Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
File:                     zE7-l8nB6kjwGh-GXdYX67EzUaE.mft (raw, json)
Hash identifier:          PGarFdCKYbZZptdkTHgsICVjd08nViK+Ojxr8g4WbgE=
Subject key identifier:   DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
Authority key identifier: CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1
Certificate issuer:       /CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
Certificate serial:       0206
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
Manifest number:          01FE
Signing time:             Sun 19 Oct 2025 21:24:48 +0000
Manifest this update:     Sun 19 Oct 2025 21:24:48 +0000
Manifest next update:     Tue 21 Oct 2025 21:24:48 +0000
Files and hashes:         1: r8boz4jBdZztL_izZVGfhqDuooE.roa (hash: TlUVGa4sphWGhDx//uUjzcMnpnFrJwG51Qzv51S2VWM=)
                          2: vDrORrFm7k39BuC9jdbHK4wit7c.roa (hash: 1Kb0WJOh7IMaquSPxMONz4pqLmPmKVqAW2zKx1fWMXc=)
                          3: zE7-l8nB6kjwGh-GXdYX67EzUaE.crl (hash: mo0zfHr9KP0x0tY299BNyoWpg7qvYgGUDS9Dl0vfttc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
        Validity
            Not Before: Oct 19 21:24:48 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DE9B9DFE646B2A3DD11788D2D73B53FA4FD0AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:cf:f5:2c:a2:87:7b:b6:c9:41:7c:04:49:
                    62:35:99:68:87:a4:10:8e:b5:7b:54:c1:71:4e:5d:
                    e8:b2:eb:7e:e0:e7:9e:81:ed:e0:bf:e6:3c:cd:c1:
                    2b:59:4f:66:da:60:4a:b9:30:21:f6:77:39:38:32:
                    68:2f:b5:ac:10:40:e0:a9:6c:c2:67:12:2f:41:42:
                    dc:df:71:75:60:6a:cd:77:81:00:cb:73:a3:12:1c:
                    fd:a6:c6:46:c7:46:30:57:15:65:0b:a9:b6:e2:a2:
                    4f:55:d1:e8:ab:23:e5:87:84:f2:38:19:82:13:a6:
                    7e:e4:81:c5:07:07:d1:5c:14:3d:e3:4d:ae:14:86:
                    ad:28:f3:35:7c:c8:c9:80:7f:bf:1e:f6:a5:42:85:
                    de:9c:47:0c:b1:37:b6:74:0c:78:e6:cc:b4:ee:19:
                    b7:4b:80:2c:8a:b8:6e:35:84:39:1f:f3:a6:2b:f6:
                    1e:17:13:74:20:47:a7:a1:0a:22:cb:ee:59:9c:ad:
                    9f:5a:83:a3:8b:87:c1:9c:5f:87:77:51:2d:74:16:
                    1a:2d:5b:2d:08:5b:02:3b:1c:33:ca:fb:57:e9:4d:
                    41:ea:80:14:b8:de:5b:89:cf:09:3f:b1:38:d6:31:
                    2a:8e:fd:76:e0:8b:51:52:96:25:d8:41:d5:cc:d1:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
            X509v3 Authority Key Identifier:
                keyid:CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:f9:6b:23:48:dc:08:f4:ab:a2:00:08:ce:a4:00:96:d7:
         6b:07:34:7b:21:d4:31:01:48:9f:06:cf:ed:95:a3:0d:3f:44:
         fc:ae:a9:4a:54:42:27:ee:c3:0c:d5:69:cd:58:66:40:14:46:
         63:e5:75:b3:95:9a:d8:4a:ff:7f:aa:92:43:07:c8:55:2b:b1:
         f3:04:f7:7a:61:2a:35:f5:6d:cd:41:b1:1d:1f:f9:7c:2c:59:
         31:cf:da:92:51:39:0c:da:4c:2c:a7:82:2e:3f:9e:59:98:90:
         f0:d9:15:2e:ba:f0:f9:1a:dc:4a:2f:1b:f7:2a:b9:30:60:7e:
         63:ac:2b:d7:4c:5b:98:5f:c7:35:ff:f8:a6:bb:c6:bd:ae:e3:
         aa:06:22:04:5c:0b:b5:50:6d:86:a2:4b:78:fd:55:f4:e7:ef:
         26:a9:9c:68:9b:e6:b9:df:34:5b:3e:ac:f6:16:e7:ad:d7:e9:
         80:ec:59:f4:0d:a3:de:b7:3f:83:85:c6:5d:9d:71:b6:67:63:
         e3:19:4f:12:fa:4e:79:68:bc:64:02:c1:61:0d:9b:b2:19:a8:
         72:e0:72:7b:7a:9b:f3:88:fc:be:16:07:25:59:e5:e7:b2:64:
         94:0d:d3:13:0f:77:0d:11:06:5b:97:97:79:b2:f1:8f:f3:1a:
         d4:7e:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:59 2025 by rpki-client