Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft
File:                     rDLTT78BAXweZ__iZz-qYiXEQSI.mft (raw, json)
Hash identifier:          t+EHXEHN7+mXDNG6ZPjk+iLjlKOSAsih9806rqfhz0w=
Subject key identifier:   48:42:5C:6E:D3:CC:F1:90:05:22:31:4C:BC:23:9E:E9:92:78:86:07
Authority key identifier: AC:32:D3:4F:BF:01:01:7C:1E:67:FF:E2:67:3F:AA:62:25:C4:41:22
Certificate issuer:       /CN=AC32D34FBF01017C1E67FFE2673FAA6225C44122
Certificate serial:       0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft
Manifest number:          0E
Signing time:             Thu 03 Jul 2025 08:01:46 +0000
Manifest this update:     Thu 03 Jul 2025 08:01:46 +0000
Manifest next update:     Thu 03 Jul 2025 14:01:46 +0000
Files and hashes:         1: rDLTT78BAXweZ__iZz-qYiXEQSI.crl (hash: sNQzUZXQGFvsmvLY0W+hD95HjPNI01UGCzRrnNfTB0M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 12:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC32D34FBF01017C1E67FFE2673FAA6225C44122
        Validity
            Not Before: Jul  3 08:01:46 2025 GMT
            Not After : Jul  1 00:43:49 2026 GMT
        Subject: CN=48425C6ED3CCF1900522314CBC239EE992788607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:09:5b:c9:1c:1e:c7:65:d8:5e:d5:12:9d:1b:
                    09:a7:5e:13:15:13:e8:ba:45:22:66:27:30:1f:c7:
                    6b:7e:a5:14:aa:e5:ec:20:f7:0c:85:6c:60:48:60:
                    2a:fc:3b:83:8a:92:79:45:2f:12:6c:0c:0f:15:a5:
                    0a:35:dd:d2:19:d4:70:71:04:67:4c:5a:cb:f3:8e:
                    f0:d4:f6:f3:2a:57:79:49:49:c1:d2:4c:f7:03:1b:
                    6a:d5:aa:9d:f8:5b:5d:51:f6:2f:3d:f1:82:86:fe:
                    f5:7c:23:90:99:c7:6e:79:f3:5f:ae:0b:cb:8c:a5:
                    88:44:cd:33:ac:df:0c:2e:ab:2c:db:4b:74:ea:58:
                    42:64:07:d0:64:fc:54:c1:6c:c2:17:50:78:02:c6:
                    74:bf:ad:ba:4e:d4:e6:7a:5d:f7:b6:17:51:d0:88:
                    6c:fa:77:85:f9:76:b8:82:c5:2e:fe:8e:70:30:bd:
                    00:ba:8c:30:38:55:d0:4c:5b:f3:cd:15:cb:a0:7d:
                    87:eb:40:c8:47:c7:a6:5a:9d:98:22:b4:26:e1:f1:
                    95:54:a4:6f:50:ef:f7:8f:22:8a:45:cd:c7:e5:88:
                    21:4d:9f:c3:c6:e8:f9:3e:ba:33:7e:fa:b0:43:c3:
                    07:9f:e2:07:ff:d8:e5:5f:1c:fa:54:dd:41:ae:6c:
                    5a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:5C:6E:D3:CC:F1:90:05:22:31:4C:BC:23:9E:E9:92:78:86:07
            X509v3 Authority Key Identifier:
                keyid:AC:32:D3:4F:BF:01:01:7C:1E:67:FF:E2:67:3F:AA:62:25:C4:41:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:b4:b7:6c:b8:40:54:93:fe:4d:74:79:18:72:2f:12:c9:
         bc:bc:d3:1d:65:ea:8a:cc:a8:ff:ed:46:d8:61:e7:0f:8e:40:
         0c:25:38:2e:e3:22:1f:f9:01:a8:e4:00:e9:d9:04:5b:f9:28:
         55:93:10:84:ca:fd:a1:92:27:b7:04:3f:86:0b:4f:5b:cd:83:
         61:0b:ed:9b:78:a4:05:37:52:21:9a:c7:c7:86:e1:24:f1:28:
         30:de:d6:c8:ef:8d:49:77:da:87:b6:4d:ab:ad:6a:6b:57:33:
         a2:23:71:de:71:da:f9:e9:8d:4f:1b:76:2d:2c:6c:28:2c:ba:
         97:39:23:89:ff:7b:d4:ad:54:4f:f9:91:92:33:2e:d1:b7:8c:
         44:8d:97:35:0d:2c:05:ad:56:35:4c:41:a1:7d:e7:3e:22:f2:
         51:8b:8d:04:05:7d:37:a4:ab:7b:6c:9b:c1:c1:2e:ba:b2:fd:
         66:6b:f6:8d:a0:69:54:4b:9d:07:79:1a:1c:e6:d6:44:55:d6:
         c4:8d:dc:e4:59:fb:79:b9:4d:51:ae:c7:d7:08:60:5a:fb:be:
         fb:eb:d6:dd:45:70:83:fc:a1:3e:ea:c8:2e:37:f3:e0:fe:0d:
         d9:e9:bb:a4:f9:4c:5e:fe:0f:4a:39:d3:12:56:dd:2a:81:bf:
         fb:b5:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:41:13 2025 by rpki-client