Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
File:                     EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json)
Hash identifier:          W2G/hX0BD6/kOmHISFWgwW6hduWuzd8Z6vFpNVf7OEw=
Subject key identifier:   E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Certificate issuer:       /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial:       0446
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
Manifest number:          0427
Signing time:             Sat 23 Aug 2025 21:17:07 +0000
Manifest this update:     Sat 23 Aug 2025 21:17:07 +0000
Manifest next update:     Mon 25 Aug 2025 21:17:07 +0000
Files and hashes:         1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: psGLPYaOGtGIjcp7Kx6AS6XCXDN3NsnMtGjh0Rdx9JM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
        Validity
            Not Before: Aug 23 21:17:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93:
                    48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d:
                    64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d:
                    2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e:
                    a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57:
                    8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99:
                    07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea:
                    86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72:
                    51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40:
                    f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76:
                    d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c:
                    fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11:
                    f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e:
                    2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b:
                    30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9:
                    c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a:
                    09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
            X509v3 Authority Key Identifier:
                keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:98:5a:e7:24:ed:57:42:cf:f7:f2:f2:97:be:69:8f:47:
         e6:0e:09:c7:cf:00:a6:b7:e7:1b:1e:0f:9a:a3:2f:f4:fd:54:
         73:ea:3f:f0:3f:35:5e:69:3f:ce:64:44:1d:02:77:8b:82:e8:
         e3:b7:4d:67:00:3f:51:0f:5a:01:9d:a1:41:2e:cd:91:92:6a:
         ab:08:4c:61:a2:54:fc:a7:ac:0d:f6:b4:d5:8d:13:92:04:02:
         bb:c4:aa:af:6e:8b:b7:27:19:eb:cd:43:a3:4c:9b:5d:75:53:
         56:d1:39:16:50:ed:d6:00:c6:c4:08:bd:58:e9:c5:51:2e:b8:
         28:3d:7c:14:4c:09:8e:98:b2:fd:9a:1b:a5:77:34:7c:09:74:
         ee:c9:86:29:ae:e5:a6:db:0d:a0:fd:c1:72:4e:44:d7:46:05:
         78:11:e6:7a:de:06:ed:58:ef:02:33:a7:63:33:43:84:d1:62:
         bb:87:1b:91:4c:7f:45:91:01:30:44:0a:bd:93:c1:a5:b4:c2:
         33:db:37:cc:24:a0:4a:f7:c6:6b:a1:9a:65:19:a6:e7:0e:01:
         08:3d:bd:c6:65:76:57:ae:cd:f3:ea:22:d6:90:48:26:99:5b:
         e2:79:4d:0b:be:be:77:98:b8:c3:ae:eb:c7:c2:83:50:7b:25:
         f3:24:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:08:03 2025 by rpki-client