Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
File:                     J-FpnGz713D5Q6a9849r9IG7Hpc.mft (raw, json)
Hash identifier:          JbRLpyzONqmeznPIEtc0XJohkWbCaKmkoFjWZYrhNgs=
Subject key identifier:   AF:83:6F:2A:D3:D9:D7:CE:21:3A:CE:D8:1D:FE:89:A4:8C:53:46:3E
Authority key identifier: 27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97
Certificate issuer:       /CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
Certificate serial:       025A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
Manifest number:          024B
Signing time:             Tue 22 Jul 2025 22:08:28 +0000
Manifest this update:     Tue 22 Jul 2025 22:08:28 +0000
Manifest next update:     Thu 24 Jul 2025 22:08:28 +0000
Files and hashes:         1: J-FpnGz713D5Q6a9849r9IG7Hpc.crl (hash: QDXV39Vo72TLkO+A4siXBjRpmdnJzVWO9LdMWn4pFHU=)
                          2: PHv8W9OgFC9_QMM9HaD7nJXtMHs.roa (hash: xv9vUee3qiONU+8p4ItP9/KDv86P5py2TJ9Ho/1PQl4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 03:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
        Validity
            Not Before: Jul 22 22:08:28 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AF836F2AD3D9D7CE213ACED81DFE89A48C53463E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:37:c4:1e:f2:a8:03:4b:82:39:bd:8f:b8:
                    7b:c8:6c:0a:ac:c9:11:e5:74:4d:a7:5e:d1:5d:15:
                    f9:ad:3e:11:e6:3a:54:d0:85:1f:67:3d:69:b1:14:
                    b4:cf:01:90:ff:78:6d:3b:bc:23:3e:a8:91:39:04:
                    e0:34:73:74:66:84:38:b8:54:30:4a:9e:c5:a7:f5:
                    68:3f:da:fa:de:95:79:cc:d0:8e:7c:d7:34:22:42:
                    80:a2:9d:3d:eb:ec:cc:8b:79:4f:e3:12:85:ee:db:
                    a6:bf:bb:32:d9:34:ae:eb:80:db:14:91:b1:11:4b:
                    dc:47:c0:6d:24:2a:54:57:f5:59:ef:2d:4a:b6:a4:
                    63:66:ce:17:9b:6e:c7:28:1d:64:55:4b:20:82:57:
                    62:10:86:14:8f:d8:4a:8d:da:5e:7a:ec:66:26:69:
                    50:33:e6:2f:76:8e:99:e3:ae:83:a7:d9:62:6d:39:
                    8c:8d:26:fa:29:da:98:19:84:2c:c9:1b:00:76:79:
                    b2:81:4e:1c:f0:1b:a7:bc:b8:51:95:4e:14:6e:d6:
                    7b:f9:55:68:fb:eb:09:98:8c:a7:f0:d8:a5:f5:d6:
                    c9:4c:2a:6d:c1:d5:f6:17:a3:fd:10:ce:50:aa:a1:
                    a5:21:40:db:c2:a4:e3:6f:46:23:ad:d0:4f:05:1c:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:6F:2A:D3:D9:D7:CE:21:3A:CE:D8:1D:FE:89:A4:8C:53:46:3E
            X509v3 Authority Key Identifier:
                keyid:27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:e6:1e:98:e2:19:4e:57:87:93:fa:f8:b4:dc:eb:fe:be:
         e1:3f:77:11:04:c9:97:ea:1d:f6:3e:8b:34:5c:58:30:6d:e3:
         c3:2c:97:fb:75:7e:2b:91:2f:ed:2c:d5:65:7e:93:a9:b1:24:
         30:74:0e:45:69:91:c9:42:0b:dd:56:9c:c1:a6:04:53:73:64:
         9a:86:f8:56:b8:91:35:bb:03:a3:76:90:1c:21:2c:03:c3:9e:
         3b:1e:b1:f9:06:98:32:3f:98:36:96:1b:fa:50:06:2b:b6:94:
         0e:44:0f:5a:77:1c:16:b8:d3:33:ea:4d:1b:d1:0b:b8:f5:c1:
         12:45:3a:32:34:ba:57:98:24:47:dc:ca:72:84:b4:72:a3:fd:
         f6:74:0e:a9:a0:f6:8c:8a:ad:6f:d0:14:ee:41:18:4e:79:f0:
         8f:b5:1c:3a:67:84:28:67:32:04:28:b8:3d:72:2b:a4:cc:ac:
         c7:1c:1c:f3:14:bb:f1:b2:5c:67:66:ec:b4:f8:48:2c:20:d0:
         9e:f7:cf:c5:7e:19:95:2a:ce:a1:14:1a:14:2b:13:a1:d7:93:
         7a:99:40:ba:5a:3c:b9:08:88:14:ba:cc:93:85:ba:d4:02:60:
         56:07:b4:8b:a2:c4:05:07:0f:58:aa:a4:62:42:32:19:08:4d:
         ff:7c:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:29:15 2025 by rpki-client