Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File:                     DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier:          bQWXZfJwW3qXMtIaJ5xDW0OEOhxxhBGlrnxL2o1wpEY=
Subject key identifier:   81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0DF9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number:          0D96
Signing time:             Sun 19 Oct 2025 21:55:07 +0000
Manifest this update:     Sun 19 Oct 2025 21:55:07 +0000
Manifest next update:     Tue 21 Oct 2025 21:55:07 +0000
Files and hashes:         1: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: oLocMY7E1jUrBKne84w6jcWF+ffOJwjRzoAW4dhxVTs=)
                          2: GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (hash: +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=)
                          3: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (hash: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM=)
                          4: Jns9QRoKa1WsqmtDocwMDtdMlT0.roa (hash: uEWgzsrUcLvTRdErDyt4Wd2xyJyx9lowSbRb3k5cKSY=)
                          5: OGy6Nryhc67bLXM5hzr3IRIPEvo.roa (hash: NW//Y5fISaHzjJncfP+fD1Q3i+EyT55jEXflSG250R8=)
                          6: XQN6OxMUcoAGxpGLooiky-tL7gc.roa (hash: KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=)
                          7: ejBKtQZTLyrE8vnIU0j-t5mEfXs.roa (hash: M2tdeDZvesGE0AAyqOJ1wnm+0nXVcRNFnYM1zMZ0F6E=)
                          8: f9BkDcTc0Qu7WyPYLc2LkngjCFE.roa (hash: jB+5fmaJQKDYqoyiYqbwVRiRXZtlcUXQIP6LnXyYQY0=)
                          9: fLu6sD6p_HtqeTeRSjHY_HQ9dr4.roa (hash: 6zwT+S23JAwSbfsfFnx6e0nfZI+pAYVSDBgx4gzVQdk=)
                          10: sy-areQ-4siOMM_blCu0RxNQJzA.roa (hash: 0IhdcJ+VJpYWoXAKgo1BqUgbH8152ChHGcRjK7P2cdE=)
                          11: ywiNVIZ1QQ4bfkFXC-tAivsHjzI.roa (hash: Q9oQftJcQcvSuPxuHL/R+AP9rCVRyQWOrSl1DN5ds9g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 17:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3577 (0xdf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Oct 19 21:55:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
                    c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
                    5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
                    7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
                    f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
                    1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
                    81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
                    03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
                    60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
                    1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
                    42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
                    c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
                    83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
                    96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
                    1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
                    07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
                    4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:60:a2:59:74:c2:5d:0a:c2:60:8d:2f:d6:02:c1:eb:8d:
         9d:ee:da:ff:39:fb:97:46:70:9b:aa:10:f6:c8:1e:bf:f6:30:
         51:67:90:c4:f2:76:0f:6b:94:76:71:d6:d9:b8:76:f5:78:ac:
         94:9b:58:5d:72:a9:43:aa:d9:a9:90:26:d2:d5:66:b2:f1:8b:
         f2:79:2f:fb:86:a6:9e:e0:21:9f:62:02:69:22:2a:36:88:8f:
         c9:0e:e3:61:7b:1d:c9:1f:5e:2d:39:b6:1a:dc:09:6c:18:7d:
         a5:67:8b:cf:2d:1f:61:c5:c6:b5:4d:70:3f:62:2b:ba:32:6e:
         71:00:42:ed:86:1e:51:d6:24:0e:26:0b:07:e9:40:69:aa:45:
         b4:e1:13:9a:c8:bb:ec:98:a0:a6:31:0e:29:6c:6d:9b:16:21:
         f1:35:27:2b:03:69:7c:64:c7:f3:e5:fe:4d:cb:b4:91:9e:48:
         fe:93:64:8c:b9:ae:36:a1:9b:11:8a:ab:83:06:44:98:dc:d7:
         12:e5:23:6b:38:d9:c3:53:7e:b0:7f:36:f2:47:61:e3:5a:a4:
         e6:3c:32:db:02:b5:b4:28:51:ca:e0:da:32:37:7b:7d:e1:94:
         b7:7f:40:33:59:b9:c8:1e:a0:a5:ec:52:99:c7:7a:d1:cf:cd:
         05:bc:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:03:14 2025 by rpki-client