Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
File:                     FlSV6NMn5PYtWhZDjwgOYIo00NM.mft (raw, json)
Hash identifier:          52yz9icIsVXvBET4vErhObMBuXfyOvW8lmyBC9BzU54=
Subject key identifier:   99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0F99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
Manifest number:          0F35
Signing time:             Sun 01 Jun 2025 21:55:22 +0000
Manifest this update:     Sun 01 Jun 2025 21:55:22 +0000
Manifest next update:     Tue 03 Jun 2025 21:55:22 +0000
Files and hashes:         1: FlSV6NMn5PYtWhZDjwgOYIo00NM.crl (hash: 3A3+oMTpY4z4B9XAwmVnOj0a/94/bGfyMQqRGgzQAvQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 09:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3993 (0xf99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Jun  1 21:55:22 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=99D7C86BB0179CECBF7C47167DEB75FC584B5EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:5b:82:e1:af:76:2d:70:7b:83:b3:1b:fe:
                    d5:a7:03:88:12:99:d8:a0:5f:eb:85:dc:43:97:fd:
                    38:f9:af:00:7d:ce:15:42:9a:4b:71:ae:96:68:f4:
                    0c:92:af:88:f2:85:e1:66:7c:39:90:53:f4:1a:8e:
                    0e:a1:c9:3e:13:ae:d3:54:8e:40:ac:55:15:87:ea:
                    b6:82:a1:ac:e4:ae:e9:34:b5:cd:5d:87:87:b4:b5:
                    79:4f:13:0a:cc:b0:7a:bf:8a:53:86:0a:e8:db:54:
                    88:39:6b:aa:36:35:39:a1:a4:b8:3e:4e:78:8a:34:
                    cd:98:d5:30:08:b1:cb:10:10:45:b3:24:e0:f3:06:
                    f8:44:8a:c5:c0:5e:a9:42:d2:48:fd:82:a4:3d:b2:
                    58:e6:39:f0:7d:b2:0c:e5:bb:e8:12:2d:ca:db:35:
                    3c:20:5b:15:c6:0a:d9:23:0d:6c:d0:58:75:77:fe:
                    c3:cf:46:58:bd:cc:37:03:95:8f:2e:fc:21:d4:13:
                    50:1b:dd:85:9e:15:c5:38:fb:cc:1e:31:be:a2:f1:
                    a4:79:af:c2:a0:28:64:fe:5b:e1:97:93:3c:51:9b:
                    12:63:f1:ce:bc:c1:bd:ed:c0:f5:a1:7e:67:24:c7:
                    8c:7d:91:38:e5:31:8d:fb:1a:51:7d:36:dc:72:54:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:01:08:f9:62:0f:40:3e:52:52:f2:26:fa:32:b1:bd:60:19:
         63:6a:69:51:3c:90:50:e3:1f:0d:5c:be:b8:b9:79:5f:b1:fd:
         62:07:bc:e8:c9:1a:e8:0c:3b:ed:c8:03:05:89:fb:a7:e7:4b:
         cc:59:45:7b:78:11:ef:1f:71:97:54:ee:f4:f0:04:19:f4:a4:
         a1:34:5d:9a:4b:9f:0a:7c:e2:dc:c9:0b:9f:2b:97:f4:a8:c5:
         59:4c:31:9f:68:a0:0d:26:29:4f:3b:4f:aa:3a:88:c3:86:f4:
         e1:2a:5a:be:f0:1c:c0:b0:60:47:42:c0:a9:b9:8f:1e:a6:7d:
         4e:a2:6c:75:dc:b7:98:6d:8c:24:66:b4:1b:ac:2b:2a:98:96:
         be:0f:77:ee:5a:95:3c:98:de:4a:db:31:68:db:c8:f3:49:64:
         b2:2c:43:b1:e0:ae:e8:ba:54:91:bf:25:b4:fb:59:8b:df:4e:
         f0:b8:6b:de:57:0b:2b:af:0d:df:bc:ab:8f:c6:01:f3:08:15:
         e6:c6:d9:e7:20:1f:0a:92:ea:28:c8:c1:9e:f6:d0:c9:18:df:
         2b:87:c2:fd:85:04:50:81:bf:8e:ed:d4:55:75:1e:7c:ac:b9:
         5f:f1:ea:89:ff:98:c0:d5:98:e6:04:21:87:89:ff:2d:24:b2:
         3c:d9:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:10:45 2025 by rpki-client