Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
File:                     5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft (raw, json)
Hash identifier:          AscIb6VckzeM40DnclVRR32MpgMPbqIEbB9IVl8/lKY=
Subject key identifier:   74:7E:63:BC:BD:80:E6:AA:87:DD:45:9B:C4:F7:AA:42:25:C4:79:2E
Authority key identifier: E7:18:8E:27:DB:99:80:5D:79:8D:26:78:F5:BB:76:BE:09:D8:7B:52
Certificate issuer:       /CN=E7188E27DB99805D798D2678F5BB76BE09D87B52
Certificate serial:       DC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
Manifest number:          DC
Signing time:             Fri 17 Apr 2026 23:34:49 +0000
Manifest this update:     Fri 17 Apr 2026 23:34:49 +0000
Manifest next update:     Sun 19 Apr 2026 23:34:49 +0000
Files and hashes:         1: 5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl (hash: GksbxDvQH5kRzDbeSfQ/PT/pT205gwUn0aZrkUsrH7I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 13:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7188E27DB99805D798D2678F5BB76BE09D87B52
        Validity
            Not Before: Apr 17 23:34:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=747E63BCBD80E6AA87DD459BC4F7AA4225C4792E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:81:fd:a1:a2:ae:ac:8e:23:da:fb:44:0b:
                    8a:ad:1c:99:37:ed:60:9a:69:80:23:03:cc:7f:56:
                    d1:0e:18:58:c3:13:e0:7a:e8:b2:70:bc:93:60:32:
                    7a:d1:c9:b4:2b:ed:41:87:ad:38:4e:1a:0e:9c:00:
                    fb:39:6d:b0:72:ea:e9:51:ab:bc:43:5e:46:ab:d8:
                    90:b1:1d:4e:3d:23:ed:76:97:20:af:8a:cf:80:81:
                    60:f9:31:15:ad:62:e5:a1:a7:89:9e:02:85:12:40:
                    54:59:9c:f8:b8:e6:17:4e:71:fb:9d:2d:e2:db:25:
                    26:0d:7b:c4:ab:fc:a1:43:67:b3:1d:9b:9b:09:c8:
                    e7:bd:26:d3:df:f3:a2:7b:8a:6f:35:ac:1e:fa:33:
                    67:b4:13:9b:65:db:97:9e:f4:95:5f:8b:99:18:46:
                    04:a1:f1:92:01:66:9a:08:ca:1d:4b:05:48:de:b8:
                    fb:6a:01:2f:ed:f8:e0:53:81:59:e2:59:e3:1a:ec:
                    49:88:f4:e7:38:3e:7e:2f:52:b4:f6:5c:d8:7f:84:
                    37:c3:8b:2f:d9:23:8a:fc:49:db:90:3e:3b:53:60:
                    31:82:f0:ef:48:69:f3:32:6f:24:68:b3:74:60:ff:
                    74:80:c4:d6:c6:c1:e6:4e:1e:12:80:09:d8:7b:d3:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:63:BC:BD:80:E6:AA:87:DD:45:9B:C4:F7:AA:42:25:C4:79:2E
            X509v3 Authority Key Identifier:
                keyid:E7:18:8E:27:DB:99:80:5D:79:8D:26:78:F5:BB:76:BE:09:D8:7B:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5xiOJ9uZgF15jSZ49bt2vgnYe1I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/5xiOJ9uZgF15jSZ49bt2vgnYe1I.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:b8:4f:4b:1c:86:04:44:1d:a2:92:e2:0a:d6:30:da:d2:
         6e:e6:ee:79:aa:66:18:2c:58:f3:f7:91:19:a3:d2:c3:6b:36:
         2c:a7:40:60:b4:1a:0d:5d:d5:cf:c4:33:03:9b:8f:9d:3b:b9:
         4d:aa:e4:2c:88:3d:24:60:bb:ba:a3:2b:9f:43:d1:44:90:df:
         1c:bd:7f:4f:89:03:15:79:59:2a:80:02:1f:97:26:82:f8:fd:
         74:a1:b2:af:35:36:b5:22:ed:7b:4d:39:81:e7:91:23:a6:e4:
         d0:cc:29:27:da:38:e0:e7:99:d9:e3:d0:7e:47:35:c4:a0:7c:
         39:f5:7e:70:c2:ae:95:8c:62:30:c0:83:07:9d:c0:80:36:ce:
         e1:ec:51:48:04:6b:bd:48:d7:95:ae:4b:e6:9e:87:b5:66:8a:
         02:01:e5:c6:47:7f:bf:ee:50:5a:2c:5c:a9:f5:cc:15:cd:d9:
         0c:a5:92:f0:60:3d:f3:87:fb:0a:78:f2:0a:9c:42:c1:28:50:
         e9:e8:13:58:77:83:11:cc:28:07:d7:26:e7:23:fd:83:93:23:
         d6:c8:06:5a:01:01:49:b0:63:23:d0:86:8f:38:4d:c7:99:1b:
         16:15:0d:07:1e:d3:9b:7c:2e:d6:cb:4f:e9:2e:ad:30:9a:e6:
         8c:b8:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:01 2026 by rpki-client