Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
File:                     gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json)
Hash identifier:          EMmP1eNPgXJKwKdZ4OwgygTJLDfsUCLcU6uY0lcql84=
Subject key identifier:   D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0F1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
Manifest number:          0E30
Signing time:             Thu 16 Apr 2026 11:33:57 +0000
Manifest this update:     Thu 16 Apr 2026 11:33:57 +0000
Manifest next update:     Sat 18 Apr 2026 11:33:57 +0000
Files and hashes:         1: 01aokKDjDCtpTkg7kLwKuu6Km7I.roa (hash: IJ9BPAV/FnDHJitNmnXHCbtBbHb/EqJSj73l5q5/3Gk=)
                          2: 1N4TMqvkZPycK7_y6KbFaykXSrQ.roa (hash: a2ORtM7OK5OhMJp81zxhPOm5oBfhaRzESVQG83HXTds=)
                          3: 4JeLCEL33VtaMKZRTdHIxY0D0so.roa (hash: w9KqGxEZYWD6Lu/uwQfGnWMP/66folzZv0mTCCIo1vw=)
                          4: 5FX90Fmd8wLXP6bNxffFE3GG-4s.roa (hash: hnHW0HVTQEoljJZ7vMFaTtMk27agfta0TQWiZQLIL1c=)
                          5: 7whmrqIkmkaInVCtxI-Av1hQ5hE.roa (hash: hCk1vktFPij+CnuSZQ72yhvQnQc2dh3km9No3m4TfqE=)
                          6: 8Le8JR3u0fcXI2-OiQo7RjlQ7g0.roa (hash: vljD0HIGzqlz0QGd9R+xNLyySi8RXcJGqdTnLYzBVZw=)
                          7: H7-iyK8eeIB0A_OfWp0ikIZ-ny0.roa (hash: 6iBBuTnCJmCarzgf/jC1XrLwOjng+NL96LR7zKgko30=)
                          8: JUUVQweTr8bSXOvwl9pFYLcKav0.roa (hash: mhrf/gdeq7nXkbECMcEO6jri8iBrIZx1O+Zjo/ibyeo=)
                          9: K-Ogk6W6eQ9cu5ynqoOySlcKOww.roa (hash: 05iX85CNQSpO53eNoQ9xX7ZX79H74PLE4KTHXgvMZRY=)
                          10: OmoKANis5RZ49I0UunbaCwaQaew.roa (hash: 0uJpWqVAhhOZY/qcNfaTN0dmKIUjkk3DP9pz/bPuC+A=)
                          11: P51amNkIfo-VQJNudNPOEcNcAF4.roa (hash: wHQGCv2xdqPI6QnAgloUN/efu00O5lpirMyZYAAL/II=)
                          12: PB8QijqcypRE6FRxtPtImMO2iq0.roa (hash: R/78vaXcnyxjA5ohcpo5+C0AJA+xOEdeAHKBVjtFKik=)
                          13: UHf_HCjWSl4Bw71QBaRwKIynYu4.roa (hash: nqs7cqoopTH30zB7xhGQa+ftazZpm0LiSFEfsdqm0aI=)
                          14: VUjJILf7QLsupL5UYDlg7EZ603o.roa (hash: MHFv1KcDU6SE2eU4EohjKB6NQ+B07+iJxOxFdlpM5Ao=)
                          15: Xmux0Rvvz9qWsItEpxDb1-aW8-0.roa (hash: Em5/d9PXWfCNKiGUIRiQDaiUKHt42nQKjvg5eHPS8RQ=)
                          16: XzsI-8yv3d_T4ZgRc4y0ehSM5fs.roa (hash: tW8kaSf2cqDtHMAA5oDaQXpfDVsCNbMOv3DZ+4M0HPI=)
                          17: ZLSyPEY08KtlEuqHauLu9nqvXpI.roa (hash: FB2J0vZfqNAQluwYSjdZ+Ymo6nSGi+ENXIjykH4nVYA=)
                          18: ZoID3Op7APOX8z4ZXRLTuKMjY6E.roa (hash: WpA0L1Tyy190oFD0eZbpzuNi+W4tuixD7FgU7jev3nw=)
                          19: _i-V5u6mt4vjC8m0ztusepGV4Pw.roa (hash: kJnGRcKS66yrpFBJZnOKUnvTKS6em3t44NvcPex8jw8=)
                          20: a-k9Lo55SAWSg-1TKKBWdJYfrv0.roa (hash: VQOWqN5OCXUGd9mc87AZeSHVdTkWl9Jbhy3NuWqd86k=)
                          21: d03wrFU0BzyI3PI4HZaLvmmuTDA.roa (hash: h0sYgOEkGZa7UnH37AKu5Vwhi7y52FmpysovU04DvvM=)
                          22: gI6AwCNAPmcDHbDU6hAqCGwyo58.roa (hash: vh073mGTNGvDo7S5FTVFvb65KoyWm+GUF67Wzd4KvHY=)
                          23: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: 1QWYI52XAjhXmVq0u8pkUZh6A0XPiGmU/tQydLS0uik=)
                          24: hV41naxCDH_lEePq6WGfw2BlPM8.roa (hash: mHv8hyIMi33EE6exR7EwDsSSqmu1Ma3m3FCF3Zy5AMA=)
                          25: iGZHU6ox_qeckZ7zzcEnWndHnQM.roa (hash: z1fUXjUe+w+xeXn+Jt4E2KVjZA1znKkyNuLjVSSE39c=)
