Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File:                     JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier:          3nV6U0RyfXnM3/0HUdIAcotMnspp++g8aBipIqSvo/4=
Subject key identifier:   56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer:       /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial:       0588
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number:          0584
Signing time:             Sat 18 Apr 2026 20:03:03 +0000
Manifest this update:     Sat 18 Apr 2026 20:03:03 +0000
Manifest next update:     Mon 20 Apr 2026 20:03:03 +0000
Files and hashes:         1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: 0fmtE7OCmpz3bYRP805L1l1mEVbp6P0QHj/i2ymjM5k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 13:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
        Validity
            Not Before: Apr 18 20:03:03 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
                    3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
                    81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
                    cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
                    68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
                    c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
                    87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
                    2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
                    78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
                    80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
                    c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
                    a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
                    67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
                    4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
                    2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
                    b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
                    2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
            X509v3 Authority Key Identifier:
                keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e7:d0:9a:f0:09:41:6f:58:de:da:66:95:2d:9f:22:88:4b:
         96:eb:2f:1f:9b:c8:5d:66:d2:e4:09:13:f5:26:59:a0:60:39:
         c1:14:81:0e:eb:7c:08:11:01:39:46:7e:a4:2a:18:77:3f:7c:
         ff:3a:06:45:d7:20:ae:47:db:97:f2:d8:60:38:9b:ae:b1:25:
         2c:c4:0a:f3:9d:74:fb:4a:b2:0d:61:b8:b9:c3:b3:e4:26:af:
         a9:70:73:af:35:1b:41:55:8a:f7:17:57:a0:19:74:f1:14:0d:
         4d:fc:19:cd:ca:c4:37:ba:72:b0:e6:70:19:4e:ab:0f:09:e0:
         ea:20:b5:67:d7:d3:5a:79:99:71:b6:a9:14:b0:59:d6:c0:40:
         d8:fb:86:6e:e4:e0:f0:b7:43:d8:f1:ca:4f:ae:1e:67:0c:ee:
         24:72:92:21:5c:04:b2:21:3e:1a:28:da:35:c8:e1:8b:58:c4:
         53:7f:d6:4d:20:ff:10:ea:55:01:30:10:d1:7b:c7:a4:02:39:
         44:1f:9d:75:32:1b:92:4f:66:cf:1b:3d:92:1d:70:b3:79:14:
         de:6c:6c:ea:1d:3f:bd:87:05:d9:78:2f:5e:02:a3:78:10:63:
         9e:f6:be:62:ec:d2:66:20:00:bb:ca:17:85:5c:94:1b:7f:3e:
         ff:23:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:22 2026 by rpki-client