Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File:                     U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier:          k+oWcio8t7q65VNIzUxwNG5sI3HV1v+1PNWn5RLUtFE=
Subject key identifier:   C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0D0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number:          0D02
Signing time:             Wed 30 Jul 2025 10:38:10 +0000
Manifest this update:     Wed 30 Jul 2025 10:38:10 +0000
Manifest next update:     Fri 01 Aug 2025 10:38:10 +0000
Files and hashes:         1: 4PWaK3-naPPpKMlC7XnZSi5d5rk.roa (hash: 4O3+RBdGcbnoHIwkp4BuGY7rZCtpRlna7VhhTYPc6yc=)
                          2: 5qbfWFQMEV8Jnpte8t4LSv4m8F0.roa (hash: MB8DovGhVLMt92Wvxg5JLs3SXyfm5ZuQfWynMc/DUmQ=)
                          3: 92ya2HAEtksonPTMXYpkFAqpfjU.roa (hash: YD+KmS2ykCOOl0iyh2sL17zDhgQH959X/HFE3cNdy10=)
                          4: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: Pr8zs27UyG2ltyXtnioexg7/wM+po5/Ws+Rs4nbhLpQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 22:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3342 (0xd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Jul 30 10:38:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
                    17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
                    6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
                    9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
                    91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
                    b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
                    13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
                    27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
                    d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
                    20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
                    68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
                    75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
                    8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
                    f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
                    6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
                    46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
                    98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:aa:78:af:5e:75:a3:5e:1a:62:d2:01:ab:b1:e8:ad:3d:
         5a:eb:71:e5:1e:00:04:a1:0b:a6:67:90:f7:44:38:78:63:39:
         db:fe:c3:8a:56:e9:eb:ec:5c:ab:e7:2d:20:2c:c5:25:db:b7:
         ef:64:96:bc:32:85:26:2d:c4:dc:5d:0e:71:0c:d8:e0:0f:47:
         45:b1:cf:fc:c0:db:50:18:5e:86:19:56:70:d3:22:cb:e9:cd:
         64:92:ad:a3:a8:ef:20:b2:5b:f9:b2:2d:0f:9a:83:14:41:28:
         ff:c3:f5:fc:d4:79:a8:12:e7:9b:3b:33:0b:21:75:99:dc:96:
         6d:e4:30:93:e0:78:03:6b:9a:1a:8a:ce:24:b1:be:32:47:11:
         60:79:ae:59:8d:9b:67:79:8c:98:af:da:35:3c:c1:3c:31:0e:
         c6:79:09:4b:e6:63:5d:31:9c:3b:bc:75:04:a9:8d:cd:46:07:
         91:cd:41:b6:5a:1f:fd:ed:c6:40:1d:17:5b:74:e5:f4:a1:fe:
         73:5c:2e:18:66:20:e1:10:46:ec:d5:5c:59:fb:35:d8:ba:c9:
         bb:c7:cb:41:4f:a5:c5:17:e2:a9:6a:d3:55:5a:51:7a:a4:b9:
         f1:37:10:77:b6:65:3b:f3:92:49:9e:f4:7d:01:d1:06:bd:b0:
         9a:d2:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:18:08 2025 by rpki-client