Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
File:                     FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft (raw, json)
Hash identifier:          1Vk/e6rvlNUnd/TQZAbNWQjNtv/cv6nJqK00+nwwypc=
Subject key identifier:   3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       21E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
Manifest number:          212C
Signing time:             Sun 01 Mar 2026 14:24:04 +0000
Manifest this update:     Sun 01 Mar 2026 14:24:04 +0000
Manifest next update:     Sun 01 Mar 2026 20:24:04 +0000
Files and hashes:         1: -FjQAAx8RqmGsuuWgV8GriaTqdA.cer (hash: 7fBHjkwz+xTQ5R9UTOXziZ4IxoHNKngDjHFp/zhmzus=)
                          2: -LpWsmh9Hq3rL6QNGrzpZB50HV8.cer (hash: uEV02oi4Z+hUshc9EzcBJPn+u4gJlJA+gyoVEk6MGnU=)
                          3: -cYtwWoyWUFWZBQsknjF3cTYKZ0.cer (hash: ywfdEj+Yk3Z6ID7Wrp9nNufKgSnlh9bAOTVti0Ol1Bo=)
                          4: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (hash: yhqx5aoY8Ej94KL9wwFK6mXGO6l8qpp7wPCO8nolxjI=)
                          5: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (hash: nexRmy5/bQJFb2V8FIxypQef5GfYLYhEi/0oJdGeqUw=)
                          6: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer (hash: VNXF39KG+5jjD9RS33y3lfZVCn81ClJMELr/+EXM3Cs=)
                          7: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (hash: KSBEMqsItMW0r+tHkOWPcUdFirEhhSy2vXWIDyXvAdM=)
                          8: 4hRiP9Epy5cnQNOR2vORlvKt8r0.cer (hash: qNrSamdbvyJkXoAusTFMq/3rTRTiPKYEY+JiJV4QDpo=)
                          9: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer (hash: Nv7RozPl2W3h5PVNMX7HjIxMmMdv3PdcWC3bw5YR8Z0=)
                          10: 7hlBw3vR4s8SUS-YqzZsKdp5txg.cer (hash: jOru5uhvTjYJ+VOAoq8HPugodPABYQ7zUFv/dd2b8HQ=)
                          11: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (hash: CYV8Frr84MYU894Dyx4QOlgt9lD9TehTTTBkOT5Zw1s=)
                          12: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (hash: HDajoSf0TQTZ+mOA7S8GnRKeuagkAgyvvGpP16qZIds=)
                          13: B-NqPSGaivyE-IswVT5jjObCzs4.cer (hash: YNA2UXCPy8beUxRPrsDc++z8wRG0Y+K+uaNG9Lm6AiQ=)
                          14: B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer (hash: RPMsq1F3THUSIMJMDDipfcds9OZLaD0rRJQMAjvmDYw=)
                          15: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (hash: RPUcg21H+fDf53OSUzk9bhmuEcwlVD/x2Zu9FtTVA1M=)
                          16: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (hash: au91Y0fH+512SPK7Hud8riJXHqmCATVR7eVHRDobom0=)
                          17: FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl (hash: TW4SaajbdHqpL9m1urBFgeM5LMpScqdTZfPsN03kqfM=)
                          18: GBM8moK2QouL539igE0i4hikV0U.cer (hash: KDM6htbni3I02ll4ujKzrB+veG9B1cUmsrwvc861xSA=)
                          19: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (hash: yBCm6qecmSqMYHmPM4/3KKkk+PYl9pazdKSWNfYc8e8=)
                          20: KUthydo1hCdBgvogr4Ym4a6oHzI.cer (hash: Y50nmoOe2JtYSM72jd8E7Hha9iYRls8cCm/U0hy/zSI=)
                          21: MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer (hash: /QhBtpvGxgUxktFQvct3tHBGnXweuxGpXAuGkG0ETUU=)
