Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
File:                     FlSV6NMn5PYtWhZDjwgOYIo00NM.mft (raw, json)
Hash identifier:          mvyDiOTd7Ny924Dwr8RXUDbiuy11c13A8CluxxYZkYM=
Subject key identifier:   99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       104F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
Manifest number:          0FEB
Signing time:             Sat 28 Feb 2026 22:52:45 +0000
Manifest this update:     Sat 28 Feb 2026 22:52:45 +0000
Manifest next update:     Mon 02 Mar 2026 22:52:45 +0000
Files and hashes:         1: FlSV6NMn5PYtWhZDjwgOYIo00NM.crl (hash: hYvEG9Sj4pHnprfhaIMIg6pv0zKk2eNG8i5kNVJ3yLQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4175 (0x104f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Feb 28 22:52:45 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99D7C86BB0179CECBF7C47167DEB75FC584B5EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:5b:82:e1:af:76:2d:70:7b:83:b3:1b:fe:
                    d5:a7:03:88:12:99:d8:a0:5f:eb:85:dc:43:97:fd:
                    38:f9:af:00:7d:ce:15:42:9a:4b:71:ae:96:68:f4:
                    0c:92:af:88:f2:85:e1:66:7c:39:90:53:f4:1a:8e:
                    0e:a1:c9:3e:13:ae:d3:54:8e:40:ac:55:15:87:ea:
                    b6:82:a1:ac:e4:ae:e9:34:b5:cd:5d:87:87:b4:b5:
                    79:4f:13:0a:cc:b0:7a:bf:8a:53:86:0a:e8:db:54:
                    88:39:6b:aa:36:35:39:a1:a4:b8:3e:4e:78:8a:34:
                    cd:98:d5:30:08:b1:cb:10:10:45:b3:24:e0:f3:06:
                    f8:44:8a:c5:c0:5e:a9:42:d2:48:fd:82:a4:3d:b2:
                    58:e6:39:f0:7d:b2:0c:e5:bb:e8:12:2d:ca:db:35:
                    3c:20:5b:15:c6:0a:d9:23:0d:6c:d0:58:75:77:fe:
                    c3:cf:46:58:bd:cc:37:03:95:8f:2e:fc:21:d4:13:
                    50:1b:dd:85:9e:15:c5:38:fb:cc:1e:31:be:a2:f1:
                    a4:79:af:c2:a0:28:64:fe:5b:e1:97:93:3c:51:9b:
                    12:63:f1:ce:bc:c1:bd:ed:c0:f5:a1:7e:67:24:c7:
                    8c:7d:91:38:e5:31:8d:fb:1a:51:7d:36:dc:72:54:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:3b:28:94:68:6b:7e:e8:b2:af:dd:a5:2e:da:4e:1e:92:
         55:6b:f0:14:ab:39:94:db:59:60:6e:44:e6:dc:10:f1:16:2e:
         ff:20:b0:33:95:a2:4e:b9:7e:0a:5f:a1:83:c2:0e:cc:fe:fb:
         62:79:22:82:8d:c4:11:65:75:2e:ea:e6:8a:a8:e0:fc:bc:68:
         2a:bd:f9:6f:08:20:42:11:99:29:51:31:5e:f8:4e:64:18:c3:
         c9:3b:57:d4:b0:c9:47:76:d3:d7:96:e6:19:78:11:99:4f:86:
         63:5a:31:96:83:5e:4b:61:a7:8a:7f:a8:18:7a:1e:73:40:02:
         49:fc:b9:16:0f:9a:f1:6b:e4:f9:de:c3:99:98:ec:c9:46:fa:
         46:9b:49:e2:f7:fa:7a:38:d9:5e:fe:01:1d:c0:65:7b:08:e4:
         70:07:17:29:6d:e8:47:cf:10:3a:f6:da:64:1c:f6:ee:5c:bd:
         10:00:e1:de:80:60:dc:cc:fc:12:b3:d6:e2:40:30:7b:3f:2e:
         ef:c4:fb:07:20:07:37:90:49:b7:19:c0:ab:39:31:85:93:b9:
         77:58:49:07:c4:ae:18:7a:07:b1:c6:b0:84:b7:72:cb:84:13:
         bc:5c:ad:88:d4:b3:fc:0e:67:79:e0:48:50:ff:04:d0:8c:10:
         3a:e9:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:46 2026 by rpki-client