Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
File:                     PCrYZxs3UyZShtMuRr8G_fUtD-8.mft (raw, json)
Hash identifier:          Bac0qqbfs86C1xy2U4Qe29qkX0RKFZDsOU7YaAPbCaE=
Subject key identifier:   76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       02D4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
Manifest number:          02CD
Signing time:             Tue 22 Apr 2025 09:17:18 +0000
Manifest this update:     Tue 22 Apr 2025 09:17:18 +0000
Manifest next update:     Thu 24 Apr 2025 09:17:18 +0000
Files and hashes:         1: GB79Am5vXkvVyvMEpsxDKjDB35Y.roa (hash: wdIuYFbcpsrDpf8CltyoKTyblDuQghQ6Sxdz2TvRZYQ=)
                          2: PCrYZxs3UyZShtMuRr8G_fUtD-8.crl (hash: awUs4Gh5buP0tUTpCM4mPl1Q4i1f+l6Il5keMEaG7dU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 01:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Apr 22 09:17:18 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76BB26BD00993C78EA62C532BDD1104EF089A99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:9b:29:82:5c:1a:05:af:23:b8:27:e6:c1:
                    84:f3:b9:cd:23:f4:86:c3:4d:32:41:0a:3c:2f:e5:
                    9d:62:39:23:6b:a0:e1:15:7e:e5:48:d2:62:f6:ca:
                    78:19:aa:b9:80:be:d4:ce:33:ab:fe:76:2c:03:53:
                    ce:d7:f4:e8:91:77:68:52:54:af:1e:3b:05:57:11:
                    f6:6d:0a:91:f6:9a:8c:a5:9e:e1:1d:5f:9f:e7:f8:
                    7f:3b:99:58:c4:c1:76:09:b9:ca:68:ef:55:5a:c6:
                    22:cb:b4:11:e5:fa:e9:76:06:78:6a:ee:38:d7:73:
                    a2:16:b1:d4:d1:2b:75:db:df:26:77:4f:40:06:86:
                    c0:f8:17:92:1d:4a:e6:b8:aa:92:01:c1:f6:fa:8a:
                    5d:93:20:eb:c7:0b:3a:7a:dc:b7:a7:6e:7d:fc:b4:
                    3f:87:39:f6:48:94:0e:fd:44:ba:84:a3:ba:c2:f3:
                    1d:7d:ad:f6:d9:e0:be:c8:bc:c3:52:75:94:cf:ce:
                    d4:0a:c2:f8:bf:20:18:14:bc:3e:6b:f4:d9:42:ea:
                    db:23:cd:68:fe:b1:ce:dd:b1:39:92:67:e0:4f:bf:
                    15:40:34:71:89:1e:83:64:d7:f4:06:80:c3:fa:84:
                    cc:58:b0:eb:43:d3:d5:9f:6a:f9:40:01:c4:54:00:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:14:cd:13:d5:cb:6d:50:3e:63:4c:f1:e1:3c:35:87:0a:
         b0:31:f5:49:d7:01:05:ce:bc:f4:62:b1:30:24:a1:3e:fe:d9:
         1e:dd:3d:e3:0b:4f:85:92:32:2d:dd:c1:04:47:e8:fd:67:2e:
         bb:38:45:e1:c5:b6:f2:4c:8a:a3:5a:c6:dc:21:ca:5a:29:82:
         cf:7f:c0:71:9a:c8:46:ac:7c:62:e6:e0:f8:50:bc:8d:d7:13:
         1c:3f:18:b8:ac:43:1b:29:a3:de:9e:ea:80:e7:29:19:46:5c:
         57:3d:2a:b1:4b:5a:ca:00:b6:1d:91:13:e6:85:69:c9:60:14:
         c9:81:af:f7:71:f2:46:f3:8c:0f:3e:2c:82:92:68:b4:b5:51:
         38:96:2c:10:cc:97:12:fd:df:63:33:55:13:ab:51:06:46:1d:
         93:f6:6b:2d:76:3b:a6:e4:68:e7:50:09:ec:ee:07:a8:bf:1b:
         a2:71:4d:e4:31:78:f1:c7:3b:49:e6:dc:00:68:48:6d:f2:51:
         f7:76:71:96:48:33:1f:32:49:f4:6a:71:19:ce:97:02:ca:e9:
         91:5e:5b:22:24:df:dd:40:ae:e7:69:74:c0:aa:07:85:72:60:
         56:59:4e:62:27:63:00:34:87:9f:50:8b:d4:35:0a:37:69:81:
         6f:0d:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:24:17 2025 by rpki-client