Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
File:                     -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json)
Hash identifier:          +kAzIs24yYpJFZU6nX/wQi86/0JiJvhSAsuorpZFjqc=
Subject key identifier:   8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Certificate issuer:       /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial:       05DC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
Manifest number:          05D6
Signing time:             Mon 02 Mar 2026 01:54:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:54:14 +0000
Manifest next update:     Mon 02 Mar 2026 07:54:14 +0000
Files and hashes:         1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: +fW0mI0vqaeWjs2CFShG3INFBYhXVqvBNy8Vm0T+8Qc=)
                          2: 9bdvzNtxJroURAqmtnTtMDcywaw.roa (hash: aiDh8liXCefG1qZ5Rw/TnoadqG7H49y4w8Ut6v6hkAg=)
                          3: iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa (hash: XuGTMc06Lntg/W9vuNwEDfkrn+dDnciDr2hiT6DG3DU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 06:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
        Validity
            Not Before: Mar  2 01:54:14 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69:
                    98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81:
                    2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d:
                    d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7:
                    8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63:
                    3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58:
                    ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43:
                    86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71:
                    32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69:
                    71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10:
                    3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82:
                    e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c:
                    8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b:
                    6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa:
                    6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef:
                    bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7:
                    04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
            X509v3 Authority Key Identifier:
                keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:d8:ee:68:80:03:cc:08:d8:20:f9:53:7e:7f:27:24:a0:
         6b:0e:a8:7a:ef:c9:f6:4e:2b:c0:f6:03:e7:53:55:10:c9:c9:
         0a:51:f8:77:f1:8f:5a:80:bb:2c:ed:75:bd:d2:1e:4a:fa:fe:
         2d:1a:4c:08:18:03:3b:0e:91:5d:cd:bc:b4:f1:3d:5b:de:71:
         e0:8d:68:ca:93:a5:be:57:83:8c:4b:3e:12:46:f7:c6:c0:f4:
         a8:04:06:2d:83:5f:13:39:10:57:8c:de:82:f7:6c:5a:f4:c3:
         50:3e:4e:22:54:e0:b2:73:31:c6:f3:36:64:8b:7c:9b:64:7f:
         e4:00:17:97:2e:87:60:1b:7c:c3:6f:1e:02:e0:d7:f0:28:b3:
         05:54:c6:a9:76:14:fe:05:44:a2:24:ae:89:0d:b9:fa:0d:e8:
         cd:dc:b7:91:33:d8:ee:af:80:09:4b:7c:0d:91:03:30:b8:5f:
         a2:c9:74:38:5d:65:ba:83:06:d8:4f:75:8c:de:80:73:b4:2f:
         a6:b6:82:d0:a3:06:ae:fd:5c:6e:60:6c:b6:9d:d2:4a:76:8d:
         f5:11:ad:10:6c:9b:a1:14:f2:67:b8:fa:37:af:6d:29:32:69:
         c8:56:aa:04:0d:24:ee:78:c8:bf:1e:5f:a1:d5:91:63:b2:d9:
         09:49:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:41 2026 by rpki-client