Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
File:                     M6ZZ8X-25qUGkrJheniCJ37k-GU.mft (raw, json)
Hash identifier:          QPgIWTaRzhCZvJFo5noickPKzwsWQPfXv49SnjQDxPA=
Subject key identifier:   D0:1C:20:65:29:69:A6:7B:CC:15:3C:47:0C:13:1C:F1:8A:C5:6B:BB
Authority key identifier: 33:A6:59:F1:7F:B6:E6:A5:06:92:B2:61:7A:78:82:27:7E:E4:F8:65
Certificate issuer:       /CN=33A659F17FB6E6A50692B2617A7882277EE4F865
Certificate serial:       6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
Manifest number:          6F
Signing time:             Tue 28 Oct 2025 17:57:48 +0000
Manifest this update:     Tue 28 Oct 2025 17:57:48 +0000
Manifest next update:     Tue 28 Oct 2025 23:57:48 +0000
Files and hashes:         1: M6ZZ8X-25qUGkrJheniCJ37k-GU.crl (hash: 75g1iSAKEKVmcEgxK3drlzcb74gsYqpC3CVNvzaNr1E=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 23:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A659F17FB6E6A50692B2617A7882277EE4F865
        Validity
            Not Before: Oct 28 17:57:48 2025 GMT
            Not After : Oct  7 15:30:20 2026 GMT
        Subject: CN=D01C20652969A67BCC153C470C131CF18AC56BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:ed:64:cd:66:11:da:d3:44:0d:f0:87:f4:
                    03:f5:9d:0a:14:6d:46:01:1a:62:3c:80:c3:ed:5c:
                    f0:6a:52:58:24:a7:f1:56:4f:f6:94:91:bf:76:94:
                    30:5b:e4:f9:d3:8f:d4:6c:8a:94:5e:2c:9f:33:01:
                    51:0b:75:ff:09:d3:a8:31:a9:93:ea:57:cd:70:ab:
                    e1:33:cf:9d:9d:9b:43:99:c0:da:c9:f7:7e:3c:f0:
                    85:9e:e6:f9:f8:dd:9c:46:58:f7:0c:e7:f3:a8:44:
                    8b:ba:ed:0f:47:6c:cf:d8:a0:54:ac:d7:8e:2e:c0:
                    98:6c:3d:fb:43:d4:c4:b5:15:d8:61:cd:9e:dd:b4:
                    6c:3c:76:6a:13:d9:2b:8a:c9:17:40:bb:ca:10:b6:
                    e5:a8:57:e1:47:83:34:3c:21:e4:c9:4b:5d:99:f5:
                    3a:ef:5d:47:8a:39:39:0a:83:b6:1a:1d:d9:8e:42:
                    51:06:36:c2:6c:b3:be:57:2c:f4:62:e5:65:5b:62:
                    dc:c7:31:a4:63:ba:60:a5:53:20:ec:08:a6:0d:59:
                    71:2d:32:4f:77:c8:3a:30:e2:4c:32:11:f8:b9:68:
                    21:be:ee:59:b9:c0:94:5b:b1:ec:e8:49:17:91:aa:
                    d8:72:6a:a7:78:6e:1b:e3:ac:07:01:64:9c:7e:65:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:20:65:29:69:A6:7B:CC:15:3C:47:0C:13:1C:F1:8A:C5:6B:BB
            X509v3 Authority Key Identifier:
                keyid:33:A6:59:F1:7F:B6:E6:A5:06:92:B2:61:7A:78:82:27:7E:E4:F8:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:b1:4d:9a:dc:da:65:17:1a:f8:c5:5b:e8:a1:f5:6f:7c:
         47:fe:7c:84:4c:d6:af:68:62:c5:7a:a4:87:31:f5:19:b6:0e:
         ba:28:1f:fe:73:5a:2b:4a:a8:a1:bd:fc:d2:28:6f:49:0b:e3:
         83:54:53:63:b4:1a:1b:9c:42:3e:1f:c0:2c:07:ab:95:e9:5e:
         0e:58:6a:de:c1:25:09:cb:96:23:21:24:db:fd:1d:85:67:f9:
         5c:41:8e:e9:28:a7:f5:38:91:12:ec:1e:ff:2f:03:d7:bf:22:
         84:b5:29:ce:5c:03:6e:ab:f3:b0:43:c6:04:6f:ee:0e:aa:04:
         5b:8e:d5:8a:6c:31:72:55:4a:7f:bd:68:d6:dd:9e:66:fb:fb:
         9f:35:56:de:29:66:d3:33:6b:ea:1f:79:01:6e:03:51:ae:40:
         9a:93:89:93:fa:6e:b6:22:75:7f:6a:ce:f1:75:3a:4a:d8:ec:
         aa:2c:03:41:d8:9e:7a:31:9c:dc:96:ca:22:5c:eb:e9:9e:d8:
         aa:6a:3a:2b:77:99:68:82:7e:57:a6:b9:ff:60:b1:42:30:05:
         d4:09:4f:d3:2c:1c:c3:bb:1a:71:6f:69:47:c3:82:f1:65:b3:
         25:d5:f6:a1:51:3c:96:a1:e4:a3:1f:42:b2:06:e2:4d:1a:11:
         83:85:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:12:23 2025 by rpki-client