Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
File:                     4q-M_ZUnD89cLKZdh3d_b7er_TI.mft (raw, json)
Hash identifier:          972wXdhsQlOL9JYjGF783Px2kVAmUV7g4CRUS+7FxxY=
Subject key identifier:   5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Certificate issuer:       /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial:       04E1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
Manifest number:          04CF
Signing time:             Sun 01 Mar 2026 00:54:15 +0000
Manifest this update:     Sun 01 Mar 2026 00:54:15 +0000
Manifest next update:     Tue 03 Mar 2026 00:54:15 +0000
Files and hashes:         1: 4q-M_ZUnD89cLKZdh3d_b7er_TI.crl (hash: dWahsO5o1+eM5bdV6u7Z3C1L7Q6H+BdpyFMibjgWFBc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
        Validity
            Not Before: Mar  1 00:54:15 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5C6AC1CE6BB50E9909738E7361A12CAC5C60037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:6f:cd:62:e4:c0:c0:d6:cf:8a:15:46:04:
                    26:8b:1d:25:3c:5f:32:a7:13:2c:60:b9:c3:dd:55:
                    08:0d:0c:2e:73:fb:9c:e5:f8:eb:c0:11:6c:4d:e0:
                    aa:fc:51:88:83:7c:0f:e1:75:f4:05:5c:9a:bc:0b:
                    bc:53:a1:14:04:0f:be:68:6b:fc:d1:ba:f2:16:f3:
                    10:d1:0f:47:20:72:f8:e2:fb:5f:e9:66:dc:35:a3:
                    b7:94:c3:fa:b3:4c:1d:ee:fb:aa:a2:3d:84:af:cd:
                    ee:df:7b:c0:95:d4:26:e7:f2:a3:1f:3d:16:4e:17:
                    7c:01:b1:45:b7:b7:6a:e4:a3:08:97:77:a0:f8:46:
                    49:09:91:10:f3:3c:f7:f9:ab:57:f5:43:fa:41:ba:
                    00:22:e4:11:d9:ac:eb:e2:67:52:f1:ce:f7:9d:32:
                    3b:a9:73:b4:17:ad:23:04:96:92:09:b5:ff:b1:b9:
                    ed:16:29:e2:6f:d7:34:e2:f7:0d:b9:55:52:06:92:
                    dc:35:0f:68:9b:90:03:e4:10:bf:ec:14:6e:2a:a9:
                    97:dc:5e:f6:66:8a:a5:21:ff:6d:b8:b6:f4:ac:3a:
                    da:9d:d8:d8:82:3e:dc:96:8b:4b:22:94:5e:72:2d:
                    d7:8f:1f:f0:0d:20:e4:98:dd:bb:79:b0:69:12:51:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
            X509v3 Authority Key Identifier:
                keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:43:50:10:e2:56:20:c9:a5:88:92:33:e7:2f:2b:0b:76:
         c7:ad:1c:c5:f3:b0:dd:b3:26:51:b8:1c:10:d0:05:0d:96:13:
         4f:1a:98:41:7a:79:bb:9e:0f:8c:92:fc:70:31:f7:ee:16:c6:
         eb:13:0e:07:ed:c8:9b:13:c8:19:70:cf:21:4c:18:14:12:b4:
         11:c0:73:10:9d:fd:61:45:a6:d8:d9:91:94:2a:3f:ad:80:74:
         92:f0:ef:ab:45:63:ae:5c:41:bf:79:68:97:60:60:a0:23:fe:
         9e:6d:7b:07:73:0f:43:de:dd:44:52:69:7e:7d:d4:ac:e2:65:
         4d:0a:c3:71:3f:67:2b:4c:60:aa:63:5e:b3:a1:48:ff:3e:87:
         1d:5f:7b:94:8d:81:cc:44:cc:f1:98:0a:7e:05:64:55:fe:2f:
         c2:db:84:92:3c:ce:e1:90:14:a8:b0:3a:93:55:c7:94:73:f4:
         a1:2c:60:15:3c:94:eb:d7:a4:d5:f9:fb:2c:e9:61:f0:47:f6:
         ab:cd:1f:8c:d6:8c:b9:6b:04:25:e8:bb:96:6c:26:d0:26:79:
         42:fa:76:a4:84:6e:ed:c3:9c:c8:c6:1c:d5:90:48:15:f1:8e:
         3f:db:d5:1b:40:76:88:e7:33:88:36:07:a5:72:1f:2f:20:df:
         30:ec:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:04 2026 by rpki-client