Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft
File:                     v7t_e1xYMjSQh1hJuO3aSV7xexs.mft (raw, json)
Hash identifier:          zvVrA3bJDDxL85PwnY+yorGaUh1lNhpzDd2fTDxhm/A=
Subject key identifier:   EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Certificate issuer:       /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial:       05DF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft
Manifest number:          05B4
Signing time:             Tue 22 Jul 2025 22:07:41 +0000
Manifest this update:     Tue 22 Jul 2025 22:07:41 +0000
Manifest next update:     Thu 24 Jul 2025 22:07:41 +0000
Files and hashes:         1: X9uMsZZ5AU3KHHweRpel2Ppflp4.roa (hash: dnqjHXAlN1o6TRO0CRjCu6+dGxVcEMmUhzxNl73EGZs=)
                          2: v7t_e1xYMjSQh1hJuO3aSV7xexs.crl (hash: Uxk/D747rFX6WSRnMu1UBMoiZwkA5Id5V0rFd7ctT0U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 03:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
        Validity
            Not Before: Jul 22 22:07:41 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EB9FC0C705C1F8690683286890C129620CC6ADC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:29:bc:05:87:a3:da:ad:ea:44:56:1b:6e:
                    e3:b1:b8:0d:62:64:10:e9:b6:98:e8:9c:31:0a:2b:
                    b1:99:e8:a5:ad:2f:98:a7:8c:f4:ed:0e:98:ce:fc:
                    96:67:0f:72:76:be:90:5a:c3:33:3e:76:fe:b4:55:
                    19:fc:c2:36:ab:55:3d:ba:ea:c8:28:bd:56:1e:1c:
                    44:dc:73:78:20:cd:ed:13:e2:b3:b8:10:5d:10:7a:
                    b8:39:ec:74:f2:08:76:ac:d1:91:a1:a8:8a:28:5e:
                    f8:06:f6:e1:d1:96:15:2a:b2:cc:e6:36:db:03:44:
                    3b:34:33:94:8e:d9:ea:db:0d:62:2e:8e:20:be:81:
                    2e:ec:9a:a4:8d:d5:02:99:02:d2:80:d8:77:4e:08:
                    48:09:c9:74:aa:c7:25:28:b1:56:e0:94:78:6f:07:
                    50:52:00:8c:bb:c1:52:13:1d:13:56:35:d1:c3:90:
                    98:7e:97:24:5a:42:75:a9:59:6a:b5:da:cd:a4:18:
                    dd:ba:5d:1d:10:35:88:56:65:5a:62:79:04:77:7a:
                    85:eb:9b:b5:83:14:d7:1b:e2:dc:9e:04:82:32:7d:
                    2e:36:38:a1:0d:78:1a:d2:6e:53:ff:89:02:52:d0:
                    46:fd:c5:a4:b5:54:c1:08:60:c9:ba:24:71:dd:c6:
                    b7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1
            X509v3 Authority Key Identifier:
                keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:9f:a5:0b:f4:62:61:ec:c0:77:05:82:a1:3d:8b:31:c0:
         10:84:c2:2a:b5:50:d6:32:68:69:1b:d8:8d:49:91:94:27:b7:
         cc:a3:1b:bd:10:de:05:3d:44:5f:d1:70:e9:cb:c3:3b:1b:5e:
         fe:82:c5:7f:af:e4:c7:5c:8a:51:23:42:cc:70:d5:00:2e:6e:
         d3:bd:d1:37:56:7c:8e:e3:f6:78:09:2e:bc:b2:4e:1c:d8:c5:
         07:6d:fb:0f:b4:19:c0:e9:87:f7:5a:02:b6:24:a2:19:df:4d:
         6a:5f:a9:2c:9f:0e:18:81:98:50:0d:ad:c9:8f:3b:02:26:85:
         1f:3e:88:b5:69:2c:76:a8:cc:08:79:26:30:62:31:0e:b5:c5:
         0e:28:e3:75:59:d9:5c:f5:a9:99:dd:c0:b5:fc:8c:be:2f:fc:
         6c:11:bd:70:21:c1:cb:c9:dd:42:bc:b4:60:50:e4:2d:d7:4d:
         90:57:c9:f9:2b:45:a6:0f:c1:f3:24:ac:37:6c:c1:48:81:25:
         fb:95:a1:e3:12:6d:2e:5e:f8:38:77:19:02:42:4a:48:27:12:
         07:31:29:cd:af:eb:1a:e7:15:4c:04:c9:75:be:52:14:36:c1:
         35:8b:d2:31:eb:64:2b:13:b0:09:97:b8:9c:dd:73:16:0c:a6:
         1b:a5:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:30:57 2025 by rpki-client