Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
File:                     7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json)
Hash identifier:          bkQxaTBsptiY6Yrv7XoNuCkAbfXtlab2yxP2QUiXNXY=
Subject key identifier:   99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1
Certificate issuer:       /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
Certificate serial:       0D26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
Manifest number:          0D26
Signing time:             Thu 03 Jul 2025 10:03:11 +0000
Manifest this update:     Thu 03 Jul 2025 10:03:11 +0000
Manifest next update:     Sat 05 Jul 2025 10:03:11 +0000
Files and hashes:         1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: OXa33RPiv4O5vs7ZwTYrFmO/mSNevvv3iKBa8g1kFeI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 20:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
        Validity
            Not Before: Jul  3 10:03:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84:
                    34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a:
                    f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f:
                    6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38:
                    22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34:
                    ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc:
                    b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03:
                    d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3:
                    42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98:
                    be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8:
                    63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77:
                    86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37:
                    d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95:
                    67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0:
                    71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb:
                    7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16:
                    5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
            X509v3 Authority Key Identifier:
                keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:6d:e8:bc:46:76:5e:79:4b:5a:f8:5d:2d:87:c6:b0:81:
         89:c7:27:5f:16:9d:82:f1:6b:47:b4:fd:ee:0c:12:18:b0:10:
         d4:07:02:69:32:30:b3:b3:92:ee:27:ac:c5:7b:66:76:45:e2:
         35:69:e4:fc:e2:80:bb:72:ae:57:d8:c3:12:63:c5:c8:66:c5:
         4c:67:15:2b:27:78:6d:8d:1c:cd:48:ea:71:46:56:25:04:08:
         44:86:e5:c9:4f:52:50:9c:70:40:cc:4b:54:cf:fe:2d:0e:4b:
         d5:b4:20:72:cd:a9:ce:50:73:1c:87:3b:06:b6:64:52:70:4f:
         d9:37:9e:a7:12:f7:1a:f3:48:11:aa:83:66:c9:77:6d:4f:c6:
         3e:db:e6:2d:18:cc:99:37:0f:47:10:9e:3b:59:fc:19:cf:b5:
         29:0e:49:14:b9:74:aa:b4:2e:5e:70:2f:08:ad:6d:94:59:f2:
         45:a5:69:44:3c:e1:e2:97:58:74:32:06:1d:b4:f2:9b:a2:90:
         84:7c:14:07:57:94:0c:02:69:ad:44:8f:50:aa:0d:36:e5:fb:
         9c:74:34:09:6c:12:06:32:78:20:fe:d9:78:f2:33:57:7b:71:
         56:30:e8:67:a6:e8:8b:ec:9a:7a:cc:5c:0b:86:e2:bc:0a:2a:
         fe:8e:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:34:42 2025 by rpki-client