Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
File:                     ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft (raw, json)
Hash identifier:          KkYshDMP7lVwfhu+eFTN8CjwIBzL5g8RgPPoXlssTfc=
Subject key identifier:   A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       049E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
Manifest number:          0483
Signing time:             Sat 25 Oct 2025 21:58:50 +0000
Manifest this update:     Sat 25 Oct 2025 21:58:50 +0000
Manifest next update:     Mon 27 Oct 2025 21:58:50 +0000
Files and hashes:         1: 1qSVSzIRpsHgGSmA5SeAv7ggJ5k.roa (hash: eNMVAIgJ6UqvGDHNfA60L+lqNF/U1PTYURc4bPZjgfM=)
                          2: 5Hqz7PYDHos_6bUOtKRQGA1jYw4.roa (hash: BRuVIBWU9Fbucmmx5YBGxUvFzTjm/Jkufh2YPu35zaI=)
                          3: ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl (hash: ltiQmMKLwVEUJ8KPBuEePzb4hJoguru+Cg44SjjiGhI=)
                          4: r3aqeWLXNk6D3kqdUORJSUrDYUo.roa (hash: /vO/CwqROCD92eW8a2kL4qHXAWLT09RRxl8I6bCg81M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Oct 25 21:58:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A37C8D4A77F4C2B841AD4DE18848975B3C3055FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:05:b3:f4:a0:db:7a:7b:a7:45:fa:a7:56:
                    13:f9:e2:2e:52:dd:9b:a1:11:65:8a:61:5a:ea:65:
                    1f:75:e6:ee:86:e2:73:a3:5c:b8:5a:c0:be:e4:27:
                    60:71:da:e1:9c:ea:65:84:26:e6:86:f1:19:9b:ee:
                    43:3d:a2:fd:c1:11:f1:99:d5:6a:a7:00:d2:55:f6:
                    5f:7e:ed:06:8b:6e:10:7b:dc:dd:98:fe:3b:03:cb:
                    62:68:ad:81:59:24:5e:8e:4c:f0:4b:01:5b:63:a5:
                    7b:06:1a:dd:67:39:aa:49:d2:74:be:b7:c0:8b:9e:
                    0b:6c:05:40:32:b1:08:bc:81:ce:d1:e4:65:77:d0:
                    3b:09:d4:6a:d5:79:8d:0a:71:2c:1b:8e:67:5c:f3:
                    1e:93:e8:30:d6:b9:3c:5f:6a:d8:9f:3a:25:0e:99:
                    36:22:fa:d6:c1:f2:b4:24:c4:67:50:e7:8e:44:88:
                    53:39:36:b6:5f:1f:7f:00:b3:cd:e7:72:d8:34:5f:
                    77:d6:43:94:46:23:93:49:79:7d:cd:d8:e4:f9:ca:
                    17:87:30:12:d5:41:77:8e:c5:12:a0:1f:6b:68:59:
                    45:a6:86:6b:f8:ee:47:d5:d9:4e:37:34:64:0a:38:
                    fc:b7:a5:df:72:9f:dd:14:40:f1:c5:8b:42:95:b3:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:cc:c6:72:9e:0d:e3:21:35:09:d1:cf:21:b6:7e:6f:1d:
         09:69:a5:fc:80:65:44:71:ba:a3:7c:f9:16:16:4c:fe:43:5d:
         a0:19:ac:01:38:10:db:90:80:2a:cf:4a:86:f4:b9:a3:ba:66:
         e2:4a:ad:aa:ac:37:f9:35:08:ee:49:2c:ab:fa:bf:95:dd:31:
         0c:3b:6a:56:45:32:bb:a7:ab:a2:b6:de:44:bf:4a:f5:5b:08:
         43:8e:a8:4d:23:aa:7d:3f:2d:b8:75:d7:f1:ed:3f:af:cd:8a:
         90:f4:d5:57:90:e3:ff:44:da:3d:76:ed:ea:d0:fb:ae:a0:40:
         5c:08:86:d0:28:50:63:92:2e:dd:94:4e:08:9a:5b:78:bc:09:
         b5:9e:9f:06:75:27:d0:80:50:9d:87:b2:03:da:03:62:e8:d5:
         5d:04:bf:fe:4a:5c:ea:83:9e:f9:98:8b:f9:ed:68:86:26:2f:
         f3:92:9e:8d:4c:34:e8:67:12:b5:ac:74:ad:63:93:22:1e:da:
         d5:6f:7a:14:c2:da:56:3c:cf:e7:cd:36:fa:d5:20:9e:64:58:
         2e:a3:95:e5:53:0c:00:1a:2d:83:48:ce:a5:84:60:75:7f:51:
         36:59:36:fb:6b:41:a7:6a:c6:13:55:0a:e1:c2:8f:bb:1c:56:
         57:00:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:23:23 2025 by rpki-client