Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
File:                     THcKx8Jx2lspFcoBuVmI0EFPQHw.mft (raw, json)
Hash identifier:          6c8KrLPFU9V5YFxOuWMmZgIyCkIHI6yQcVb3CFibzWU=
Subject key identifier:   05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Certificate issuer:       /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial:       69
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
Manifest number:          65
Signing time:             Mon 02 Mar 2026 06:24:09 +0000
Manifest this update:     Mon 02 Mar 2026 06:24:09 +0000
Manifest next update:     Mon 02 Mar 2026 12:24:09 +0000
Files and hashes:         1: BERQJ4SepOAwCHhrmQcXKMV6QAQ.roa (hash: xwBrwphP0dOcpDUF5PRZlihDX54NlAP4Th/uwoNWRpc=)
                          2: THcKx8Jx2lspFcoBuVmI0EFPQHw.crl (hash: CTnqMq8IbdXIp6lDBHovVOKNxmDKJlTP1E6JbAfIyJo=)
                          3: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (hash: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
        Validity
            Not Before: Mar  2 06:24:09 2026 GMT
            Not After : Feb 10 15:30:20 2027 GMT
        Subject: CN=05B63B0E8FCE1C5361B22FB87417DDA6E5B28D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:4c:b1:da:c5:51:53:77:f2:82:05:38:0b:
                    c2:c9:3e:79:2c:2c:49:53:6f:eb:ed:95:f9:b9:ec:
                    c0:b4:49:b1:31:da:b3:7f:dc:05:af:24:3a:72:f9:
                    61:41:6f:dd:03:f1:74:5c:ec:bc:97:0b:c4:d2:be:
                    61:02:f5:5f:50:cb:ec:ec:48:08:91:13:27:0b:42:
                    95:ed:95:ae:30:a6:10:25:0f:1d:96:91:f5:db:0d:
                    40:78:58:fd:7f:c4:31:d3:ed:d2:f5:96:43:7c:16:
                    6f:4f:05:80:99:6d:1e:2f:49:fd:78:2c:99:42:51:
                    b4:ee:9a:b6:b9:95:ca:ef:11:e0:4d:8b:60:40:da:
                    0d:57:aa:cd:e2:d0:54:43:35:3f:c0:cc:b2:ea:54:
                    35:7c:74:51:14:bf:f6:1f:82:a7:ef:3a:0b:ca:47:
                    b7:06:6e:1d:10:db:54:66:a3:68:f7:6d:97:f3:2c:
                    a4:a8:27:f2:f4:a4:f6:13:6f:6e:1a:a8:1d:cc:1a:
                    4a:52:e4:55:94:47:5d:66:dd:9c:9c:97:fc:89:56:
                    a9:a2:32:e7:51:7e:ad:12:34:79:6b:22:44:72:9d:
                    e8:99:f5:85:17:67:28:6c:be:3c:04:56:94:7d:fe:
                    68:6a:9b:c6:53:b7:d6:39:9d:7c:df:45:41:b4:a5:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
            X509v3 Authority Key Identifier:
                keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:87:28:42:d5:a9:c7:8e:c7:98:94:9a:b3:7c:06:91:ca:
         7b:b9:c7:b0:bf:96:50:0f:71:be:1a:0d:86:5f:18:ba:58:95:
         84:0d:49:86:8a:d9:78:f0:20:4c:31:76:ea:03:81:02:98:c5:
         3e:1a:0c:36:76:f6:25:77:95:1b:23:ee:ee:40:27:91:98:d1:
         f4:b4:69:2f:7a:c8:8a:57:8f:d2:24:6f:9e:02:f1:6b:0f:14:
         0d:ec:9b:55:d3:b5:16:36:0b:d0:88:14:36:03:31:05:43:1b:
         75:9b:60:cb:5b:57:19:64:f6:6f:65:e4:6f:c3:2c:3d:29:be:
         db:20:fd:a7:e8:2e:40:0a:93:cd:9c:6a:c9:3d:74:59:52:fd:
         f7:8e:3f:9e:88:35:b3:8f:fa:b7:9d:a0:76:78:86:b1:1c:2e:
         4a:ca:b4:c9:00:80:57:45:aa:72:cd:7a:dd:f6:0c:2a:58:82:
         e9:82:7d:f0:2b:26:04:16:74:50:e1:e1:d8:93:0a:19:5d:33:
         b7:38:d4:e3:b5:a4:af:2d:43:53:0e:2c:e3:25:c5:ad:42:bc:
         dc:eb:3d:1f:41:93:61:bd:ac:e4:5e:12:4a:c9:dc:73:f2:d7:
         05:7c:67:1d:94:57:e4:61:eb:3e:e3:54:0f:18:cf:fb:27:e3:
         90:12:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:23 2026 by rpki-client