Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
File:                     KY7S_WrVxbVoffYUonXC_ISNTpQ.mft (raw, json)
Hash identifier:          QbeU/d9oTCri9hVAd+HeJ4hCAKn16MFBJZEPqlKCSWw=
Subject key identifier:   B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Certificate issuer:       /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial:       0419
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
Manifest number:          040C
Signing time:             Thu 16 Apr 2026 11:02:19 +0000
Manifest this update:     Thu 16 Apr 2026 11:02:19 +0000
Manifest next update:     Sat 18 Apr 2026 11:02:19 +0000
Files and hashes:         1: KY7S_WrVxbVoffYUonXC_ISNTpQ.crl (hash: cyO/OvKqxskJcZtfhKsrUg+nV6VWW8ePfTEjLMNvcLI=)
                          2: NlQidybSBeZHTZI3L4pKpirVIps.roa (hash: UIQb5c2F88EIT7UEI7F2iTP67ctCprgSSNLLg9Bho/E=)
                          3: eNy_6L-cDdzy9gYGpgWCKQ9JFV0.roa (hash: kgrLy2Dxerb5vSlDt7R16GUhBYYkorNYj7an5P4SDQM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
        Validity
            Not Before: Apr 16 11:02:19 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B03685E84040AEF372A7530642B60A22918BA415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:c5:43:f2:41:c1:58:1f:f2:6b:c8:89:6a:
                    9c:a3:c3:3a:ff:fe:f1:0c:55:e8:13:49:bf:8b:b1:
                    eb:13:04:81:5f:11:1c:73:a7:a4:04:51:38:8b:88:
                    02:49:da:61:e0:18:4d:22:f1:c3:fc:4c:3a:45:87:
                    9a:19:90:ea:21:1b:78:6f:57:b2:2a:b9:bb:d9:9d:
                    c0:45:9b:73:99:48:44:1f:ce:87:cd:70:d0:be:48:
                    ab:6b:2b:c5:68:21:79:93:1f:b0:2e:e6:9b:93:66:
                    ff:27:db:e4:4b:da:0c:11:92:be:a6:1b:37:36:5b:
                    79:72:cf:d0:6e:92:e3:7f:40:0c:2e:b3:41:f8:3d:
                    26:d1:ef:50:6a:a9:91:58:7d:23:a0:9e:98:7c:73:
                    73:6c:86:16:4b:cb:51:20:ab:91:5d:b8:73:a9:99:
                    8a:93:df:1f:80:52:25:2c:e6:1a:96:d8:75:5b:5e:
                    24:97:18:bb:69:70:30:31:b4:d0:0e:63:ad:2e:f0:
                    14:ef:af:34:38:cf:e8:58:9a:49:7a:ec:d6:4e:e5:
                    be:4a:f6:f1:21:d9:8a:c6:ec:7a:48:ef:47:3b:74:
                    ce:8b:6f:ad:f9:82:38:70:4f:4b:7f:b4:37:42:f8:
                    0a:3f:34:e7:64:83:55:ef:97:f6:e1:c8:b2:2a:d8:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
            X509v3 Authority Key Identifier:
                keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:49:03:2a:17:09:7b:8d:44:b9:2b:f5:90:de:8f:c9:d3:
         1b:3a:e2:33:41:e9:99:3e:a3:c7:96:03:73:85:38:3c:73:90:
         6c:bd:a1:63:a5:24:4e:89:97:9f:44:dd:a9:7f:27:5f:ae:2f:
         98:29:46:17:e5:44:19:04:41:03:07:a4:bd:87:96:cd:f8:8e:
         1f:0a:b0:95:d0:08:d4:08:f7:0b:d2:c1:01:21:60:60:80:3f:
         2c:cb:fd:f6:39:70:c3:c4:0e:bf:53:22:19:3c:90:a5:0f:a4:
         43:c4:8d:84:2b:75:1e:4e:65:1d:1e:16:ca:cf:6d:9e:05:21:
         35:8a:e6:e2:3b:e7:2c:b0:9f:4b:e6:96:23:63:42:a4:c1:f8:
         6e:df:a2:3f:78:3d:ad:d3:28:0d:a8:8e:2d:97:e1:79:6c:9d:
         45:85:3b:36:82:8c:77:5f:17:4b:be:ee:b7:ee:8c:28:f7:0b:
         54:b6:eb:ff:99:c1:be:4e:04:17:e1:e1:bd:20:fa:d3:de:a4:
         08:86:69:e4:0d:d1:05:fe:ec:1c:48:fc:52:2c:3b:aa:e0:7b:
         08:90:70:46:df:df:5e:48:b7:18:4b:f8:6e:9f:48:98:22:d8:
         f6:56:9a:57:29:2b:7c:72:6e:ff:9a:36:ef:28:50:48:76:04:
         8b:23:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:16 2026 by rpki-client