Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.mft
File: 6Vlz64b1l8rmEsZ5Ke2TUucLVSg.mft (raw, json)
Hash identifier: hMPII3aCgqHiMpktprD3jy4t0Fe2iOsjplnRsHZPG7Y=
Subject key identifier: D2:0E:5E:61:35:09:9A:7A:3F:FB:3A:68:E3:73:62:36:DE:A3:3E:39
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Certificate issuer: /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial: 1233
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.mft
Manifest number: 1227
Signing time: Sat 26 Apr 2025 21:51:22 +0000
Manifest this update: Sat 26 Apr 2025 21:51:22 +0000
Manifest next update: Mon 28 Apr 2025 21:51:22 +0000
Files and hashes: 1: 4T8U9V7O6LlSbh6GHe8mLF5AAog.roa (hash: 6sPJUo9QaCPAtJ2I14BU6CclX9bNH5AhjyLHEkpXBq0=)
2: 6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl (hash: WccVjDsypIGRzs6zWDB7OZF+0pIETtJ0ragDh5WQtcI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 06:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4659 (0x1233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
Validity
Not Before: Apr 26 21:51:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D20E5E6135099A7A3FFB3A68E3736236DEA33E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:a3:ba:84:76:9f:28:c7:02:f2:7f:87:ee:
12:ae:c0:f9:b1:c7:f0:6d:5c:bd:2c:47:0c:4e:db:
9b:51:47:a8:30:b7:21:05:19:68:94:37:94:4a:ce:
c3:72:b8:ee:61:7c:3f:73:d8:ab:a6:23:96:ca:20:
88:dc:30:ad:a4:8b:6b:62:d2:6a:5a:00:e2:5c:6d:
6d:b0:9c:93:66:fe:f2:02:90:69:97:95:b1:d4:51:
2a:28:cc:b8:43:80:99:b1:05:a9:0c:d5:30:26:82:
38:db:3e:bb:43:d8:11:e2:8f:a4:b2:34:dc:23:a7:
d4:e5:3d:6e:eb:6d:55:13:1e:ce:94:20:5c:e8:8e:
6d:3e:d7:9c:58:0b:27:a6:b7:ad:80:b5:a9:43:58:
a7:0e:c6:28:4f:ac:bb:25:3c:b8:ff:56:67:08:3a:
a7:33:e5:24:43:c2:f7:9c:30:af:e8:8c:9a:de:93:
76:16:d4:dd:53:bd:6e:d8:21:ce:45:ac:ba:35:de:
b5:a9:a7:08:94:42:ea:38:07:2f:36:99:e6:4b:ad:
47:26:83:b3:65:32:37:e3:6f:08:ea:3e:b0:0b:53:
93:f6:33:cc:06:f6:76:87:83:c0:d5:c6:96:a7:d1:
7c:15:6a:72:5a:e7:66:5e:ff:75:4c:0e:85:02:52:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:5E:61:35:09:9A:7A:3F:FB:3A:68:E3:73:62:36:DE:A3:3E:39
X509v3 Authority Key Identifier:
keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:0a:ff:ea:c8:04:c8:98:2c:17:d6:c7:97:78:2e:7b:b3:
7c:76:fb:06:59:ef:64:68:a7:8d:e2:11:1a:f0:f9:8a:4a:09:
df:4d:0b:ee:f5:1e:4c:2b:96:80:68:b0:f4:46:4d:24:2a:8e:
38:b8:c7:84:73:e7:57:93:3c:06:20:f8:d5:ac:eb:06:a6:43:
b7:44:29:91:33:1d:30:29:23:9e:8e:36:f9:30:a7:61:06:63:
ad:f1:4b:2c:48:31:62:b3:f0:bf:01:4c:af:a4:7b:ac:ed:5b:
2a:d3:b4:da:3d:9e:0a:f4:8a:97:49:51:95:2d:1d:66:29:ba:
22:69:55:fc:0e:49:c3:18:93:98:c6:ca:cb:54:ea:33:5c:82:
b8:4b:d1:cd:01:51:ca:e4:7a:3a:da:5b:a0:25:bb:29:e4:24:
52:8d:ba:1b:3f:6c:6f:f1:9a:8e:96:e9:5b:26:f8:93:fe:d5:
bc:6b:e3:61:89:6a:33:bf:53:15:29:42:fc:a7:b8:4c:8f:f2:
2c:e2:eb:05:46:f9:9d:c3:6a:23:dc:a9:6a:97:d1:84:63:de:
36:60:0e:00:a0:84:dc:08:8a:89:f8:17:6b:63:93:94:77:86:
a0:5b:99:1f:b6:9f:69:04:db:56:5c:3f:76:3b:e4:81:1e:3d:
a8:2a:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:16:25 2025 by rpki-client