Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File:                     Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier:          5UqECSP5Kz1SUr4sjM3Gi9Q6nKbIY6MI2XTGQ0zbAgI=
Subject key identifier:   BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       1089
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number:          1080
Signing time:             Wed 30 Jul 2025 10:07:27 +0000
Manifest this update:     Wed 30 Jul 2025 10:07:27 +0000
Manifest next update:     Fri 01 Aug 2025 10:07:27 +0000
Files and hashes:         1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: 2BAQ0Ds+WwmZx85uFaf/SZCSbdN9avkorswHxzGhvYY=)
                          2: jFOAcEZVumM_2ehoJfHlpaXcShA.roa (hash: oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 22:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4233 (0x1089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Jul 30 10:07:27 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
                    39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
                    c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
                    ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
                    fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
                    13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
                    15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
                    9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
                    ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
                    92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
                    82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
                    99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
                    39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
                    c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
                    02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
                    08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
                    80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:b1:7a:a9:be:c9:fb:73:a4:b8:4a:39:c9:e5:86:e1:8e:
         a6:39:4c:74:68:f2:12:f5:fe:b8:df:a3:2d:1f:9f:92:b0:aa:
         12:9b:33:40:62:4c:88:c0:c9:b0:b5:13:d3:99:de:ef:cd:7b:
         d1:b7:6f:ef:2a:79:0f:47:9d:2e:72:72:7a:fc:4d:62:88:ce:
         60:4c:ed:bc:d8:e2:a6:c9:45:52:4f:f6:17:12:56:4b:dd:58:
         c1:ff:9f:3d:0b:b5:12:22:21:9f:ce:77:fe:07:f5:f3:ed:19:
         bc:da:e9:8f:43:26:9f:b0:4c:9b:3a:df:7a:a0:88:e0:57:cc:
         37:58:94:e8:ce:0a:44:5b:e1:13:d4:8f:0e:d5:1e:32:63:8a:
         32:a4:c5:4d:58:7d:f8:55:f9:99:57:26:db:46:c8:d0:95:c7:
         fa:4d:a2:95:8d:6b:0e:f3:03:cd:25:2d:47:2a:7b:02:1c:79:
         a1:f6:df:f3:c7:05:83:73:6a:95:7c:93:91:a8:5d:15:56:c8:
         dd:c1:75:04:9c:50:eb:97:ef:9d:f5:85:68:3f:5c:44:1f:bd:
         66:da:5e:be:37:7c:2d:66:d7:20:a0:cd:81:78:1e:80:34:50:
         3b:7f:b0:16:6a:aa:45:c5:95:56:de:f2:dd:55:21:46:b4:a3:
         a7:39:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:16:36 2025 by rpki-client