Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
File:                     govRnvqOvlnvQHu3-raJj3VMfsE.mft (raw, json)
Hash identifier:          pdbOeLaThbQp0ajd8abK8kLCd2zgJlSdadT6FalZYi8=
Subject key identifier:   19:94:35:E3:FC:72:37:4E:8E:7A:C2:AD:5B:08:20:DA:50:D3:E8:D6
Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Certificate issuer:       /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Certificate serial:       118E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
Manifest number:          1171
Signing time:             Sat 28 Feb 2026 19:54:10 +0000
Manifest this update:     Sat 28 Feb 2026 19:54:10 +0000
Manifest next update:     Mon 02 Mar 2026 19:54:10 +0000
Files and hashes:         1: F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa (hash: qxhjM03lflZoUJobv28e2CqjaJUBiXRNnEpHgSf1MKI=)
                          2: fAA_7kU5d-eAsYyb4t9T_m-K9so.roa (hash: 0ssxX45r2zal8T5TYsBqjtxaxF/5kSi/C5RnyqK7E4Q=)
                          3: govRnvqOvlnvQHu3-raJj3VMfsE.crl (hash: HJya2RPplaRCsV8mX1jxRzTy/o7pvBKYtoWca1VDxFk=)
                          4: gswIJVnHvj1YUxuz_vWKd1fkfGM.roa (hash: FjCc5t+/MKmt4eTep1SuaHgKfSc3Wo0s0FQ+kwue/H0=)
                          5: zElcDX8txAiKF_nW3UuL27WFm-o.roa (hash: +K7BgWnfJX1+YlJoSHdk6dprDkM4g/+Bv/t19+nc8zA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4494 (0x118e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
        Validity
            Not Before: Feb 28 19:54:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=199435E3FC72374E8E7AC2AD5B0820DA50D3E8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:3e:fa:9b:5a:dd:40:06:17:54:cf:46:56:
                    c6:00:75:aa:0d:85:0d:78:43:77:58:47:f9:72:9d:
                    ef:f1:76:2d:a0:b1:2c:0e:d4:8c:0e:07:0a:26:79:
                    1c:06:fa:b5:0c:58:5d:11:7b:e2:92:67:8a:33:a4:
                    a0:bc:ac:2e:35:35:80:48:80:8b:f1:e7:0a:ca:23:
                    9c:f4:1b:ca:6f:af:e1:a2:1f:69:4d:05:d4:9c:ed:
                    11:75:0c:bb:76:5c:cf:b8:d4:d8:da:f5:58:75:a0:
                    c4:9b:f5:b2:a5:eb:2e:34:4a:a9:8f:44:66:0c:fe:
                    6d:d3:6f:68:ab:c2:88:ed:8d:b3:f6:cb:7e:31:69:
                    9c:88:b0:53:07:b6:7f:85:13:0e:e6:47:a3:33:28:
                    9b:23:ed:0e:ab:62:df:f8:06:e3:8b:2f:a2:0c:57:
                    e1:3e:db:33:7f:ad:2f:7e:39:71:ac:52:fe:62:f5:
                    0e:b4:cd:18:f6:65:1d:e7:c3:8b:ee:d3:61:ff:ea:
                    d8:4f:ca:de:81:48:ae:19:24:47:2d:75:1b:18:b3:
                    5d:46:53:04:0c:21:de:3c:e4:eb:e2:7a:2c:39:22:
                    83:d6:7c:f3:92:af:c4:11:70:d2:c8:da:a9:8d:49:
                    7a:cf:f9:3d:1b:03:b3:af:e8:07:04:9d:22:60:a8:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:94:35:E3:FC:72:37:4E:8E:7A:C2:AD:5B:08:20:DA:50:D3:E8:D6
            X509v3 Authority Key Identifier:
                keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e2:aa:6a:50:78:00:6d:33:3b:f7:69:d5:13:1f:b7:ce:49:
         b0:42:7d:cd:07:90:0c:3d:e7:70:a4:ec:ad:5f:f9:e9:2c:c9:
         21:0c:28:1e:6b:52:60:e9:9e:8f:9b:bc:54:6c:e0:c3:0e:54:
         ab:36:c6:54:79:b5:e4:03:8d:56:ec:6e:16:4e:59:c1:b5:17:
         f7:9e:3b:16:64:98:96:9e:4c:e9:70:88:fb:43:05:00:74:2d:
         3f:f4:9c:a1:f0:9d:54:5a:52:dc:91:fe:b6:93:a2:09:3f:f4:
         4e:d7:4b:87:20:e0:c6:53:a0:fa:8d:01:98:78:87:63:27:4f:
         ea:b4:ac:6a:21:94:51:3c:66:c0:12:a3:64:fb:ad:9f:4c:e4:
         3a:6e:a6:e0:15:34:65:3d:e0:b1:21:64:f3:ed:e3:e5:c2:9d:
         2e:3c:92:69:95:85:bd:6b:30:8b:e1:9d:57:e8:2f:53:91:0a:
         c0:ed:ad:93:52:7c:8f:86:ad:0a:fb:74:d6:68:61:bf:35:10:
         dd:18:cc:f5:0c:51:75:93:5f:96:76:6a:18:68:d7:45:d6:13:
         ca:76:54:96:63:3f:f6:63:72:2b:29:b9:dc:b7:31:96:7b:bc:
         9b:6c:b0:83:05:97:0d:91:13:19:8e:4d:a2:20:a8:54:3a:cc:
         dd:bb:8f:b8
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICEY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODI4
QkQxOUVGQThFQkU1OUVGNDA3QkI3RkFCNjg5OEY3NTRDN0VDMTAeFw0yNjAyMjgx
OTU0MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE5OTQzNUUzRkM3MjM3
NEU4RTdBQzJBRDVCMDgyMERBNTBEM0U4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV2j76m1rdQAYXVM9GVsYAdaoNhQ14Q3dYR/lyne/xdi2gsSwO
1IwOBwomeRwG+rUMWF0Re+KSZ4ozpKC8rC41NYBIgIvx5wrKI5z0G8pvr+GiH2lN
BdSc7RF1DLt2XM+41Nja9Vh1oMSb9bKl6y40SqmPRGYM/m3Tb2irwojtjbP2y34x
aZyIsFMHtn+FEw7mR6MzKJsj7Q6rYt/4BuOLL6IMV+E+2zN/rS9+OXGsUv5i9Q60
zRj2ZR3nw4vu02H/6thPyt6BSK4ZJEctdRsYs11GUwQMId485Ovieiw5IoPWfPOS
r8QRcNLI2qmNSXrP+T0bA7Ov6AcEnSJgqA1zAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUGZQ14/xyN06OesKtWwgg2lDT6NYwHwYDVR0jBBgwFoAUgovRnvqOvlnvQHu3
+raJj3VMfsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tDTy9n
b3ZSbnZxT3ZsbnZRSHUzLXJhSmozVk1mc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2dvdlJudnFPdmxudlFIdTMtcmFKajNWTWZzRS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0tLQ08vZ292Um52cU92bG52UUh1My1yYUpq
M1ZNZnNFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBALXiqmpQ
eABtMzv3adUTH7fOSbBCfc0HkAw953Ck7K1f+eksySEMKB5rUmDpno+bvFRs4MMO
VKs2xlR5teQDjVbsbhZOWcG1F/eeOxZkmJaeTOlwiPtDBQB0LT/0nKHwnVRaUtyR
/raTogk/9E7XS4cg4MZToPqNAZh4h2MnT+q0rGohlFE8ZsASo2T7rZ9M5DpupuAV
NGU94LEhZPPt4+XCnS48kmmVhb1rMIvhnVfoL1ORCsDtrZNSfI+GrQr7dNZoYb81
EN0YzPUMUXWTX5Z2ahho10XWE8p2VJZjP/Zjcispudy3MZZ7vJtssIMFlw2RExmO
TaIgqFQ6zN27j7g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:40 2026 by rpki-client