                          26: jwMIW6i_RHfle0vO5zgjXbRk8Co.roa (hash: JR5KA0BLsENAJQfNOEqnBiB3XaBoLRNzbIN98A1vmCo=)
                          27: oCbo4j_RowFohhS_3o-gRW0vNNs.roa (hash: 6/+w/RiuG7t9WcjT41dYBGCT3mlap7yM7yUePx6mDFQ=)
                          28: oK-ViXr7bj217cddUPIGwQOALGE.roa (hash: +xq+21sa4g/iDyjlH5yDG+cVFg6rZUJ94bwVhBXiDVc=)
                          29: oOd2jq6uUAtRp5fNdA28BQ7l-U4.roa (hash: 9E0hj5bG7xWVXPw0wj4aNSed+yub2w97E6UeeDZB0WI=)
                          30: oocsVqRD6XsGABoScgdvPpARvjs.roa (hash: skzmA1qrkx0Mj8WzIdHslgoAlW74pzyy5dEo1KdTeYw=)
                          31: qtyQL5WGDDE-TDdMKqa3eDX8bck.roa (hash: 6+6uJ1z3V838Kvx7WkZabAjnDtv6t0WNkzAKt3w8vCU=)
                          32: vIBcPxWLcoJ-cUnKfvZ_eWgZKUU.roa (hash: iwyQNILy4d7/veq42IaHkjzCyTuN3UeG2WBs+G+AHDA=)
                          33: yUR96OJO6FR1MdbDzyD3TQ-egKs.roa (hash: D0YLJp4m1F8Q/FafcxWZC+RJfYdqFBFumD+baIP5U60=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3866 (0xf1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Apr 16 11:33:57 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55:
                    81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40:
                    82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68:
                    66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f:
                    8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84:
                    0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46:
                    08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63:
                    17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00:
                    71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1:
                    67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7:
                    25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba:
                    99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2:
                    1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94:
                    ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a:
                    15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6:
                    7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53:
                    d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:af:d3:01:b9:0b:bb:4b:ad:6e:d8:bc:2f:65:ed:4e:e6:
         fe:6a:8b:f1:bb:9c:20:6e:ed:2f:90:6e:a3:c4:2e:19:7a:02:
         9d:4b:14:98:3f:cd:4a:61:5d:e1:60:96:86:44:27:f9:e7:aa:
         34:61:7b:90:94:a3:10:43:a7:7a:04:17:dc:d0:29:8b:4b:76:
         0b:e8:df:3a:a7:9a:f7:46:8f:da:11:e2:1f:81:00:a7:63:2a:
         6a:62:9f:fc:29:6f:e4:aa:0a:a8:41:8f:5f:d1:97:b5:af:27:
         96:42:e6:a2:1c:ab:1d:61:46:70:b9:9d:99:8a:16:36:3f:c0:
         73:4d:70:3f:58:e6:c7:be:94:c5:ca:f9:dc:eb:2d:fa:8c:2b:
         1d:60:e0:26:2e:f0:48:2d:01:92:3b:57:d1:ad:af:79:69:90:
         e1:6e:94:24:84:22:c1:2f:8e:33:50:19:4d:0f:09:44:8a:ee:
         86:ed:18:0e:6f:a9:a3:f1:5a:95:30:a9:a6:b4:1f:19:d9:20:
         1e:45:eb:43:e7:4a:22:e6:26:66:a9:71:78:d4:ff:5e:78:ff:
         34:30:f4:22:57:7a:be:f4:a6:50:91:4a:93:a0:3c:86:0a:6e:
         5a:1a:7d:6c:94:92:42:ee:2b:52:8a:63:a8:90:27:0b:95:22:
         eb:79:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:28 2026 by rpki-client