Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
File:                     MSKpKSzJMBUq3lolhIwb3EBEyQI.mft (raw, json)
Hash identifier:          kMVr0Mdc3R3RrSHICV8PKqQnqt5xLBSSEqRGxjh3WzI=
Subject key identifier:   BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Certificate issuer:       /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial:       052D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
Manifest number:          050E
Signing time:             Sun 19 Oct 2025 21:55:23 +0000
Manifest this update:     Sun 19 Oct 2025 21:55:23 +0000
Manifest next update:     Tue 21 Oct 2025 21:55:23 +0000
Files and hashes:         1: MSKpKSzJMBUq3lolhIwb3EBEyQI.crl (hash: Aon6246soG/x7ip1aZr7VRIneEgvpyB9QgtOKU80VJA=)
                          2: PQ68nzHGmyTC5Bhy25mhL0_ILks.roa (hash: 0NUSC2jDlUeUpRxr3JnbQK1RqGLKoSZxOqc1D/Or8bE=)
                          3: l49ml1pNcLXoLE0aU5eVkKPlDwg.roa (hash: SuONQBYYGT0ZGE1cV+6soLLpQbiQTqc4oEbjf2kP9e8=)
                          4: ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa (hash: dGygZN/gcFJPruUdeMfM4AgxkJgEOHZxGG+uNkvJrYQ=)
                          5: nbl_j7EZZauFWRsZ3nU9uvCOpms.roa (hash: 4uowiLXGxuWX8sm5I/FnQ7T+5hqChjrtuttfTdYXDy0=)
                          6: p8RSINp3fRwBYdyK1RxpJyAL3Ss.roa (hash: XMRKYHwXJe1W6RwG3sTFdsZiPHKbtdCkaPJ8psi+9KU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
        Validity
            Not Before: Oct 19 21:55:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BE084BDBE6B136B303ECD5268B4105DF9E2AD26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:77:a4:70:93:a7:42:98:02:23:a1:cf:87:
                    c2:31:e5:7d:8c:f9:34:2d:9f:fd:17:0f:9c:0e:b2:
                    d7:f9:5c:3d:4b:f6:b4:42:ad:51:84:11:14:ae:0f:
                    e0:4c:65:9f:cc:b8:a1:e4:ba:ea:85:ca:dc:16:2a:
                    f7:11:5b:b7:40:89:5b:de:82:cf:ea:db:01:18:50:
                    32:11:22:b5:0e:e1:2d:8e:83:4b:98:62:19:05:83:
                    c9:e2:3a:fc:61:8e:97:77:c1:a1:ed:56:2d:51:ba:
                    5f:0f:41:08:2d:65:48:c9:d3:46:90:c6:9f:47:49:
                    15:5a:a2:19:b9:18:f2:f1:21:e9:85:27:c9:55:15:
                    eb:0c:fd:46:6c:9e:08:18:9a:c0:33:46:c3:d5:d1:
                    c1:bf:05:55:49:9a:d8:ed:5b:47:3c:d1:f1:c9:b6:
                    2b:7a:03:c8:2d:14:80:df:fe:c1:e9:bd:bc:f1:92:
                    63:6e:20:97:16:16:26:24:2f:99:be:67:c3:e4:6c:
                    1f:f4:80:40:0d:0d:56:a6:1e:53:b3:a7:12:58:c2:
                    a2:83:06:eb:40:dd:78:96:c6:a2:1b:c4:35:68:e5:
                    13:36:ba:19:b0:84:a6:83:af:da:6a:e6:ea:c8:66:
                    0b:00:d9:eb:af:63:5f:9b:c4:c8:43:e8:cf:73:c8:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
            X509v3 Authority Key Identifier:
                keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:6a:9a:1d:1f:11:36:eb:bb:c4:e3:43:62:77:64:92:6f:
         35:16:0c:53:35:a5:a6:b7:97:6d:bc:ba:5a:a8:8a:0f:7a:c6:
         8c:e5:4a:21:69:6a:3a:82:6b:a1:16:83:54:d2:41:10:89:d1:
         14:28:34:5b:35:cd:cb:7b:a4:61:4b:af:45:5f:28:1d:b4:10:
         10:dd:66:ee:9b:74:65:92:ad:66:bd:54:52:f4:5d:09:54:50:
         97:65:d2:ef:11:8b:73:e6:50:38:9b:6b:f2:7c:bd:91:b6:cd:
         b8:c3:12:52:9b:79:45:60:0d:da:3e:42:af:2d:c3:0e:9d:a2:
         a9:f6:b9:0e:40:bf:8f:ac:89:7c:f5:10:51:69:da:5e:95:94:
         b2:84:a9:4a:d7:7f:4c:f2:d1:fb:8c:f1:c9:2b:e2:39:08:b5:
         bd:c8:95:e4:61:d5:7a:74:1d:a1:fe:09:88:d5:88:60:92:9f:
         a7:bd:b7:e2:07:8d:e8:61:04:1d:a1:cd:3f:e4:f0:ad:2c:81:
         d5:1a:17:ea:16:90:d5:d6:73:92:69:3f:e0:d5:28:5d:ec:0d:
         5c:75:6b:ad:5f:44:71:88:d1:29:58:4d:6e:cb:cb:7e:02:2d:
         0d:40:bf:e8:19:77:a9:bc:77:c7:2b:2c:86:02:ff:ee:ea:b1:
         fa:1e:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:25 2025 by rpki-client