Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft
File:                     aXl73o0FgfopnY4UIO0pV8Qgigc.mft (raw, json)
Hash identifier:          9NLjc8qIjI24bclYxLeZXAXzdn6Tde1Mc6y6cgm80vI=
Subject key identifier:   F2:BD:F3:F2:1C:BA:42:93:9B:C3:FC:E9:FF:7F:99:7A:A9:F0:78:BF
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Certificate issuer:       /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial:       0DF0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft
Manifest number:          0DCA
Signing time:             Sat 28 Feb 2026 22:53:11 +0000
Manifest this update:     Sat 28 Feb 2026 22:53:11 +0000
Manifest next update:     Mon 02 Mar 2026 22:53:11 +0000
Files and hashes:         1: 1FQ1iHP0Ly5JGWqTLg3j5bwU5yA.roa (hash: QPFclKXerQnJqXhb2BIj0G4llRQMVmeSYVl4gxGTztg=)
                          2: 3UBhVhb0nL1VCV8ooQyBq4whqTw.roa (hash: ZY1+G8RTYLNxd2us2334hcSu/RxuO0OiETFwTEN1i64=)
                          3: CqZDXXKCiUmrL0r5sHOM2SsnlYg.roa (hash: lNOl87iEZzYinUqNMvUxBczb2jf8xp6Ztl9V0nUmOs0=)
                          4: aXl73o0FgfopnY4UIO0pV8Qgigc.crl (hash: KrpgndRjOF7RTIBufRDhgOUXnuNMX81yD1ODltx5ogI=)
                          5: xIcNgKzZoWe1PovY03mb5acHvD8.roa (hash: ofdMq8ibh+Yzgj7tboF2wTROxIJ2/9At9JKYmyv93go=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3568 (0xdf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
        Validity
            Not Before: Feb 28 22:53:11 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F2BDF3F21CBA42939BC3FCE9FF7F997AA9F078BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:fa:e4:f5:1a:10:2d:61:58:47:02:3d:3b:
                    a8:b9:ec:7d:0d:71:56:ec:21:94:50:5c:7a:d7:52:
                    c2:24:c4:b6:ac:77:5f:78:bd:3b:8c:a7:c9:fa:66:
                    ff:a3:fc:54:d7:ae:e3:7d:ac:d9:04:9d:12:0a:25:
                    8a:30:2e:1f:ef:8d:dc:0b:d4:9a:2c:0b:d6:40:f9:
                    52:c7:3c:ed:6a:9b:d5:81:ff:67:27:85:92:fb:95:
                    db:9f:32:1b:01:98:0f:67:e3:10:cc:5e:8f:95:5c:
                    0d:06:be:3d:db:f9:73:00:16:32:3e:37:8f:83:1e:
                    7a:c0:97:2f:7d:0f:f3:fa:de:a3:c2:4f:44:a5:71:
                    d8:05:7b:62:94:28:37:ca:d9:bc:06:8f:e9:e1:78:
                    87:cf:dc:9a:6b:ec:7b:71:5a:8c:00:3e:c6:2d:ec:
                    12:af:ec:15:3a:3c:0c:cb:6c:e0:a7:0f:07:f2:aa:
                    4c:95:ea:55:19:46:61:45:02:d1:9f:1d:de:b1:41:
                    12:94:30:36:09:ec:72:9d:f5:76:c5:bc:49:f3:6e:
                    48:7a:4c:41:72:c2:e7:a5:68:98:fd:a0:5d:e2:e3:
                    b8:a9:49:6a:55:02:36:df:c0:0b:29:a3:df:44:ca:
                    4b:c8:a7:30:b0:b2:87:ba:a3:86:45:04:a5:78:8d:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BD:F3:F2:1C:BA:42:93:9B:C3:FC:E9:FF:7F:99:7A:A9:F0:78:BF
            X509v3 Authority Key Identifier:
                keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:e7:88:e3:7e:6e:0b:f8:51:38:e9:36:14:ff:bc:02:de:
         19:8e:b2:9a:b0:88:fd:86:aa:1b:6f:a2:f9:07:b6:d8:9b:36:
         11:50:88:53:60:b5:b3:ff:92:ae:aa:9e:ae:a1:de:7a:cf:b9:
         f5:84:96:0f:51:22:c3:7d:68:dd:fc:0a:61:f6:04:fe:10:e3:
         2a:f1:fa:bd:13:cc:cb:ce:cf:40:b2:8d:db:04:8c:e6:3a:64:
         59:59:c2:6c:7e:5d:94:f8:b3:64:08:4e:7e:f4:4b:79:26:12:
         9d:48:68:75:9b:43:07:d1:31:25:7c:cd:e9:4d:22:50:f3:70:
         d6:37:42:4f:fb:fc:71:51:aa:55:a3:06:e4:27:cf:79:35:46:
         85:78:bd:0c:89:8c:b1:bc:eb:ff:00:81:42:73:e8:ae:88:69:
         68:d8:8f:8f:cf:cb:c2:d5:dd:e8:f5:8c:0a:42:e5:08:e3:7b:
         b1:aa:b7:80:a2:3f:9f:c0:98:e5:61:76:6d:71:d3:9c:71:84:
         a8:c5:0c:f7:24:7c:70:95:4c:92:de:83:88:07:b4:18:1c:89:
         83:ab:e5:fb:d5:bd:be:41:40:c0:d2:c8:dd:73:88:d1:6a:5d:
         6c:0a:e6:4a:d7:5d:52:83:ba:64:b0:0e:63:98:75:18:f8:3a:
         15:cc:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:34 2026 by rpki-client