Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
File:                     IsUSmNl6ECkCcx_cSb36s51Sqys.mft (raw, json)
Hash identifier:          xvrfaRA8lpMrVnztcI/OK6rQ1oCoU65/2E0BQH6HC7w=
Subject key identifier:   90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Certificate issuer:       /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial:       04BA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
Manifest number:          04A5
Signing time:             Thu 16 Apr 2026 04:33:04 +0000
Manifest this update:     Thu 16 Apr 2026 04:33:04 +0000
Manifest next update:     Sat 18 Apr 2026 04:33:04 +0000
Files and hashes:         1: 0c7mhw6wAI4CpRn1Hkyr3qb_5A8.roa (hash: vvB1FnDct6Ng/cIwpuOjmo9jsB5UGapjKebxfGVwDMM=)
                          2: 0mcwIl3xugeY7yYklmRRDrXtqUE.roa (hash: 4w4MyvoJOOzT6ryqc4UxEV1YPPBO4mkDDZbpp5saUsk=)
                          3: 2hDC2uRlzDb2lONQVJNKJYiemRc.roa (hash: PrE2A13rXu1Rw+WqjYL/5mhc+wnL8bhlRTDIgACgB74=)
                          4: IsUSmNl6ECkCcx_cSb36s51Sqys.crl (hash: OrDM38w5L5ik0bJWVlAGKMiXjRo+0OmVoR7s484ITj8=)
                          5: JH6qYgr3IAtOHKp_ITUCtiVXPbg.roa (hash: t95JaeX8j8so7N/rz1IBxOAXiQjGybTGN016LbMGzTw=)
                          6: nYkwyKHN8p_SfZ_jL_yEK5bTqCw.roa (hash: kevMel0s/kT5hNYlRQz2o0sjapSR+CQ4iaaIDSwmuU0=)
                          7: nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa (hash: fclIkSTECSk8GNoe6PnsG3XKY/t9UJJdEsw0zNRyhbk=)
                          8: wXNpkQmppBLq9rEzWKeNcufQD5c.roa (hash: JzHJvlWAKUiHUSiGJ9aqb6u+Fg27yeo7K0QNZZFGOVE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
        Validity
            Not Before: Apr 16 04:33:04 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=909EA4E6273D85BE138CCDABC3E0C016F03930DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:d6:62:d8:73:41:fe:f5:98:39:77:cb:58:
                    c3:45:24:7c:ad:91:c7:3e:22:28:90:28:89:bf:76:
                    1f:28:22:21:fa:e0:5c:d0:f2:2c:28:12:ef:40:44:
                    f8:0e:70:58:7d:9d:99:bc:ac:a4:76:78:8f:d9:9b:
                    d7:99:94:06:7d:e4:01:11:3b:30:3c:88:f0:83:f1:
                    07:85:55:b3:16:a5:54:32:e4:25:26:2b:f7:44:ef:
                    57:7f:db:12:b8:60:80:4c:52:6b:ea:b0:4e:55:96:
                    0f:ca:62:51:71:e4:09:27:7c:39:7e:92:c8:5e:23:
                    9b:4f:0f:f7:14:08:46:9b:bc:22:30:9e:5f:28:d8:
                    11:85:a4:fe:94:2d:c0:76:03:f8:08:85:c4:bd:62:
                    a5:92:88:9b:18:f9:d2:5a:dc:e7:ea:67:72:27:1e:
                    c0:fb:12:5a:69:e8:89:84:e7:f6:0a:42:56:be:15:
                    86:03:7b:48:62:ce:eb:f6:80:d8:8e:ec:4a:7f:b4:
                    c3:c9:12:ab:61:dd:b8:ee:25:a4:83:4a:d0:35:6c:
                    61:bf:89:21:dd:45:eb:ee:c6:9f:73:4d:94:9b:9f:
