Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
File:                     lrigjnWckCEXMt7oT9S-JZ2qD_0.mft (raw, json)
Hash identifier:          zN6sgoOZThr+9/pLWP9We6kNs6GF347dnWP2Jsxuq9E=
Subject key identifier:   E4:73:CF:78:AA:BA:F6:F3:BE:71:70:50:9F:98:58:07:55:FB:CB:90
Authority key identifier: 96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD
Certificate issuer:       /CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD
Certificate serial:       12
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
Manifest number:          0F
Signing time:             Thu 18 Sep 2025 03:47:59 +0000
Manifest this update:     Thu 18 Sep 2025 03:47:59 +0000
Manifest next update:     Thu 18 Sep 2025 09:47:59 +0000
Files and hashes:         1: 8SDdfWWdA2UKWED7VTFb-Jl53qk.roa (hash: 3TropPm4x94A2igPbqGZDYqbWA5IKl6TPjf8pTJ1xac=)
                          2: _S-0ytL0WjOaLeYffXv0yRPOwKE.roa (hash: 9JMMDqWGlV8+ilgzZgbJ2RGf79H5oFWYSPPlOtT3U/8=)
                          3: hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa (hash: 0KSGzv+Oi6FSZ6T88iHICyfFFmvh2P557/puOMNwYNA=)
                          4: lrigjnWckCEXMt7oT9S-JZ2qD_0.crl (hash: oUXJViB3YLGIKpfbNxI9ol0p4S1SXqCQcNG7u7K3syE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 08:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD
        Validity
            Not Before: Sep 18 03:47:59 2025 GMT
            Not After : Sep  9 15:30:25 2026 GMT
        Subject: CN=E473CF78AABAF6F3BE7170509F98580755FBCB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:de:e5:a4:8c:43:88:e7:50:30:2e:ca:1f:
                    79:26:be:f1:7d:1e:03:56:22:96:86:02:6a:31:8d:
                    53:2d:e2:f3:53:c3:dd:1d:85:a4:bd:51:55:35:41:
                    05:e1:0a:87:1e:16:b9:03:43:5e:dd:0e:47:7c:d4:
                    37:f2:7c:29:24:d6:d9:a8:72:a8:75:b6:6b:d7:32:
                    05:75:bc:c7:8a:77:8b:85:43:3c:0d:91:fb:10:a7:
                    c5:06:ac:73:72:d1:d2:1b:2a:03:2f:9d:93:7b:28:
                    99:6b:e7:6a:a2:d3:1b:e4:ea:ae:cf:3e:34:a5:d6:
                    d7:3b:b9:b5:fb:b7:66:c6:89:78:67:87:95:55:18:
                    5e:f3:6a:7d:3a:7c:48:73:d1:87:21:f4:f4:54:15:
                    07:5f:44:23:b4:f2:06:26:69:96:22:19:0e:d7:fc:
                    7d:9d:53:71:59:cb:b5:a3:73:76:b7:ed:ea:74:08:
                    62:fd:ff:4d:5e:eb:e6:eb:ca:60:7a:0e:00:94:00:
                    d2:9c:09:43:a2:49:ec:85:f3:4b:f8:7c:fb:97:83:
                    8b:21:cb:3a:0d:48:0d:93:52:c3:76:fe:53:5f:9f:
                    a2:ff:f1:69:4a:4f:ae:02:56:92:ef:c4:34:85:02:
                    59:1e:ee:1d:bd:e9:b1:d5:f9:a6:5a:89:28:15:a6:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:CF:78:AA:BA:F6:F3:BE:71:70:50:9F:98:58:07:55:FB:CB:90
            X509v3 Authority Key Identifier:
                keyid:96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:18:59:ea:7f:ba:00:da:58:82:8e:fd:d5:da:bf:85:34:e2:
         43:f8:15:19:f0:e2:9d:4c:f9:d7:c1:8a:56:12:b1:3b:35:55:
         bb:75:77:90:b1:4e:91:22:56:73:17:65:95:79:4d:82:68:11:
         ad:86:c5:04:f7:8c:71:93:e4:ed:af:32:84:a2:9a:f9:e4:a1:
         c1:a8:d5:ae:31:b6:fa:a0:59:2a:a9:7e:da:5b:d3:f5:94:9d:
         02:60:80:68:a1:a4:24:95:c2:61:bf:1d:d6:33:24:e8:b9:a9:
         78:99:0e:4b:25:c6:33:c0:73:4b:5d:58:34:c5:ba:10:d5:d1:
         c9:08:f9:a5:10:0f:69:e0:7b:12:fe:fa:44:92:42:b9:1a:d9:
         88:a3:e6:c8:52:b6:ad:8a:e9:b0:bc:0c:08:b0:76:48:79:28:
         fc:f5:10:6a:f0:82:6d:30:cd:65:f6:d8:4a:a7:45:cc:21:ec:
         73:1f:b2:1c:f2:4d:b1:24:32:90:f7:3c:4b:2f:52:99:a3:5b:
         ad:06:f6:f7:1e:87:35:7d:3e:83:13:27:a5:ce:d3:20:40:69:
         af:25:f9:3a:bb:dc:0a:a4:cc:10:85:65:30:e0:9c:6c:56:af:
         61:63:74:10:25:06:eb:d2:fd:4b:d4:10:aa:51:fe:81:48:35:
         7f:9b:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:40:53 2025 by rpki-client