                          22: N5n7efOuuEUWoQOON9L4rDy2Z8k.cer (hash: G5xqaPyVr39D+eKN9gl51U+mXlYR5gyjxhu34I8YC7M=)
                          23: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (hash: x93IP88K9IRdkuZkwpqNu/ZQe9UrKBOWUS9N9UmGxXk=)
                          24: OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer (hash: kLzMoydcNDKc6DHHeEMjRcN6KasZRUw8P7VlWGEjObE=)
                          25: Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer (hash: soJBY6n+hUgPjA3rU5m9eWDvmY3p0Wg0FlqEYsEw8BM=)
                          26: QJHbWm6gO3YPVOCQy5CYc64z9kk.cer (hash: 1KQYpzBVi9Rb9CMHZIcKQAyXPfULRF1NPqrGw3KtzNI=)
                          27: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (hash: 8lAEyw1wAnEhY6qgGJt9J/EVC8MsOWYriHL1G4ne7GU=)
                          28: RPjc9msltxkFbR7WXBbqklflVT0.cer (hash: 3OlvTiszrrHdEd6wF1OrMiTV5y5900tHgctOtIxCdII=)
                          29: RUwtAMcuK1O0J_30WpO8Vn5AQOI.cer (hash: PEJFLEWJ5R9SCmZWcsV5xtYfJXmKyAsUVf4mM59LcRU=)
                          30: RXsQNypobj_3Nla-tc0968kyNxo.cer (hash: cFX5yI9edbvCeFtvTN9kuOlhoQWKtKBVsUQFq4xBk14=)
                          31: RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer (hash: vY8lnUNVl6/M9+6rX2Aw2e+fy0H3E7V65QLY3tIzeRU=)
                          32: S0bOj4AxurdTZNpb2YHoiFBPtBE.cer (hash: aPVcA28tELOSzRJLJlVHB1Ii1cVIX/sok8akwIhyEHE=)
                          33: Sf2Bm9rAFmK3PqyQBQiM1qO4h2I.cer (hash: C6qyqRUBZsAt8iaP2NYrFN2JzO3JfYPmtPopoCGZ2T4=)
                          34: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (hash: R6akF54h63+yXmcuwW6mPQM4t3rXkfpxL/4KxUgq8HE=)
                          35: V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer (hash: ihFffjfS+gV99NIsd34Lhl+fiFjYR+177oj79Rh5Sn4=)
                          36: VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer (hash: r941S1NP/Z4yLFf5b23Ekk11w8FV1/7o76n4R87x8WM=)
                          37: Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer (hash: Q8NQ9rNFokPvm6izz4vpaMZPkJTFt5wZOxddQ0RGVv8=)
                          38: WHbkuN-qIkwBnSRpMfw816T-7So.cer (hash: ODO8yah0cnKLOQR+PP7IY4c7g5F6iFIg0sLHuC8Be7A=)
                          39: YDE2zKT7QFWfL3V3jDicnQLCP0A.cer (hash: 6vmr9kQ/+34a+dbqlUgN5nRz4PwRuTxm1L//BdXUj24=)
                          40: Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer (hash: FAOgsHlCvs8bW9tRsYT2Hs9bK4HKoxizh2UGwIdbFAQ=)
                          41: ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer (hash: Sk5scS+SEI4dLYIutfFe2Bfy3bCgTHK+7xuyKUE04hw=)
                          42: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (hash: HqEjbIacwPkiZN6Q1HIt1suTMUH58CvGA1YQJiYg6Jg=)
                          43: b-yuhG9BvMOyThMnuiHCMFPhHAM.cer (hash: q/IxsRvrwU0pSSOKbXaJ0+U5t0DzAEXEGP4LuaILhYQ=)
                          44: b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer (hash: rbbdY6J9cMTXChw2xBXgXI3Ny9EyDR4VQUn9e117S+k=)
                          45: eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer (hash: WUCq7/+/emk3HQOP4Qybx8CtIX8olZIQIJGxbAUZymY=)
                          46: faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer (hash: rNKoUWe2bIS8BRJu/icLEszT7vPRsVY725VGuMX3/+I=)
