Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File:                     P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier:          jygL2yjtYZK2W7O2g0NDGEEc9AEhxKwvRyn3w6Psuts=
Subject key identifier:   C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer:       /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial:       029C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number:          0291
Signing time:             Sat 28 Feb 2026 22:54:41 +0000
Manifest this update:     Sat 28 Feb 2026 22:54:41 +0000
Manifest next update:     Mon 02 Mar 2026 22:54:41 +0000
Files and hashes:         1: IErOyzoZVkiS9Uhk0QF6wLDAljo.roa (hash: L6eHFiNuaWY66hK66Hq26PxHIFkjbaThfdmbM18C7cE=)
                          2: NbDi8Af5Gmmz6J7SUj6VheHbgkQ.roa (hash: QshxsuPUbcaWeX3b7o/6+1HYkGZdF5/K5o7k1P2M0uo=)
                          3: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: /gWx9gmF3XvaxoqdPut9OfA2BCKEOwYscc58UJUPvNQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
        Validity
            Not Before: Feb 28 22:54:41 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
                    92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
                    d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
                    f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
                    6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
                    ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
                    41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
                    56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
                    36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
                    29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
                    0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
                    66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
                    d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
                    a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
                    7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
                    eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
                    7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
            X509v3 Authority Key Identifier:
                keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:a3:8c:c1:91:f3:9b:f7:bc:52:2d:7c:8c:e4:e9:a3:c3:
         cf:d5:63:1e:36:77:32:62:51:f2:07:95:6a:6c:77:3c:ca:3e:
         68:b2:fd:4f:71:45:ea:cc:38:64:6b:bd:37:e3:5f:94:0a:b3:
         70:35:95:45:dd:1a:77:9c:3c:89:ca:23:cd:5f:dc:7d:e0:e5:
         59:ec:ce:d0:2f:60:a6:39:49:a8:f1:aa:75:52:64:be:e7:92:
         36:89:df:02:a0:5b:56:b5:12:57:a3:c0:f1:d7:e7:5f:1b:5b:
         6c:45:60:96:c4:76:54:5a:53:09:11:03:53:8e:23:fc:87:a4:
         07:ae:00:ce:b1:ca:cd:9d:35:da:4f:90:0a:79:ae:13:e6:0d:
         87:52:8f:30:63:13:05:30:95:43:8c:7a:ec:5d:6c:e2:f9:f9:
         b8:89:39:3f:68:fa:1f:d8:1f:a5:b5:8d:2f:1c:9b:c4:c2:ce:
         db:9a:e3:50:10:83:5e:4c:8e:82:1c:cd:b7:d4:0f:b4:f3:5b:
         04:9f:4a:33:b0:14:2f:4a:6a:5d:83:6c:e1:de:87:7d:dd:f1:
         27:5c:5b:cc:74:84:23:53:6a:03:73:ab:38:e0:bf:b2:aa:a8:
         b5:a6:cd:ed:00:24:e6:58:2f:d9:7a:e7:e5:6e:d7:fe:43:fe:
         35:bd:04:31
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICApwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y4
NEZBRUQ2Q0I0N0UxMTJGMjRDNkIwMjc3QTQ4NjIyNzA2NzJDQTAeFw0yNjAyMjgy
MjU0NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2MjkzNUJERUUyODY4
OUY0N0EzN0E3NzZFRjY5MUYyRkQ5NTIyQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5b1op0J0UNzuUMem2OZI1GyXea5GrqXU8OsVzcdlHuSH+FCpO
+cS/0h9LBPkexTjlgS9hZdg19FW6F28dq+5gNvmr87lGQlagZc5oF0923rsuzG/J
AN06rUEdr79beO8pXxV5SddTrFZtnLg3JY/2J05U2cqrRjau6q201huyRA5hhKkt
/ilHOP8E44zR54XPjszXhg1LW4ZI1vzNIZbkNAmMoma5Om6ancmpqGbpv5Thd9C4
rdMItStzcQEGSfFAUqPzwEVA1EqgpXGKGdHhpX4VeGZ6BvyYFcioja/STOuD4646
3IH4rM46jMZ0EX2Zw1bIjq9iOq+o/RQJTLsTAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUxik1ve4oaJ9Ho3p3bvaR8v2VIqAwHwYDVR0jBBgwFoAUP4T67Wy0fhEvJMaw
J3pIYicGcsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9T
VEVDSC9QNFQ2N1d5MGZoRXZKTWF3SjNwSVlpY0djc28uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tST05PU1RFQ0gvUDRUNjdXeTBm
aEV2Sk1hd0ozcElZaWNHY3NvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACXFo4zBkfOb97xSLXyM5Omjw8/VYx42dzJiUfIHlWpsdzzKPmiy/U9x
RerMOGRrvTfjX5QKs3A1lUXdGnecPInKI81f3H3g5VnsztAvYKY5SajxqnVSZL7n
kjaJ3wKgW1a1ElejwPHX518bW2xFYJbEdlRaUwkRA1OOI/yHpAeuAM6xys2dNdpP
kAp5rhPmDYdSjzBjEwUwlUOMeuxdbOL5+biJOT9o+h/YH6W1jS8cm8TCztua41AQ
g15MjoIczbfUD7TzWwSfSjOwFC9Kal2DbOHeh33d8SdcW8x0hCNTagNzqzjgv7Kq
qLWmze0AJOZYL9l65+Vu1/5D/jW9BDE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:38 2026 by rpki-client