Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
File:                     FlSV6NMn5PYtWhZDjwgOYIo00NM.mft (raw, json)
Hash identifier:          G+vbBeIjHTlzM1G3w4fTcu8TE1rbSRe4U9xfMntXPBE=
Subject key identifier:   99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0FE1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
Manifest number:          0F7D
Signing time:             Tue 16 Sep 2025 21:19:04 +0000
Manifest this update:     Tue 16 Sep 2025 21:19:04 +0000
Manifest next update:     Thu 18 Sep 2025 21:19:04 +0000
Files and hashes:         1: FlSV6NMn5PYtWhZDjwgOYIo00NM.crl (hash: Eu8BxjvYKHo/JyOZyr0Tz8wVMCDNydo8eePIQJ8i4yo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 04:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4065 (0xfe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 16 21:19:04 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99D7C86BB0179CECBF7C47167DEB75FC584B5EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:5b:82:e1:af:76:2d:70:7b:83:b3:1b:fe:
                    d5:a7:03:88:12:99:d8:a0:5f:eb:85:dc:43:97:fd:
                    38:f9:af:00:7d:ce:15:42:9a:4b:71:ae:96:68:f4:
                    0c:92:af:88:f2:85:e1:66:7c:39:90:53:f4:1a:8e:
                    0e:a1:c9:3e:13:ae:d3:54:8e:40:ac:55:15:87:ea:
                    b6:82:a1:ac:e4:ae:e9:34:b5:cd:5d:87:87:b4:b5:
                    79:4f:13:0a:cc:b0:7a:bf:8a:53:86:0a:e8:db:54:
                    88:39:6b:aa:36:35:39:a1:a4:b8:3e:4e:78:8a:34:
                    cd:98:d5:30:08:b1:cb:10:10:45:b3:24:e0:f3:06:
                    f8:44:8a:c5:c0:5e:a9:42:d2:48:fd:82:a4:3d:b2:
                    58:e6:39:f0:7d:b2:0c:e5:bb:e8:12:2d:ca:db:35:
                    3c:20:5b:15:c6:0a:d9:23:0d:6c:d0:58:75:77:fe:
                    c3:cf:46:58:bd:cc:37:03:95:8f:2e:fc:21:d4:13:
                    50:1b:dd:85:9e:15:c5:38:fb:cc:1e:31:be:a2:f1:
                    a4:79:af:c2:a0:28:64:fe:5b:e1:97:93:3c:51:9b:
                    12:63:f1:ce:bc:c1:bd:ed:c0:f5:a1:7e:67:24:c7:
                    8c:7d:91:38:e5:31:8d:fb:1a:51:7d:36:dc:72:54:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:97:2a:0d:6c:c1:26:c0:7f:97:ef:cc:fb:13:c2:fa:c4:
         95:40:f6:8a:cf:b5:b6:3c:40:10:f3:2a:30:96:cd:34:ff:1f:
         17:0e:b5:7f:6f:4c:a4:31:33:86:4a:66:7a:4f:98:d2:77:7f:
         e0:5a:13:28:80:19:a9:c9:87:e7:aa:7c:62:41:5a:8b:46:e0:
         ce:d1:06:90:d8:06:d2:32:d3:29:0b:35:78:07:93:ac:24:6c:
         47:67:0b:aa:28:85:4a:1f:9c:4c:58:bf:53:48:2d:e6:3e:65:
         b5:15:92:9c:23:44:eb:71:a1:c1:f6:14:11:ab:cc:73:48:bb:
         ec:3a:e7:03:b5:be:cb:db:16:32:61:b9:63:6c:6d:33:37:ae:
         c8:4c:69:e8:12:09:98:fc:a2:87:de:5e:d8:e3:93:cf:9d:ba:
         08:d2:6e:3f:bf:76:28:8e:4c:e3:34:6d:6c:36:d6:80:1a:74:
         30:9a:32:54:bf:6b:86:74:6f:e1:3c:eb:86:5a:c8:c4:5a:09:
         34:1f:48:4f:ce:60:07:03:d5:ae:75:1c:6b:0b:87:14:1b:91:
         1a:14:11:bd:14:1e:72:b2:72:1f:46:9c:f0:55:01:89:ad:3f:
         3b:ad:3e:d1:37:99:0b:2e:7e:a9:99:81:69:2b:05:d6:b6:20:
         04:c6:3d:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yNTA5MTYy
MTE5MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5RDdDODZCQjAxNzlD
RUNCRjdDNDcxNjdERUI3NUZDNTg0QjVFQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5yFuC4a92LXB7g7Mb/tWnA4gSmdigX+uF3EOX/Tj5rwB9zhVC
mktxrpZo9AySr4jyheFmfDmQU/Qajg6hyT4TrtNUjkCsVRWH6raCoazkruk0tc1d
h4e0tXlPEwrMsHq/ilOGCujbVIg5a6o2NTmhpLg+TniKNM2Y1TAIscsQEEWzJODz
BvhEisXAXqlC0kj9gqQ9sljmOfB9sgzlu+gSLcrbNTwgWxXGCtkjDWzQWHV3/sPP
Rli9zDcDlY8u/CHUE1Ab3YWeFcU4+8weMb6i8aR5r8KgKGT+W+GXkzxRmxJj8c68
wb3twPWhfmckx4x9kTjlMY37GlF9NtxyVJ7ZAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUmdfIa7AXnOy/fEcWfet1/FhLXsYwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9GbFNWNk5NbjVQWXRX
aFpEandnT1lJbzAwTk0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtiCXKg1swSbAf5fvzPsTwvrElUD2is+1tjxAEPMqMJbNNP8fFw61f29MpDEz
hkpmek+Y0nd/4FoTKIAZqcmH56p8YkFai0bgztEGkNgG0jLTKQs1eAeTrCRsR2cL
qiiFSh+cTFi/U0gt5j5ltRWSnCNE63GhwfYUEavMc0i77DrnA7W+y9sWMmG5Y2xt
MzeuyExp6BIJmPyih95e2OOTz526CNJuP792KI5M4zRtbDbWgBp0MJoyVL9rhnRv
4TzrhlrIxFoJNB9IT85gBwPVrnUcawuHFBuRGhQRvRQecrJyH0ac8FUBia0/O60+
0TeZCy5+qZmBaSsF1rYgBMY9sw==
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:51 2025 by rpki-client