Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
File:                     5f38rnFoBdOTzrEk62PtHC37t3w.mft (raw, json)
Hash identifier:          GsSh7mN8tyHrb7SUQbr8T2AIQcCpHOX8Xmb671hfHS4=
Subject key identifier:   A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
Authority key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C
Certificate issuer:       /CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
Certificate serial:       0D28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
Manifest number:          0D28
Signing time:             Thu 03 Jul 2025 09:32:19 +0000
Manifest this update:     Thu 03 Jul 2025 09:32:19 +0000
Manifest next update:     Sat 05 Jul 2025 09:32:19 +0000
Files and hashes:         1: 5f38rnFoBdOTzrEk62PtHC37t3w.crl (hash: +5L+FG5W7ZS2jQe21G3NeyPoPjG6egSILPOi/xj/9qk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 20:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368 (0xd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
        Validity
            Not Before: Jul  3 09:32:19 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A6D65D49A5CC3DC9AFD8750C1C1A040DA9C3244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:b3:22:1f:80:4d:a4:41:cb:b5:2c:67:10:
                    11:45:d0:d1:36:db:89:26:a5:73:07:e2:3e:89:b7:
                    a3:1a:dc:16:cc:eb:da:3b:5f:d9:ec:f2:d6:3f:a1:
                    fb:cf:ee:5a:77:75:90:77:18:44:96:6d:28:4a:9e:
                    71:8a:fa:85:27:a7:a5:4a:0b:b3:9e:93:9a:ba:7f:
                    42:7a:db:bc:07:83:e5:87:d5:a0:2f:26:30:99:b0:
                    2b:a6:2b:d3:59:8c:99:24:c0:3d:aa:e7:a6:50:37:
                    3a:1c:e3:00:fb:80:7c:e6:50:0d:a1:35:f1:af:30:
                    ab:90:dc:d8:8e:09:dd:a1:3e:16:9f:88:cc:a1:2f:
                    35:5b:b9:a6:a0:28:b4:be:3e:93:26:06:f9:9c:f0:
                    ce:e6:e2:c4:6f:07:93:7a:b1:40:a0:65:57:4f:7f:
                    66:fc:68:e1:02:1f:34:e4:62:9b:0e:13:3d:f9:18:
                    ba:af:6f:39:72:22:f5:57:35:03:f5:cc:62:ef:09:
                    00:e1:a4:03:1f:c5:56:84:a5:c0:26:04:fe:b2:4d:
                    67:3a:3c:2c:f6:28:fc:68:24:eb:de:82:35:03:50:
                    d1:03:e7:7b:e6:3a:4f:78:b6:b7:69:e5:ed:45:01:
                    77:f3:ef:7e:01:4a:33:fe:36:5d:2a:d6:6b:15:fc:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
            X509v3 Authority Key Identifier:
                keyid:E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:9b:71:23:20:4e:ae:36:98:5a:42:75:d5:4a:9a:b2:a1:
         00:c8:1b:71:da:17:92:75:99:7a:52:52:b9:e9:d2:e6:1a:cf:
         0d:64:21:98:7a:c7:bf:5c:d3:e3:a1:02:0d:a7:37:b7:1d:25:
         99:31:1f:f5:34:d0:d8:65:a2:e1:42:30:a7:c1:cc:77:b3:88:
         38:80:8e:cb:cf:09:ed:b4:1d:91:1d:6e:df:df:22:11:8b:32:
         7d:57:d0:cc:98:eb:00:c5:71:36:74:5d:2c:23:6b:50:21:3d:
         d9:06:af:ef:42:21:3b:ba:50:12:95:1e:1c:d2:8d:70:83:76:
         69:bd:dd:02:2c:8c:bb:8e:8e:4e:8e:a5:f8:4e:45:7f:f8:eb:
         4b:1c:71:ee:3f:2d:39:e8:4d:e0:64:ba:7a:a5:10:85:fc:b6:
         a9:e8:82:33:96:9a:8c:87:a0:94:ab:45:5c:40:af:9f:ae:03:
         a3:e2:54:92:da:4f:34:89:ba:e5:5c:44:65:ab:cf:b5:6d:10:
         a6:74:50:83:fe:1f:87:62:c2:cd:d2:9d:15:36:ee:ac:03:f0:
         e3:a6:57:08:43:bb:af:56:9a:90:33:06:52:dc:7b:ff:53:89:
         49:fb:70:ab:80:d9:ec:9d:fc:15:fe:2d:7f:89:22:dd:32:e1:
         9f:28:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:43:55 2025 by rpki-client