Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft (raw, json)
Hash identifier:          NkarVG5Wc7YbnvhaMRT5TkQbSsht7PuMPIHfBHFp6Bo=
Subject key identifier:   7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
Authority key identifier: F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Certificate issuer:       /CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
Certificate serial:       0D2F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
Manifest number:          0D2F
Signing time:             Tue 16 Sep 2025 21:21:33 +0000
Manifest this update:     Tue 16 Sep 2025 21:21:33 +0000
Manifest next update:     Thu 18 Sep 2025 21:21:33 +0000
Files and hashes:         1: 8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl (hash: p8KlGZZbbYBai/0+gt9ZtvlT2u9SUirnIAoFhhrK6JA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 13:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Validity
            Not Before: Sep 16 21:21:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7AF7DD841A670383BA74773BAD793872711D1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:83:9f:7f:46:07:9e:97:a3:c4:cc:14:a4:
                    ff:7c:6a:47:ec:c0:40:ba:78:44:a2:df:54:4e:16:
                    c5:36:a7:76:5b:f9:27:f9:d2:34:c8:09:e4:8a:12:
                    f3:c9:79:a0:b6:40:85:13:a6:c8:cb:37:cf:7a:4b:
                    3c:de:49:fe:f7:7c:85:df:4f:9e:8b:0c:c5:6b:45:
                    da:be:ed:f4:27:33:3a:5a:aa:e1:f8:ea:25:f0:38:
                    34:a7:cf:42:96:80:17:0f:e7:ef:bb:fd:07:ae:97:
                    59:db:7d:f5:41:6a:7e:b5:3f:66:83:e0:2a:dd:0b:
                    58:88:08:2c:d6:9e:ec:a9:13:bc:21:b8:cf:7f:81:
                    c0:c6:21:94:bd:f6:81:56:75:b9:93:87:7e:65:ec:
                    9a:e3:bf:66:e2:26:52:a7:ce:58:5f:d7:5a:c1:0d:
                    cc:e5:f3:07:c9:b0:05:1e:13:a0:82:a4:7d:a6:61:
                    50:d2:04:75:6f:55:b1:96:0f:3c:a5:a8:ff:3a:45:
                    b2:53:87:98:45:0e:16:72:e4:fb:cd:b3:ef:8a:4d:
                    d0:42:1e:d5:33:8b:d6:91:78:8e:6f:75:a4:37:6f:
                    33:6e:73:52:79:7b:3a:7d:71:2e:23:94:04:28:69:
                    43:a8:33:75:dd:4d:f9:cb:e5:cc:3d:43:47:dd:f4:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
            X509v3 Authority Key Identifier:
                keyid:F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:f7:dd:91:87:40:56:a7:f0:39:f4:33:ca:08:32:d9:6e:
         2b:b5:ff:3a:ba:5a:bf:67:4d:6e:0c:ad:24:7b:9a:d8:85:7c:
         4a:5b:8a:86:e4:09:ab:a2:4c:32:f6:d2:7c:0b:b0:12:e9:f3:
         49:af:92:d5:48:43:b7:33:8e:ee:3c:dd:53:5d:49:28:dd:20:
         37:70:28:c4:49:e2:da:87:53:51:47:95:be:bc:66:a4:d8:d5:
         c7:b9:ca:39:37:ed:5d:39:b1:e8:51:69:b9:6f:92:89:da:5b:
         5e:09:9e:3d:4f:c5:ef:c4:32:fa:99:b1:85:cb:a1:17:36:1b:
         66:01:7f:56:6e:60:2d:31:31:2d:88:fd:fa:fa:07:c2:21:97:
         6b:14:80:bf:05:11:57:51:be:ab:a7:66:1f:72:c1:d1:4f:c8:
         f2:13:13:a8:d9:f4:18:ab:fa:d8:de:ec:0d:91:0e:e9:f2:d5:
         8f:3c:ae:d8:23:97:db:c2:7d:69:6e:56:c1:ab:86:61:99:6c:
         d2:90:78:32:11:e6:d6:dc:4e:79:d4:0b:52:29:8d:18:f1:a8:
         16:d7:0f:dc:30:6f:8b:5b:8f:0e:0c:f3:e4:37:8f:98:78:cd:
         36:98:5d:d5:5e:fb:17:66:f2:dc:65:0e:73:73:fe:06:8a:f5:
         32:e8:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:32:37 2025 by rpki-client