                    18:3d:f7:8a:a9:25:b1:95:c3:88:e3:83:ae:b8:79:
                    50:2b:79:21:d7:cb:c3:18:3b:8c:ab:d0:2a:cc:4d:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
            X509v3 Authority Key Identifier:
                keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:bc:78:4d:2b:df:3c:89:cd:24:fc:92:c6:27:7a:67:4c:
         7a:ec:87:2a:b2:d3:4e:c6:3f:fc:64:d7:60:4b:73:dd:42:75:
         bd:40:0d:b6:7b:75:56:ec:f3:c5:62:b9:70:d4:03:52:3b:a9:
         33:9d:ea:7f:12:cb:fd:6d:8c:fe:35:66:ec:94:3a:2d:24:c8:
         4c:46:f0:ec:f2:20:15:73:f0:c2:c2:a3:75:02:73:32:13:fd:
         00:35:d4:e3:82:16:ab:80:45:da:71:b0:f9:44:52:cb:75:15:
         7b:d4:4d:de:15:b5:b0:ee:ec:10:f8:27:bd:d6:c5:0e:bd:00:
         a7:1f:b0:5c:2b:23:03:6b:e2:4e:cf:38:d7:d1:9c:fd:86:62:
         8d:8d:43:e0:f8:f3:5a:65:a8:e4:25:ea:bb:2c:00:86:16:38:
         e1:80:6f:12:5a:cc:97:7c:ed:1b:31:42:4c:9e:9c:91:8a:43:
         c6:4a:d2:6e:c7:b1:06:fd:04:15:30:55:6f:42:3d:0e:ad:fe:
         fb:0f:1d:ba:6b:e5:37:d1:4d:76:e2:95:81:0e:fd:01:f5:73:
         40:fa:3e:80:39:9e:9e:16:57:be:07:d4:fb:6b:64:53:9b:09:
         de:d2:81:24:44:a9:90:01:90:1f:6d:91:12:86:c8:2b:e5:36:
         11:41:33:3a
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICBLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjJD
NTEyOThEOTdBMTAyOTAyNzMxRkRDNDlCREZBQjM5RDUyQUIyQjAeFw0yNjA0MTYw
NDMzMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwOUVBNEU2MjczRDg1
QkUxMzhDQ0RBQkMzRTBDMDE2RjAzOTMwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCspdZi2HNB/vWYOXfLWMNFJHytkcc+IiiQKIm/dh8oIiH64FzQ
8iwoEu9ARPgOcFh9nZm8rKR2eI/Zm9eZlAZ95AEROzA8iPCD8QeFVbMWpVQy5CUm
K/dE71d/2xK4YIBMUmvqsE5Vlg/KYlFx5AknfDl+ksheI5tPD/cUCEabvCIwnl8o
2BGFpP6ULcB2A/gIhcS9YqWSiJsY+dJa3OfqZ3InHsD7Elpp6ImE5/YKQla+FYYD
e0hizuv2gNiO7Ep/tMPJEqth3bjuJaSDStA1bGG/iSHdRevuxp9zTZSbnxg994qp
JbGVw4jjg664eVAreSHXy8MYO4yr0CrMTYOhAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUkJ6k5ic9hb4TjM2rw+DAFvA5MNswHwYDVR0jBBgwFoAUIsUSmNl6ECkCcx/c
Sb36s51SqyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DUlMv
SXNVU21ObDZFQ2tDY3hfY1NiMzZzNTFTcXlzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9Jc1VTbU5sNkVDa0NjeF9jU2IzNnM1MVNxeXMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTUNSUy9Jc1VTbU5sNkVDa0NjeF9jU2Iz
NnM1MVNxeXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgy8
eE0r3zyJzST8ksYnemdMeuyHKrLTTsY//GTXYEtz3UJ1vUANtnt1VuzzxWK5cNQD
UjupM53qfxLL/W2M/jVm7JQ6LSTITEbw7PIgFXPwwsKjdQJzMhP9ADXU44IWq4BF
2nGw+URSy3UVe9RN3hW1sO7sEPgnvdbFDr0Apx+wXCsjA2viTs8419Gc/YZijY1D
4PjzWmWo5CXquywAhhY44YBvElrMl3ztGzFCTJ6ckYpDxkrSbsexBv0EFTBVb0I9
Dq3++w8dumvlN9FNduKVgQ79AfVzQPo+gDmenhZXvgfU+2tkU5sJ3tKBJESpkAGQ
H22REobIK+U2EUEzOg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:00:45 2026 by rpki-client