Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
File:                     7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json)
Hash identifier:          HG7OD9WjxSduPm8xRY/CapB+Cj0W/Ylzlralp3RvL0g=
Subject key identifier:   07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61
Certificate issuer:       /CN=EE38A36922AC11840DB4BB27D1B0349760598761
Certificate serial:       02D7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
Manifest number:          02D7
Signing time:             Sun 01 Jun 2025 21:57:01 +0000
Manifest this update:     Sun 01 Jun 2025 21:57:01 +0000
Manifest next update:     Tue 03 Jun 2025 21:57:01 +0000
Files and hashes:         1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: XbiUf8YwG9k7YtNrkG+dJCtc573HkCJTpLPXbq2Ass8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 09:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761
        Validity
            Not Before: Jun  1 21:57:01 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77:
                    59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2:
                    c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38:
                    ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81:
                    4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14:
                    fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64:
                    1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43:
                    ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2:
                    87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38:
                    87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca:
                    07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5:
                    15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c:
                    df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0:
                    78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43:
                    5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b:
                    95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da:
                    2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
            X509v3 Authority Key Identifier:
                keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:2a:bf:b5:22:0e:84:27:61:2b:7d:02:2f:cd:5b:50:d9:
         2b:1f:9f:82:53:ba:da:2c:5c:1f:cd:f7:77:38:d5:41:98:b9:
         86:0b:00:b2:70:7b:d0:5e:b0:c8:cc:08:ad:cc:f6:8e:4f:9f:
         31:d5:2a:05:6e:34:42:de:ba:e6:dd:02:53:e1:7e:a4:ed:fe:
         9b:db:17:6f:b5:ad:16:4d:95:2a:9f:2d:1f:79:38:0d:63:fc:
         e0:c6:de:dc:9c:c3:82:bc:c8:62:c4:b4:2f:ae:3b:47:1f:8f:
         7e:bf:60:b8:a4:50:53:4d:86:83:de:12:5b:ef:51:f3:66:0a:
         dc:3e:f9:cc:0f:9d:02:51:bd:ec:f7:aa:d9:be:ec:97:f9:37:
         1c:69:24:1e:66:8b:e0:af:d1:1d:13:68:57:fc:69:d1:96:88:
         81:5b:57:2a:a7:7d:52:27:53:01:d2:f0:7b:2c:ee:b6:21:e1:
         ef:ed:50:e1:18:e9:46:96:75:7f:19:ea:df:b3:eb:4c:8e:85:
         f8:18:e3:54:85:4d:cc:e3:f9:28:ba:cb:5d:5b:45:0e:44:83:
         4c:32:26:55:1c:5d:31:ad:71:48:75:b0:eb:ed:0b:98:d3:b6:
         88:e1:41:8b:37:dc:a0:66:cc:14:3a:e8:18:d6:aa:e9:5e:a3:
         cf:31:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:10:39 2025 by rpki-client