Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File:                     JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier:          pzTO1ocnf1qgY1oOlDYhwpzMg0YCIiIetOX1kIooBI8=
Subject key identifier:   56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer:       /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial:       04C2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number:          04C0
Signing time:             Thu 03 Jul 2025 11:01:57 +0000
Manifest this update:     Thu 03 Jul 2025 11:01:57 +0000
Manifest next update:     Sat 05 Jul 2025 11:01:57 +0000
Files and hashes:         1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: Y1dTIw9GhD9RaMy6OyOb0ZvFPf3R04f4as+2i6o9Wo0=)
                          2: v8bXGk6pI3vcRxqP3WCGAtq-yB8.roa (hash: roY9TvtTmsFuUR10RzOSWhVlmDzV96rhGFGoHTluRIo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 20:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
        Validity
            Not Before: Jul  3 11:01:57 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
                    3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
                    81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
                    cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
                    68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
                    c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
                    87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
                    2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
                    78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
                    80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
                    c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
                    a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
                    67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
                    4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
                    2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
                    b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
                    2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
            X509v3 Authority Key Identifier:
                keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ae:21:4e:4c:08:af:1f:17:c9:30:89:a4:f3:be:df:a2:6f:
         99:77:1f:20:52:a9:cf:25:df:5a:68:34:53:f4:77:65:88:51:
         09:87:d5:e8:a5:d8:88:be:12:bb:02:79:79:7f:6c:08:f8:5a:
         e3:18:5e:a1:08:2a:15:e9:9c:6a:bb:55:3d:c9:26:3e:4a:d6:
         45:03:08:24:e7:20:1b:93:7f:6a:0a:f1:a5:3d:88:cf:44:4f:
         79:00:1d:f1:19:29:cd:8b:2f:01:c5:1f:cf:30:6f:40:af:93:
         3f:9b:ec:98:7c:98:9a:ff:a2:ad:28:f0:d4:8e:50:f5:05:d9:
         82:91:57:7b:a2:e6:e1:ac:92:ff:2c:07:ae:a3:78:72:1b:22:
         6b:a3:59:00:ba:a4:18:97:ae:24:2b:82:43:98:e4:22:46:c5:
         4d:3c:74:41:60:15:c5:0b:5c:0f:33:11:df:5c:35:37:b5:69:
         cc:47:ce:43:9e:0e:ed:b7:6b:da:d3:c4:df:e5:b6:b8:17:80:
         fa:7d:6b:e8:fc:56:53:59:e4:b9:57:3f:3f:63:2f:f0:0b:a0:
         61:eb:36:7a:df:4c:09:5c:3c:2e:d8:a9:e1:59:93:69:f2:58:
         03:6f:5b:d9:3b:11:15:1a:56:8d:6d:d8:2f:e4:c0:79:6b:df:
         fa:54:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:05:33 2025 by rpki-client