Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
File:                     eHAEuCyj0Lecb40m6oPUwvXklJI.mft (raw, json)
Hash identifier:          MriqQia6V5kbhFXJKh3Gnz2ddrKeW6lmymqe1JGur+o=
Subject key identifier:   6F:BC:00:24:5A:0A:32:AF:54:D5:3D:9A:FF:EA:AA:6F:3E:76:56:B0
Authority key identifier: 78:70:04:B8:2C:A3:D0:B7:9C:6F:8D:26:EA:83:D4:C2:F5:E4:94:92
Certificate issuer:       /CN=787004B82CA3D0B79C6F8D26EA83D4C2F5E49492
Certificate serial:       0CEE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
Manifest number:          0CEE
Signing time:             Sun 01 Jun 2025 22:26:43 +0000
Manifest this update:     Sun 01 Jun 2025 22:26:43 +0000
Manifest next update:     Tue 03 Jun 2025 22:26:43 +0000
Files and hashes:         1: eHAEuCyj0Lecb40m6oPUwvXklJI.crl (hash: fzWALthJIeEjBVB8fpzw4R689ZoK1/iFnGFGK7b0QL4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 09:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787004B82CA3D0B79C6F8D26EA83D4C2F5E49492
        Validity
            Not Before: Jun  1 22:26:43 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6FBC00245A0A32AF54D53D9AFFEAAA6F3E7656B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:55:09:aa:95:b2:0e:f8:ed:1b:8e:71:0b:
                    4a:fe:94:78:23:8c:2f:36:1a:0c:6a:1e:7d:32:27:
                    9d:3e:30:bf:3d:34:53:d2:34:4f:7c:05:25:d0:1f:
                    8d:76:6c:23:8a:b8:fc:fd:bb:48:83:b3:9d:6f:58:
                    ce:10:29:1b:63:15:0f:15:aa:e8:13:fa:11:93:17:
                    d5:56:a7:0f:76:5b:6e:86:8b:83:61:03:3f:1a:cd:
                    9e:98:f7:7b:4d:36:1a:11:0d:d6:4e:a1:87:f8:da:
                    df:07:20:d8:cc:ac:c8:58:c9:2c:55:d2:2a:a7:52:
                    d6:ca:99:fb:a1:fb:9a:56:bb:70:b3:33:0e:20:ad:
                    83:5f:4d:9c:a7:ed:ac:28:67:a7:9c:a7:81:91:6c:
                    51:58:5c:ca:78:bb:2b:b9:5c:01:c8:09:7e:69:35:
                    ad:35:05:a1:ff:03:a6:51:72:6f:19:36:a1:63:ce:
                    71:d5:77:f2:f2:73:99:ad:55:c9:38:4a:85:91:36:
                    6f:b7:5f:b6:c8:92:4b:ea:a8:e9:3e:5d:ed:1f:23:
                    17:60:ed:49:8a:19:04:48:88:df:de:27:53:b4:c8:
                    8a:93:78:85:00:03:32:d6:b1:ad:79:1b:22:06:1a:
                    f8:51:59:cb:df:1b:6f:13:3e:20:7d:11:0c:d8:ee:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:00:24:5A:0A:32:AF:54:D5:3D:9A:FF:EA:AA:6F:3E:76:56:B0
            X509v3 Authority Key Identifier:
                keyid:78:70:04:B8:2C:A3:D0:B7:9C:6F:8D:26:EA:83:D4:C2:F5:E4:94:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:d0:2b:07:bd:a9:2d:22:ac:c7:a6:2d:40:b7:19:9b:24:
         b6:dc:d7:c1:85:c8:6f:c2:dd:10:6e:44:c8:ce:3c:ed:46:d5:
         0b:78:4e:80:fa:c5:56:38:1d:0f:c2:62:49:61:13:31:84:71:
         d3:b4:ce:f2:c3:94:19:6a:5b:9c:40:4b:5a:e6:b9:f8:0e:77:
         3a:34:42:33:62:8a:99:8d:82:4c:2c:ff:43:8f:79:c5:78:8d:
         01:96:e0:41:da:83:84:d9:d0:81:e2:d4:28:ab:a8:dd:c7:5e:
         cd:b2:1d:2d:95:aa:a5:4b:54:34:44:d6:f8:9a:ee:59:ea:96:
         26:0f:6d:4f:db:6f:a1:24:72:4d:9d:c0:8c:6d:1f:db:be:c9:
         2c:e9:f6:65:89:36:03:e6:0d:21:b2:1d:54:ea:63:78:ac:d3:
         a9:e9:50:6c:19:73:e7:d2:fd:0e:22:23:95:d4:ee:df:ab:fd:
         56:45:28:ab:29:f8:9c:d0:6c:65:70:58:88:7a:c9:17:90:ec:
         4e:66:1e:c7:f1:41:93:df:bf:3a:db:94:19:47:47:f7:1c:9c:
         d1:71:72:32:89:d7:75:5e:c3:47:1a:46:27:a8:ee:c4:7a:bd:
         57:ba:9f:69:14:25:1e:55:e6:f2:fd:04:a7:c6:08:77:e3:28:
         3a:75:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:16:37 2025 by rpki-client