Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
File:                     THcKx8Jx2lspFcoBuVmI0EFPQHw.mft (raw, json)
Hash identifier:          gmueuSQuY+V22FTAgMxXzPJ+V253EwydhD9GMdqS/3s=
Subject key identifier:   05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Certificate issuer:       /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial:       0158
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
Manifest number:          0154
Signing time:             Fri 17 Apr 2026 05:04:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:04:02 +0000
Manifest next update:     Fri 17 Apr 2026 11:04:02 +0000
Files and hashes:         1: BERQJ4SepOAwCHhrmQcXKMV6QAQ.roa (hash: xwBrwphP0dOcpDUF5PRZlihDX54NlAP4Th/uwoNWRpc=)
                          2: THcKx8Jx2lspFcoBuVmI0EFPQHw.crl (hash: Le0D1Sz4Zbay1vlMx8vjxwMseYu0636x+qe8Fgb7m28=)
                          3: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (hash: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
        Validity
            Not Before: Apr 17 05:04:02 2026 GMT
            Not After : Feb 10 15:30:20 2027 GMT
        Subject: CN=05B63B0E8FCE1C5361B22FB87417DDA6E5B28D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:4c:b1:da:c5:51:53:77:f2:82:05:38:0b:
                    c2:c9:3e:79:2c:2c:49:53:6f:eb:ed:95:f9:b9:ec:
                    c0:b4:49:b1:31:da:b3:7f:dc:05:af:24:3a:72:f9:
                    61:41:6f:dd:03:f1:74:5c:ec:bc:97:0b:c4:d2:be:
                    61:02:f5:5f:50:cb:ec:ec:48:08:91:13:27:0b:42:
                    95:ed:95:ae:30:a6:10:25:0f:1d:96:91:f5:db:0d:
                    40:78:58:fd:7f:c4:31:d3:ed:d2:f5:96:43:7c:16:
                    6f:4f:05:80:99:6d:1e:2f:49:fd:78:2c:99:42:51:
                    b4:ee:9a:b6:b9:95:ca:ef:11:e0:4d:8b:60:40:da:
                    0d:57:aa:cd:e2:d0:54:43:35:3f:c0:cc:b2:ea:54:
                    35:7c:74:51:14:bf:f6:1f:82:a7:ef:3a:0b:ca:47:
                    b7:06:6e:1d:10:db:54:66:a3:68:f7:6d:97:f3:2c:
                    a4:a8:27:f2:f4:a4:f6:13:6f:6e:1a:a8:1d:cc:1a:
                    4a:52:e4:55:94:47:5d:66:dd:9c:9c:97:fc:89:56:
                    a9:a2:32:e7:51:7e:ad:12:34:79:6b:22:44:72:9d:
                    e8:99:f5:85:17:67:28:6c:be:3c:04:56:94:7d:fe:
                    68:6a:9b:c6:53:b7:d6:39:9d:7c:df:45:41:b4:a5:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
            X509v3 Authority Key Identifier:
                keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:45:36:9a:ec:46:f5:94:ac:41:4f:14:e9:20:73:12:d8:27:
         3a:08:17:85:ce:84:05:5f:a9:c7:89:06:3b:ce:7f:91:aa:09:
         08:78:ec:c5:b4:9c:4b:8d:99:a6:a3:35:63:7d:2b:77:08:6b:
         f1:73:61:47:be:24:04:0c:e6:ee:ad:26:e4:51:8d:2a:db:06:
         4f:cb:18:dc:9d:af:46:39:7f:6a:a6:0b:99:18:49:50:03:b5:
         5b:34:71:be:7a:87:06:15:b0:9f:47:1d:45:9d:09:07:d0:51:
         4a:bc:ee:66:00:e9:5d:93:99:0c:15:51:c3:c6:8e:8c:c3:f9:
         f0:9e:41:5c:d9:a4:a1:e0:ea:89:51:8b:c3:41:bc:b0:33:ad:
         f2:3e:eb:e4:ba:16:19:01:49:45:7f:c6:30:59:a5:6e:08:eb:
         18:1f:9d:37:0f:59:77:ef:d3:31:ae:f6:45:ec:b9:ab:7e:14:
         7b:47:d7:45:34:b6:08:ca:13:70:d2:26:ed:03:4d:98:95:58:
         4c:12:36:97:cd:b4:9f:d4:a2:5b:2c:ec:0d:06:91:52:22:3a:
         01:4a:68:fe:5f:b7:0b:da:63:d0:7a:90:a8:b7:b8:b0:d4:8d:
         7e:5b:5c:e0:ab:d0:17:e5:62:16:06:26:fc:9d:9c:40:6b:0b:
         62:da:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:25 2026 by rpki-client