Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File:                     U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier:          T8pJlRSIDMlUfA4gi8A8dATuQS93QolWVARaHFLw/cI=
Subject key identifier:   C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0DA1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number:          0D92
Signing time:             Mon 02 Mar 2026 10:52:43 +0000
Manifest this update:     Mon 02 Mar 2026 10:52:43 +0000
Manifest next update:     Wed 04 Mar 2026 10:52:43 +0000
Files and hashes:         1: 7sHAh5jiw6-sVg6mb4z9C6JB4l8.roa (hash: emematTS1MjVyXh/NTYR7rNCzoRendxnVTI41VCw+HM=)
                          2: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: YgIYQUh5WdC6M1jA3llAEvszbNQw7fZbHhPGK0r4o1A=)
                          3: mCHvVHpGfKuhmttRNl9HHQHBTAI.roa (hash: hn0Bq3ZnhNo3VNrymOZK60+U8Y38hEilSnlLyRNaQmA=)
                          4: uzg8l_54iYpkBtNcz2YHsk-cwVQ.roa (hash: mdmtjFhDZrDdFx85+7QIaCznxJR20knq4vWizVXwtBc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 16:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3489 (0xda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Mar  2 10:52:43 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
                    17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
                    6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
                    9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
                    91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
                    b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
                    13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
                    27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
                    d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
                    20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
                    68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
                    75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
                    8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
                    f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
                    6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
                    46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
                    98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:a8:a2:1d:d6:09:f4:51:d1:b2:5c:d2:45:56:1f:23:12:
         d0:8f:f6:fb:06:f2:d9:e0:8e:83:9b:1a:de:49:86:2e:28:78:
         a6:dc:67:77:56:fa:4e:39:9d:8a:c2:b8:26:ba:c0:7b:53:f2:
         9e:15:97:18:4f:63:dd:7a:c0:94:a9:54:ee:3b:ee:a1:59:14:
         47:06:39:46:4d:cf:e5:fb:f4:ad:08:87:c8:44:79:8c:af:44:
         36:1b:c3:b4:96:a8:ab:e9:7f:6e:05:d8:2b:cb:e5:b3:90:a8:
         ec:1a:e8:00:00:6c:dc:0a:63:82:7d:02:ef:ee:61:b6:55:61:
         47:e6:4a:76:71:b8:22:35:3e:80:2b:ac:20:0b:21:77:ba:28:
         b4:82:ea:64:19:4f:a5:7a:5e:bb:65:02:16:d2:af:1c:51:c8:
         6f:4f:0b:d2:9f:7d:a7:b9:90:3d:43:43:b8:ec:27:55:ee:36:
         02:b3:df:85:09:70:b7:85:0f:02:ae:7d:66:24:bb:52:50:6e:
         72:b1:16:30:3f:62:42:c6:70:83:94:4c:a2:ef:5e:ca:81:71:
         2f:b5:4a:17:31:2a:0e:5f:dd:fa:ca:96:83:89:a5:5c:91:1e:
         8c:e4:0f:21:c8:7c:c3:10:35:2d:e9:9e:84:a8:14:d3:db:f8:
         7c:4c:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:56 2026 by rpki-client