                          47: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (hash: ua3+RhPo3thsg3YE3LsOBPMFRxbU2eL1WCrxV/a0VIE=)
                          48: ftgwlnECe35vya4nucaMnE4pxXU.cer (hash: jWspf2A/54dNH9MOy2RqsfW/NX8poFVXH8FULeaqqd0=)
                          49: lle2DWn8KCKE7gt1fS6_azqFWiA.cer (hash: hQR6G42/sAUpjgWZD2ai/52b3u9zp9s8wCwqb0yvzTQ=)
                          50: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (hash: EjljqwObOUK8qL3voAz5zuRiOW+WsTSXO3pWu5W/TQ0=)
                          51: tKZaDrhmkhnEGFRC1J_J1vgltmU.cer (hash: 4GP25A2ABl2eBm8A5Q7CHwcBZvcDrQSOlsFlgisZNIQ=)
                          52: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer (hash: OjsAr4mtoqHS8UUht2UPJvkw9p90qSC+cmvuhXRhZs4=)
                          53: x1hCDPdi5IrXyqYOs53NYisftPY.cer (hash: 9e6Fe8OwV++RwQcfAVSTQ0TPqnZoys/3B73Mp30Gs/E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Mar 2026 20:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8675 (0x21e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Mar  1 14:24:04 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=3CE3DF617BEA5D05792AF99707A7FD2C2CCD9172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:ee:25:61:32:a6:5d:0e:04:37:32:5f:d6:
                    12:41:14:61:6d:c2:98:d3:de:c8:01:8e:72:15:6a:
                    91:83:f2:e4:91:ef:94:48:d8:2b:66:18:29:ae:e4:
                    2d:05:bc:86:8b:5f:b9:cb:3c:e4:bc:9e:6b:6c:b4:
                    b7:92:23:a6:28:14:98:44:9e:1b:b1:2a:4f:e3:09:
                    8a:83:ad:04:cd:6d:01:d6:95:3e:e4:d8:bf:db:86:
                    13:70:fe:8b:db:c8:29:57:61:29:fb:10:13:c4:18:
                    59:68:50:fb:a1:ec:df:0d:33:46:92:90:9d:9b:7e:
                    c9:db:02:06:a8:73:4f:d9:fb:13:6a:b7:c3:c2:0f:
                    ae:b1:4f:fa:37:fd:a8:59:2d:13:62:b3:52:de:b9:
                    3a:9f:48:6a:ac:f2:e4:77:83:38:83:2d:6b:c2:0a:
                    b7:e4:63:c9:33:82:fb:1c:06:6d:4c:2b:c8:09:12:
                    a4:ba:fa:3a:59:36:b1:c4:46:a3:92:e2:64:33:c9:
                    6c:9f:aa:cb:1f:da:86:13:ea:b7:fc:0b:30:c1:3f:
                    a0:4a:9b:cc:66:93:da:86:20:96:ec:20:78:e0:10:
                    1e:3f:82:b4:61:c9:8e:f0:93:19:61:f9:a4:d7:ae:
                    f7:e4:a6:db:39:65:3f:43:e5:b0:cc:30:bb:4d:aa:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:51:42:bc:45:15:7a:a3:b9:d9:3f:1c:5a:a1:d5:fa:5b:bb:
         42:e2:94:1c:6a:92:48:f2:2f:65:45:c0:97:14:4e:f7:63:6a:
         d2:e4:52:91:d5:61:ea:2f:fd:75:1e:ea:0a:5b:12:1e:5a:76:
         45:66:79:c3:14:d2:8c:0f:5d:89:54:8d:e1:75:00:8b:4a:63:
         e7:0b:47:ec:22:e0:9d:eb:d1:c8:50:ef:19:97:73:0a:6c:a5:
         26:5b:32:9f:24:a4:a3:68:3d:b3:93:94:4c:c8:da:f5:84:68:
         d6:a5:24:d9:86:2b:ad:13:f5:5d:c8:70:44:4b:03:84:c2:6e:
         e1:60:87:36:55:9f:5d:d7:9d:e6:75:f2:2f:8d:ac:91:f7:25:
         b6:1c:46:9e:73:32:e1:53:0a:b8:48:ce:20:80:26:84:40:de:
         d5:19:7a:ff:46:bb:f2:bc:b6:65:6d:d7:c9:78:58:fd:72:b7:
         ce:fe:1b:00:9b:fb:d5:45:ff:30:da:8d:3c:f8:74:36:81:84:
         84:d9:bc:9f:b1:b3:0b:7a:ba:fb:d6:a8:c0:28:68:13:08:f2:
         8e:bc:b0:5f:49:4d:7a:7f:60:62:91:78:3f:20:d0:7a:58:2a:
         a6:09:76:d2:01:a4:05:af:23:15:db:5b:15:02:7b:0e:65:4e:
         d0:ee:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:38 2026 by rpki-client