Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
File:                     EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json)
Hash identifier:          KmjfU5XsLJhGgz19JjXlHWaDj8xSVNGaiQpC19wyFNE=
Subject key identifier:   E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Certificate issuer:       /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial:       046C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
Manifest number:          044D
Signing time:             Sun 19 Oct 2025 21:58:05 +0000
Manifest this update:     Sun 19 Oct 2025 21:58:05 +0000
Manifest next update:     Tue 21 Oct 2025 21:58:05 +0000
Files and hashes:         1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: 6yjkr79u1moWG7oeHgeZtCjKq5q6UgNLqiSeDGv9eqI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 17:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
        Validity
            Not Before: Oct 19 21:58:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93:
                    48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d:
                    64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d:
                    2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e:
                    a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57:
                    8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99:
                    07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea:
                    86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72:
                    51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40:
                    f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76:
                    d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c:
                    fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11:
                    f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e:
                    2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b:
                    30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9:
                    c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a:
                    09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
            X509v3 Authority Key Identifier:
                keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:42:56:2a:65:34:c0:c8:2f:99:0b:de:c6:a0:4b:52:61:c4:
         fe:a2:26:7f:c6:03:92:39:af:fc:d7:cc:8e:0d:00:d4:a9:32:
         d1:bc:35:96:3f:b7:04:41:f1:1e:9f:29:58:3f:86:67:e4:ae:
         1f:ee:c6:b8:8a:fe:bc:0e:7d:94:31:bf:ef:13:46:98:ee:85:
         c6:58:f2:c9:ed:82:d0:e0:fb:b3:71:3e:87:6d:a7:c8:d0:d1:
         e2:6a:c0:98:ed:70:0e:e3:79:60:16:a3:b3:eb:a2:3e:93:17:
         f6:fa:62:b4:59:b3:02:f5:0a:bc:a0:9f:0c:81:86:17:54:25:
         8d:73:5b:c0:98:cb:54:56:9d:59:5e:89:d8:45:ff:64:d0:09:
         af:5e:bd:62:93:d0:c3:8b:90:86:88:d8:64:10:17:dc:8f:4e:
         3c:c4:2a:41:c4:c4:29:c8:e4:0a:fd:05:fd:48:98:77:29:98:
         4c:4e:3e:09:0c:39:fd:14:b2:87:7b:c0:9a:a5:88:d4:ca:d5:
         24:41:07:0e:be:04:d9:26:a7:e9:28:65:41:93:a5:8f:8e:b5:
         b5:09:19:d7:4d:6c:7f:e5:56:35:7a:eb:23:89:d9:04:40:41:
         fa:b2:dd:f9:a5:4d:ce:c3:93:1b:68:c7:11:c8:3d:bf:f7:32:
         9c:05:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:23:01 2025 by rpki-client