Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
File:                     PCrYZxs3UyZShtMuRr8G_fUtD-8.mft (raw, json)
Hash identifier:          YVD/+E1OaxSh+4QsitNFpyjd8EEQP5H6as6CGap1gQQ=
Subject key identifier:   76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       0312
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
Manifest number:          030A
Signing time:             Tue 22 Jul 2025 20:05:53 +0000
Manifest this update:     Tue 22 Jul 2025 20:05:53 +0000
Manifest next update:     Thu 24 Jul 2025 20:05:53 +0000
Files and hashes:         1: GB79Am5vXkvVyvMEpsxDKjDB35Y.roa (hash: wdIuYFbcpsrDpf8CltyoKTyblDuQghQ6Sxdz2TvRZYQ=)
                          2: PCrYZxs3UyZShtMuRr8G_fUtD-8.crl (hash: DRdN7lGWRKU9qpQdt511LRhq6DNY4geHvNRzNuQ8K2s=)
                          3: PM3wIjcEy8mKnIpHziHr0MUF74c.roa (hash: 5e2f+y01Uqv4880rVhH9X9VAZ+DY30f0V3FIMPPtsxU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 08:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Jul 22 20:05:53 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76BB26BD00993C78EA62C532BDD1104EF089A99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:9b:29:82:5c:1a:05:af:23:b8:27:e6:c1:
                    84:f3:b9:cd:23:f4:86:c3:4d:32:41:0a:3c:2f:e5:
                    9d:62:39:23:6b:a0:e1:15:7e:e5:48:d2:62:f6:ca:
                    78:19:aa:b9:80:be:d4:ce:33:ab:fe:76:2c:03:53:
                    ce:d7:f4:e8:91:77:68:52:54:af:1e:3b:05:57:11:
                    f6:6d:0a:91:f6:9a:8c:a5:9e:e1:1d:5f:9f:e7:f8:
                    7f:3b:99:58:c4:c1:76:09:b9:ca:68:ef:55:5a:c6:
                    22:cb:b4:11:e5:fa:e9:76:06:78:6a:ee:38:d7:73:
                    a2:16:b1:d4:d1:2b:75:db:df:26:77:4f:40:06:86:
                    c0:f8:17:92:1d:4a:e6:b8:aa:92:01:c1:f6:fa:8a:
                    5d:93:20:eb:c7:0b:3a:7a:dc:b7:a7:6e:7d:fc:b4:
                    3f:87:39:f6:48:94:0e:fd:44:ba:84:a3:ba:c2:f3:
                    1d:7d:ad:f6:d9:e0:be:c8:bc:c3:52:75:94:cf:ce:
                    d4:0a:c2:f8:bf:20:18:14:bc:3e:6b:f4:d9:42:ea:
                    db:23:cd:68:fe:b1:ce:dd:b1:39:92:67:e0:4f:bf:
                    15:40:34:71:89:1e:83:64:d7:f4:06:80:c3:fa:84:
                    cc:58:b0:eb:43:d3:d5:9f:6a:f9:40:01:c4:54:00:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:13:3a:34:aa:5f:91:09:88:c6:82:b0:50:1c:d2:dc:bc:ec:
         4b:07:a5:7f:85:9c:8a:64:17:e4:d5:c5:02:07:e2:0b:b1:7b:
         2c:23:c6:32:42:c9:8c:c2:4b:c4:33:7b:32:36:97:74:d0:fd:
         10:d4:1d:b5:b0:8d:e1:26:1b:81:2f:02:15:7e:ec:81:c4:42:
         7f:d6:7a:f2:98:f6:6c:18:ba:2b:c8:a5:ea:b8:4f:be:a8:50:
         37:5d:a6:5b:3a:6c:3a:95:d3:e0:dc:64:00:c6:55:52:38:f1:
         79:a4:88:29:d6:0a:24:0c:72:ab:a3:40:db:80:fd:b1:09:03:
         49:fc:97:95:ca:22:4e:26:b3:01:c3:0a:55:2b:9f:f6:11:b7:
         22:ef:77:d9:fd:68:19:fb:8c:c5:a1:c2:14:64:67:36:c4:64:
         bd:6c:ac:0b:80:bf:cf:a9:f3:4e:7c:4d:02:a9:81:90:cf:75:
         4d:80:31:31:48:07:48:cd:5f:96:77:aa:da:fd:9f:f2:d3:fa:
         3b:8b:89:08:90:0f:d7:fd:bf:96:57:07:e7:b4:71:49:aa:60:
         8f:c3:0b:24:45:e4:3e:74:71:71:cc:af:b2:69:e3:a4:41:ed:
         98:a7:37:20:7d:20:4a:d3:bb:19:8c:ae:7e:91:95:86:17:de:
         73:40:28:03
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0My
QUQ4NjcxQjM3NTMyNjUyODZEMzJFNDZCRjA2RkRGNTJEMEZFRjAeFw0yNTA3MjIy
MDA1NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2QkIyNkJEMDA5OTND
NzhFQTYyQzUzMkJERDExMDRFRjA4OUE5OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPoZspglwaBa8juCfmwYTzuc0j9IbDTTJBCjwv5Z1iOSNroOEV
fuVI0mL2yngZqrmAvtTOM6v+diwDU87X9OiRd2hSVK8eOwVXEfZtCpH2moylnuEd
X5/n+H87mVjEwXYJucpo71VaxiLLtBHl+ul2Bnhq7jjXc6IWsdTRK3Xb3yZ3T0AG
hsD4F5IdSua4qpIBwfb6il2TIOvHCzp63Lenbn38tD+HOfZIlA79RLqEo7rC8x19
rfbZ4L7IvMNSdZTPztQKwvi/IBgUvD5r9NlC6tsjzWj+sc7dsTmSZ+BPvxVANHGJ
HoNk1/QGgMP6hMxYsOtD09WfavlAAcRUAHY1AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUdrsmvQCZPHjqYsUyvdEQTvCJqZ4wHwYDVR0jBBgwFoAUPCrYZxs3UyZShtMu
Rr8G/fUtD+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVKSU4v
UENyWVp4czNVeVpTaHRNdVJyOEdfZlV0RC04LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9QQ3JZWnhzM1V5WlNodE11UnI4R19mVXRELTguY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUpJTi9QQ3JZWnhzM1V5WlNodE11UnI4
R19mVXRELTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBM6
NKpfkQmIxoKwUBzS3LzsSwelf4WcimQX5NXFAgfiC7F7LCPGMkLJjMJLxDN7MjaX
dND9ENQdtbCN4SYbgS8CFX7sgcRCf9Z68pj2bBi6K8il6rhPvqhQN12mWzpsOpXT
4NxkAMZVUjjxeaSIKdYKJAxyq6NA24D9sQkDSfyXlcoiTiazAcMKVSuf9hG3Iu93
2f1oGfuMxaHCFGRnNsRkvWysC4C/z6nzTnxNAqmBkM91TYAxMUgHSM1flneq2v2f
8tP6O4uJCJAP1/2/llcH57RxSapgj8MLJEXkPnRxccyvsmnjpEHtmKc3IH0gStO7
GYyufpGVhhfec0AoAw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:46:10 2025 by rpki-client