:7a:86:90:f6:8e:81:c2:fa:13:13:bb:5e:d8:9f:33:
         2d:ca:33:14:0e:2b:cd:2e:8f:b8:0f:b8:11:4f:c6:2e:8f:07:
         2d:a6:10:d4:8a:d3:d7:e8:b0:3d:2b:42:38:13:13:b6:93:07:
         13:00:cf:e4:f0:53:11:c6:dc:e9:86:b9:ed:28:52:37:15:ef:
         46:d9:b3:10:41:54:de:80:13:42:1d:90:07:7c:c7:86:b8:7d:
         fd:d6:a4:af:c3:2c:b6:78:e8:6d:8f:5b:9e:b8:1a:17:cc:54:
         5d:01:b2:17:bf:8a:da:2a:f4:88:ba:46:ff:6c:f4:e4:5b:42:
         64:0b:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:26 2026 by rpki-client