Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier: tJi8mDu43XNOtqMLvmwQdHswfn0woSH2f8EwvVDz+wg=
Subject key identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial: 1041
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number: 1038
Signing time: Sun 13 Apr 2025 09:07:09 +0000
Manifest this update: Sun 13 Apr 2025 09:07:09 +0000
Manifest next update: Tue 15 Apr 2025 09:07:09 +0000
Files and hashes: 1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: 0Be/fgJaypOkZVd/osYZrtkz90ASK5LyQSbOCnupt2o=)
2: jFOAcEZVumM_2ehoJfHlpaXcShA.roa (hash: oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 16:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Validity
Not Before: Apr 13 09:07:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
X509v3 Authority Key Identifier:
keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:47:0c:50:a2:f1:3f:bc:98:ee:83:cd:2d:a7:b3:8d:dc:a6:
49:bd:21:ba:30:db:32:5e:67:14:57:c2:7b:d6:85:15:8a:68:
22:d0:66:ef:de:bd:0b:bd:98:29:63:ec:76:c6:42:08:1d:34:
52:61:62:dd:0e:d4:9f:6e:04:f9:c7:03:07:e4:c8:48:8f:77:
9b:19:1c:8e:98:51:da:aa:69:9e:7a:2b:20:20:24:b1:8c:81:
9f:5f:32:91:69:24:1d:db:6a:48:2c:a1:2a:be:20:6c:e0:cb:
7d:9a:d8:1a:02:3c:fb:e0:43:75:69:7a:20:20:35:1f:fd:3d:
f3:59:a7:ce:3f:dc:0a:df:61:09:53:7b:77:e0:bc:e4:ae:c2:
5e:92:5d:ae:d4:45:99:34:4f:4a:c2:86:fe:27:e7:a3:5f:27:
1e:9c:a4:ae:9e:16:88:08:ce:5a:1a:85:44:13:4a:81:f6:38:
73:71:38:46:4d:31:e2:35:8e:12:ce:12:9e:eb:b2:f6:4a:5f:
38:d1:4e:2f:c9:d9:58:5f:b0:0b:f6:1e:a3:e8:67:1c:d7:27:
0d:34:a9:df:00:3a:8e:37:19:5d:14:99:76:63:65:0c:36:eb:
89:d1:6e:de:fa:8d:d8:d6:ff:db:35:ea:15:6f:17:2c:84:b2:
d5:66:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:43:03 2025 by rpki-client