Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File:                     AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier:          CMyXVpDYb9V/QK17c+JVM8HgZdUEWhclDi0nO66lXyk=
Subject key identifier:   37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0ECE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number:          0E32
Signing time:             Sat 28 Feb 2026 23:52:50 +0000
Manifest this update:     Sat 28 Feb 2026 23:52:50 +0000
Manifest next update:     Mon 02 Mar 2026 23:52:50 +0000
Files and hashes:         1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: T5lbTP98avpbngA/V/Q35HqVihoo/7QPvkZOxiEmNDY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb 28 23:52:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
                    e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
                    8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
                    c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
                    2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
                    bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
                    66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
                    fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
                    01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
                    03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
                    7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
                    ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
                    2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
                    f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
                    6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
                    67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
                    ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:84:b5:60:4f:ab:d8:29:ca:af:05:ee:d2:61:1b:94:cc:
         68:4e:c8:3e:4b:f4:84:8d:1d:0c:ad:10:7a:97:d6:c2:90:3b:
         37:77:66:7f:7b:e6:54:2f:98:96:07:ed:6a:2a:2a:a8:a0:f7:
         10:a5:9a:63:ad:b0:38:30:34:74:b6:2b:96:ae:3a:ed:bb:4a:
         db:d6:d8:fc:46:8b:be:69:3d:44:ed:13:73:3c:8a:89:b0:68:
         6e:55:de:1c:96:b1:b4:23:e8:1f:3b:41:f1:20:2f:54:c1:8c:
         0a:21:f0:8b:cc:2a:b6:10:38:57:6e:1a:36:fa:f9:31:ce:8c:
         ce:7b:33:22:b4:fc:73:29:fd:fb:04:0c:f8:7f:64:a6:5d:53:
         aa:b7:c5:c1:a7:3d:19:b3:12:aa:c7:5e:f4:ab:4f:ba:dd:1b:
         1e:69:3f:1b:65:7d:ad:3f:14:0f:bd:98:df:d7:29:af:d7:0c:
         9f:22:61:1b:78:37:e8:bf:76:35:9b:47:f8:c2:23:43:54:a6:
         6b:0c:6f:5f:42:a3:1e:00:b2:4c:ae:d9:82:32:84:aa:41:dd:
         c4:6d:63:45:fb:4c:e3:ab:ad:95:ce:a3:53:20:f2:e6:1c:92:
         8e:28:02:93:1b:d0:cb:33:6f:36:e8:0a:39:16:9a:af:a2:6c:
         9b:5e:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:49 2026 by rpki-client