Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
File:                     5f38rnFoBdOTzrEk62PtHC37t3w.mft (raw, json)
Hash identifier:          zSRRjFry14SnR81qWIc2avLP6vkkYXmqvhgKTy6Mpn4=
Subject key identifier:   A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
Authority key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C
Certificate issuer:       /CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
Certificate serial:       0D5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
Manifest number:          0D5B
Signing time:             Tue 16 Sep 2025 21:17:58 +0000
Manifest this update:     Tue 16 Sep 2025 21:17:58 +0000
Manifest next update:     Thu 18 Sep 2025 21:17:58 +0000
Files and hashes:         1: 5f38rnFoBdOTzrEk62PtHC37t3w.crl (hash: MRnputT+NSl3Y5T43Z5fVw0S1ERVCT2qaJnys3kFxU0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 04:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3419 (0xd5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
        Validity
            Not Before: Sep 16 21:17:58 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A6D65D49A5CC3DC9AFD8750C1C1A040DA9C3244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:b3:22:1f:80:4d:a4:41:cb:b5:2c:67:10:
                    11:45:d0:d1:36:db:89:26:a5:73:07:e2:3e:89:b7:
                    a3:1a:dc:16:cc:eb:da:3b:5f:d9:ec:f2:d6:3f:a1:
                    fb:cf:ee:5a:77:75:90:77:18:44:96:6d:28:4a:9e:
                    71:8a:fa:85:27:a7:a5:4a:0b:b3:9e:93:9a:ba:7f:
                    42:7a:db:bc:07:83:e5:87:d5:a0:2f:26:30:99:b0:
                    2b:a6:2b:d3:59:8c:99:24:c0:3d:aa:e7:a6:50:37:
                    3a:1c:e3:00:fb:80:7c:e6:50:0d:a1:35:f1:af:30:
                    ab:90:dc:d8:8e:09:dd:a1:3e:16:9f:88:cc:a1:2f:
                    35:5b:b9:a6:a0:28:b4:be:3e:93:26:06:f9:9c:f0:
                    ce:e6:e2:c4:6f:07:93:7a:b1:40:a0:65:57:4f:7f:
                    66:fc:68:e1:02:1f:34:e4:62:9b:0e:13:3d:f9:18:
                    ba:af:6f:39:72:22:f5:57:35:03:f5:cc:62:ef:09:
                    00:e1:a4:03:1f:c5:56:84:a5:c0:26:04:fe:b2:4d:
                    67:3a:3c:2c:f6:28:fc:68:24:eb:de:82:35:03:50:
                    d1:03:e7:7b:e6:3a:4f:78:b6:b7:69:e5:ed:45:01:
                    77:f3:ef:7e:01:4a:33:fe:36:5d:2a:d6:6b:15:fc:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
            X509v3 Authority Key Identifier:
                keyid:E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:10:d5:d8:99:f2:b5:f8:e4:86:79:8a:fb:6a:4b:19:53:
         e3:f1:2a:ec:c0:2a:5f:0a:fc:76:0b:cf:27:77:12:dc:d6:47:
         04:79:d1:34:ae:c4:99:43:8f:f9:1e:60:24:90:b1:c7:cc:d8:
         87:b6:97:5c:f1:f8:70:9b:a7:27:2d:a8:70:55:23:3b:b7:a1:
         f2:5e:c3:d8:26:5d:e6:51:b5:a4:69:91:f6:d4:14:64:25:b9:
         bc:e7:30:1b:ae:e2:89:f2:88:82:6b:36:67:51:f4:b1:13:1c:
         d3:2b:bd:29:95:1d:35:97:e4:ba:10:48:d7:4d:3d:3c:9a:06:
         95:b4:13:cc:1d:d0:8e:79:db:3a:bb:f7:76:99:6d:f0:2a:29:
         7b:85:0d:e4:71:85:09:af:76:f9:f0:a4:07:1f:8d:6d:0d:bc:
         c0:94:ce:e9:2b:1d:3d:d0:63:9b:45:eb:60:63:2d:39:7c:6b:
         f1:c9:1c:c9:54:3a:13:25:ce:29:b9:b6:1b:f5:9e:9a:df:54:
         fb:09:b1:d5:ca:e2:31:9a:dc:ca:fb:42:98:5d:30:44:6b:43:
         67:1a:2f:7c:5c:40:63:01:96:c8:8d:2a:60:c9:f4:b6:37:8e:
         d4:81:15:73:b0:ad:0a:a0:5b:d7:a4:9e:88:4e:1a:05:7d:70:
         ae:a0:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:29:07 2025 by rpki-client