Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
File:                     FlSV6NMn5PYtWhZDjwgOYIo00NM.mft (raw, json)
Hash identifier:          4vP2zshbiyIfCvBLHjmKcplTUNcXHEfsG1FpqIsXz18=
Subject key identifier:   99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0FF7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
Manifest number:          0F93
Signing time:             Sun 19 Oct 2025 21:55:19 +0000
Manifest this update:     Sun 19 Oct 2025 21:55:19 +0000
Manifest next update:     Tue 21 Oct 2025 21:55:19 +0000
Files and hashes:         1: FlSV6NMn5PYtWhZDjwgOYIo00NM.crl (hash: 2de8/rIytPnc3AtWvhKJcri4/DrGVkYyJOkQhi67RXs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 08:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4087 (0xff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Oct 19 21:55:19 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99D7C86BB0179CECBF7C47167DEB75FC584B5EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:5b:82:e1:af:76:2d:70:7b:83:b3:1b:fe:
                    d5:a7:03:88:12:99:d8:a0:5f:eb:85:dc:43:97:fd:
                    38:f9:af:00:7d:ce:15:42:9a:4b:71:ae:96:68:f4:
                    0c:92:af:88:f2:85:e1:66:7c:39:90:53:f4:1a:8e:
                    0e:a1:c9:3e:13:ae:d3:54:8e:40:ac:55:15:87:ea:
                    b6:82:a1:ac:e4:ae:e9:34:b5:cd:5d:87:87:b4:b5:
                    79:4f:13:0a:cc:b0:7a:bf:8a:53:86:0a:e8:db:54:
                    88:39:6b:aa:36:35:39:a1:a4:b8:3e:4e:78:8a:34:
                    cd:98:d5:30:08:b1:cb:10:10:45:b3:24:e0:f3:06:
                    f8:44:8a:c5:c0:5e:a9:42:d2:48:fd:82:a4:3d:b2:
                    58:e6:39:f0:7d:b2:0c:e5:bb:e8:12:2d:ca:db:35:
                    3c:20:5b:15:c6:0a:d9:23:0d:6c:d0:58:75:77:fe:
                    c3:cf:46:58:bd:cc:37:03:95:8f:2e:fc:21:d4:13:
                    50:1b:dd:85:9e:15:c5:38:fb:cc:1e:31:be:a2:f1:
                    a4:79:af:c2:a0:28:64:fe:5b:e1:97:93:3c:51:9b:
                    12:63:f1:ce:bc:c1:bd:ed:c0:f5:a1:7e:67:24:c7:
                    8c:7d:91:38:e5:31:8d:fb:1a:51:7d:36:dc:72:54:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:88:51:84:25:bd:52:77:26:c4:60:12:05:bc:78:f2:5d:df:
         a6:cb:3b:a5:43:0f:80:28:7f:f7:d2:49:cf:ac:2c:d3:87:76:
         13:84:a1:80:b2:33:97:13:7c:e3:bb:fc:f7:b1:6f:c8:e8:32:
         e0:d8:45:0c:c3:1a:4a:64:ba:a3:2f:cc:56:b6:fb:97:07:7e:
         bf:8d:96:22:cb:31:29:23:5f:be:f4:24:ce:8d:c9:10:d3:b0:
         d5:01:d9:e8:f8:54:b2:43:f5:1e:97:3e:36:fc:fc:e5:94:1d:
         1c:bb:30:c0:0c:b4:f9:49:6d:33:89:8d:51:d8:c7:bf:d2:18:
         29:92:df:c7:1a:a1:0e:03:95:ef:dc:ed:de:8e:10:cd:0a:7f:
         47:72:3d:43:2b:45:2f:60:44:53:7f:36:96:cb:0e:97:bc:04:
         23:80:b9:0a:4f:56:93:7e:e7:5c:b2:24:25:70:15:b7:d4:72:
         93:ac:4c:1e:9f:6d:35:71:3d:b0:aa:7e:4c:56:7d:ff:3e:4b:
         88:c9:57:fc:36:f1:67:33:a2:ef:c1:aa:f9:72:c2:2e:c7:6b:
         9c:2c:ba:7e:c4:d9:72:7d:9e:67:36:07:2f:9f:5a:b6:e3:e8:
         80:23:31:f9:5c:84:e4:e1:ab:35:a7:fe:52:71:04:f3:b3:82:
         55:29:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:29:52 2025 by rpki-client