Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
File:                     Nf-QMGtHp94DB_DjNbTcfyfepPs.mft (raw, json)
Hash identifier:          VrizX6beh1uLzViYGGdcODqkA3Plos212OrQSOEStGk=
Subject key identifier:   E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
Certificate issuer:       /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Certificate serial:       02D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
Manifest number:          02B0
Signing time:             Sat 18 Apr 2026 09:34:03 +0000
Manifest this update:     Sat 18 Apr 2026 09:34:03 +0000
Manifest next update:     Mon 20 Apr 2026 09:34:03 +0000
Files and hashes:         1: 4L30LnOQIS99TlCPOUpwEFLfEQg.roa (hash: yWCDDFR7pLNm/S7nzB+Bwx+TZYuB7g0e+ipjO4ErgF0=)
                          2: 5pHluZOCvmCnma3oGF8YHhIrmWE.roa (hash: 1uJrZLpcghEn/31+TQno69AakJlARhPv2cfKSe25le0=)
                          3: 7sWHqjtuFZF6vfze4cooKQTNG84.roa (hash: zNpZoBqha6lP0xYX43TwKvMCr3L1XS7tZ2T4cGBMoy8=)
                          4: Nf-QMGtHp94DB_DjNbTcfyfepPs.crl (hash: NeS22yKRCi6C6zG/tPhOHOAQeK/8AyIuDgEWLPYN2/M=)
                          5: UvtueMrLc5JR86hFNcyL82bBAeY.roa (hash: h68S4ml8LxhHUpTxXv6A1JFJ0zEZaOkwhLeU7V+YXmA=)
                          6: c0Ik_Jn94TXCYMWdYjn7JtoC3BI.roa (hash: DF1/43/z7g5lo3B0Xvgg/aHRFlmr25fzJwBLpiFz6CA=)
                          7: dUMVw1KtS1rD4iHpZduTfFnnmG4.roa (hash: Ua58WYzJMUq4ppF9jBMRvqNZ7v0BrHCdT39gbN4zhc0=)
                          8: fAvqcJePLbE6lDivhviBuoC2Y-o.roa (hash: 2FqppnZlc8ZzofcCwbHjuYS2u/jDxDh09cDGWJCFHFI=)
                          9: mxp_3m8tdAasVqTRgLSJiv2kR2o.roa (hash: Ea+c9GOpiuo2YrSSdaYmgo9b3b1GlkKAYFnbeZ66bxI=)
                          10: n-TI-E3bbOd7GVkIKr1DEYB2xFs.roa (hash: FaU8z81QSL63TUEPpQjz5l6hNIIJ1BMnSe7E5BzIKu8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 08:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
        Validity
            Not Before: Apr 18 09:34:03 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E45532861649BCA1C67E7545CEB5F894BDFFD091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:e2:59:25:3a:65:d3:1b:58:67:35:c6:95:
                    6d:d9:b4:cf:c6:2d:2f:a9:6f:b5:c0:e1:57:79:27:
                    dc:7f:bf:58:a4:09:08:98:40:53:e2:93:cb:e8:a7:
                    a8:27:c3:a2:99:fc:94:69:37:5d:bb:21:29:27:db:
                    10:55:98:76:0e:de:ac:05:5b:12:02:61:1b:cb:7a:
                    3f:9c:e7:6d:24:03:01:56:56:ac:04:e5:f9:07:0f:
                    ce:fb:c2:e5:e2:12:ba:e4:37:24:3c:f3:44:b8:94:
                    a1:9d:c1:dd:5e:fb:93:93:60:3a:96:f0:1a:52:0e:
                    02:f3:6e:02:41:97:1f:e6:75:89:fa:81:91:fa:15:
                    2c:f3:6d:39:ff:17:d5:7d:4f:60:54:2d:92:9e:d3:
                    5f:a6:e3:a9:73:9d:7f:33:ae:1a:09:4f:8d:3b:9f:
                    96:bb:bc:b3:ff:ba:42:09:27:cf:ff:85:56:19:e3:
                    31:5b:99:6a:ca:61:0a:2e:64:94:9d:8b:a5:fa:58:
                    50:b5:46:51:d2:e7:01:3e:1b:04:fc:4b:37:ff:3e:
                    16:d3:02:e5:e6:24:e7:b1:47:b2:d1:0d:ec:50:ff:
                    13:d7:66:76:a9:fb:5b:a1:00:cc:0d:16:5a:dc:77:
                    d2:e6:d3:a3:1e:1a:8e:7a:b3:f3:69:24:fb:e0:0c:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
            X509v3 Authority Key Identifier:
                keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:2b:84:2d:0c:94:f1:a6:72:e4:13:c2:87:28:96:0d:f3:
         0e:7a:49:6e:a2:f2:8b:40:bb:5e:f7:3c:f7:48:61:2f:4c:9e:
         51:7a:58:75:18:ae:48:f0:7a:17:50:08:a2:3f:09:65:ac:7a:
         11:5e:70:e7:a2:54:2c:d3:96:93:8b:8d:16:4e:8f:39:b3:22:
         e6:cc:4f:02:d4:71:f8:42:7a:f6:a3:03:1d:7e:2c:70:54:9a:
         cb:90:84:85:54:30:65:10:c3:89:8b:88:a6:99:0e:95:27:34:
         c2:05:23:a6:f5:a7:64:3f:7f:aa:6d:d3:78:ae:8b:f6:08:05:
         99:73:31:3e:f8:c9:e7:cb:1d:e8:68:34:7a:2e:07:58:52:3a:
         2f:f8:cb:79:b3:2f:fe:6c:82:89:08:99:e4:09:cd:33:10:97:
         26:33:6d:7a:97:9b:89:c8:db:ae:f5:2b:d6:d7:b4:c1:94:f3:
         be:57:16:92:3b:03:e4:07:fb:58:c7:cf:ef:f8:41:f7:ea:b2:
         1c:b8:36:62:1d:8a:0d:32:a7:26:53:1e:d2:90:b6:73:78:69:
         0d:c5:76:bd:ad:ab:09:d7:de:3c:4d:93:60:9e:4f:bc:53:06:
         38:37:6c:76:1f:e0:cf:98:fc:21:29:97:46:ca:30:af:61:de:
         c5:6b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:31 2026 by rpki-client