Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
File:                     5f38rnFoBdOTzrEk62PtHC37t3w.mft (raw, json)
Hash identifier:          yadv5jjx2aFZSBblX9Cv/zONyWiewi6m/KunHvGo7ek=
Subject key identifier:   A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
Authority key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C
Certificate issuer:       /CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
Certificate serial:       0D09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
Manifest number:          0D09
Signing time:             Sat 17 May 2025 21:22:55 +0000
Manifest this update:     Sat 17 May 2025 21:22:55 +0000
Manifest next update:     Mon 19 May 2025 21:22:55 +0000
Files and hashes:         1: 5f38rnFoBdOTzrEk62PtHC37t3w.crl (hash: UHRy8G6YzZCmR4cGQ9GXJADRjNL93iIK+xXBi5Opbnk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 04:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
        Validity
            Not Before: May 17 21:22:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A6D65D49A5CC3DC9AFD8750C1C1A040DA9C3244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:b3:22:1f:80:4d:a4:41:cb:b5:2c:67:10:
                    11:45:d0:d1:36:db:89:26:a5:73:07:e2:3e:89:b7:
                    a3:1a:dc:16:cc:eb:da:3b:5f:d9:ec:f2:d6:3f:a1:
                    fb:cf:ee:5a:77:75:90:77:18:44:96:6d:28:4a:9e:
                    71:8a:fa:85:27:a7:a5:4a:0b:b3:9e:93:9a:ba:7f:
                    42:7a:db:bc:07:83:e5:87:d5:a0:2f:26:30:99:b0:
                    2b:a6:2b:d3:59:8c:99:24:c0:3d:aa:e7:a6:50:37:
                    3a:1c:e3:00:fb:80:7c:e6:50:0d:a1:35:f1:af:30:
                    ab:90:dc:d8:8e:09:dd:a1:3e:16:9f:88:cc:a1:2f:
                    35:5b:b9:a6:a0:28:b4:be:3e:93:26:06:f9:9c:f0:
                    ce:e6:e2:c4:6f:07:93:7a:b1:40:a0:65:57:4f:7f:
                    66:fc:68:e1:02:1f:34:e4:62:9b:0e:13:3d:f9:18:
                    ba:af:6f:39:72:22:f5:57:35:03:f5:cc:62:ef:09:
                    00:e1:a4:03:1f:c5:56:84:a5:c0:26:04:fe:b2:4d:
                    67:3a:3c:2c:f6:28:fc:68:24:eb:de:82:35:03:50:
                    d1:03:e7:7b:e6:3a:4f:78:b6:b7:69:e5:ed:45:01:
                    77:f3:ef:7e:01:4a:33:fe:36:5d:2a:d6:6b:15:fc:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
            X509v3 Authority Key Identifier:
                keyid:E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:98:e0:42:dd:91:ef:53:7e:59:d5:cd:ab:94:57:23:bb:15:
         0c:31:14:89:8d:a2:4e:ec:a4:12:31:3a:ea:2d:db:e4:d3:43:
         be:ae:01:0f:e2:a6:9a:89:4f:6b:58:dc:2d:fe:f0:ae:94:e1:
         26:6d:30:de:09:7a:32:5e:ef:2a:74:a0:7a:2a:d3:77:54:23:
         2a:fd:5a:92:99:9f:3a:a9:7f:ef:e2:3e:61:d9:13:97:87:6a:
         ce:59:3c:ed:b2:62:e5:01:88:3d:18:00:6a:56:df:de:26:68:
         f9:72:69:34:31:1d:7e:92:b4:fe:2b:1c:c1:cc:e6:b7:b8:19:
         54:6c:6b:30:1f:36:50:71:a4:e3:5c:db:f9:d8:97:c3:33:c7:
         49:33:d3:e2:8d:aa:18:c7:df:ad:d0:31:dc:99:4f:26:25:3c:
         03:06:1a:10:76:3f:97:3e:83:fd:a6:a3:54:c4:2e:47:69:76:
         89:19:a5:79:05:5d:31:34:8d:f1:f4:66:ca:c1:a7:08:21:6b:
         dd:c1:eb:12:23:a8:d4:c2:a3:4d:b5:7b:19:17:ef:62:fc:6f:
         da:8e:67:b6:ea:cc:cc:0d:81:67:4f:fc:7e:e1:a2:b7:4a:a4:
         c5:5e:7d:d9:94:83:30:a7:1b:89:18:6d:22:c1:0f:05:af:15:
         5f:b0:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 02:43:30 2025 by rpki-client