Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
File:                     voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft (raw, json)
Hash identifier:          Aydll9NPIRJh5TY4uuXq+gvxy8r15urCcul4tMY4gYo=
Subject key identifier:   BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A
Authority key identifier: BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
Certificate issuer:       /CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
Certificate serial:       FB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
Manifest number:          F8
Signing time:             Fri 17 Apr 2026 09:16:47 +0000
Manifest this update:     Fri 17 Apr 2026 09:16:47 +0000
Manifest next update:     Fri 17 Apr 2026 15:16:47 +0000
Files and hashes:         1: Vo0vQFl-YSprpWfMsXwLKw54iQY.roa (hash: cJvpln4Oh1vDxWiT49SXjpKmSRirnpk1kEPNrtQLaMQ=)
                          2: olRPEWlfrQ15OikVZmtjxH-5CEU.roa (hash: ZfgR+4tM+Ak+euNUopEr5CUJ1nqnV8hPV4D1NB/T++c=)
                          3: voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl (hash: H3BHdCmJh0uGwbJn6iMS7p7t+d+LMVl2E3iSgcgJH8M=)
                          4: wukFEv7SxYMTCpHl1xMZaKw7UIg.roa (hash: Go/WKcFAIp1nWMSvLyyotdpg3w0I/a2SuG9y/9UmA+E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 15:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
        Validity
            Not Before: Apr 17 09:16:47 2026 GMT
            Not After : Feb 24 15:30:19 2027 GMT
        Subject: CN=BC6A8D3265E57CE79D9C0B2CE807E8B75A090E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:a4:4b:ad:13:33:aa:a9:37:01:2b:13:ac:
                    08:0c:4b:ed:4f:eb:19:ad:d5:0e:2b:7d:0e:af:64:
                    40:4c:f7:c2:cb:b2:3b:e6:ed:e7:57:95:5e:27:1d:
                    2e:40:a0:2d:a3:36:ed:f1:d0:9f:f3:a1:99:e0:19:
                    aa:7b:f6:3c:e1:3d:e3:7e:d8:22:56:43:e5:9b:80:
                    77:db:a5:08:42:e4:53:81:f0:bb:b5:0f:90:15:ac:
                    30:28:f6:d7:7b:b0:e8:0f:6b:24:b8:8a:87:4d:c7:
                    26:74:89:64:9e:11:c2:16:17:d5:34:44:bc:7b:f0:
                    b9:de:16:d7:54:95:15:d0:6c:c9:3c:95:c6:39:9f:
                    81:82:a8:00:b7:e4:20:d3:04:fe:a1:a6:a5:2e:0a:
                    c2:68:d8:ba:2a:b9:65:33:cf:b7:21:f2:d9:87:3d:
                    fa:87:ba:8d:15:0a:55:e0:34:c4:7d:93:fd:f4:da:
                    36:94:09:78:d8:2d:41:a9:d3:4d:72:5b:7d:38:5c:
                    f9:8d:ac:4c:24:6f:0a:ac:c8:3c:89:5b:af:04:74:
                    5f:fd:4e:ee:5c:61:74:7e:65:0d:7a:67:9a:2d:47:
                    ad:24:a6:8b:d9:69:2c:13:4a:5e:2b:2f:a7:c9:87:
                    47:b6:bb:3c:2c:5a:39:2f:b1:4d:d8:e2:97:1d:ed:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A
            X509v3 Authority Key Identifier:
                keyid:BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:a4:49:81:a4:b4:a2:b8:b6:ad:5d:e8:66:f4:2b:2a:b3:
         d2:3b:b7:b3:cb:84:f2:36:9c:bc:2b:c0:30:df:97:9a:8f:d0:
         bb:aa:4b:3e:04:6c:06:f8:af:df:f0:32:dc:89:3a:f9:ad:48:
         47:4e:08:ca:99:74:11:d7:55:32:bc:31:67:b5:f4:49:87:39:
         14:2b:b3:d7:56:f1:21:1b:99:3a:e1:44:1c:70:7a:f9:7f:08:
         e1:a3:86:bc:d3:59:f4:bd:71:12:fa:5b:ca:6c:da:de:5f:c0:
         50:1c:f5:dc:b7:38:5b:06:fa:26:07:81:87:de:8d:f9:8c:3d:
         8a:b5:b4:b1:76:41:f2:27:e8:8f:8c:8a:69:5d:4e:e6:7b:d1:
         16:eb:56:7f:36:ec:f1:10:22:aa:67:d8:21:20:f3:de:28:88:
         9c:72:b2:4c:64:58:02:53:d4:cb:f0:31:2d:2b:8e:11:55:82:
         73:e3:b3:ef:77:16:f6:3b:54:89:6b:5d:94:d8:85:dd:5b:ee:
         23:31:f0:49:df:75:f2:05:d5:11:87:85:d1:fa:c4:e4:f4:4a:
         6f:6d:a1:39:c1:52:d4:63:6e:1f:f6:a6:cf:3e:a2:31:7e:14:
         52:b2:fd:bf:f4:14:9d:94:f7:39:b8:30:e0:98:1a:f0:a4:98:
         65:a2:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:39 2026 by rpki-client