Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.mft
File:                     zxIMfIx20_Q1Owxtde7zfvOYNpM.mft (raw, json)
Hash identifier:          5BV9T59xCSIV5HMPaEKNg6J1hFFwRp1oNVFzCn7cs4w=
Subject key identifier:   1F:57:70:EE:ED:01:55:09:63:5B:A8:13:9F:96:57:D9:56:50:22:A2
Authority key identifier: CF:12:0C:7C:8C:76:D3:F4:35:3B:0C:6D:75:EE:F3:7E:F3:98:36:93
Certificate issuer:       /CN=CF120C7C8C76D3F4353B0C6D75EEF37EF3983693
Certificate serial:       7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.mft
Manifest number:          7E
Signing time:             Sat 17 May 2025 20:53:54 +0000
Manifest this update:     Sat 17 May 2025 20:53:54 +0000
Manifest next update:     Mon 19 May 2025 20:53:54 +0000
Files and hashes:         1: JMx8rypLo8z76JALGTpDBm1o3y4.roa (hash: 3vog0mQ1kFZxxB3+/+NBE5t9inkF5mPfa5q8jo4GAng=)
                          2: zxIMfIx20_Q1Owxtde7zfvOYNpM.crl (hash: wnv7fGWApm48UKJOXLwR/kYeJHrRyP8GyXAEjR5q2QQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 08:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF120C7C8C76D3F4353B0C6D75EEF37EF3983693
        Validity
            Not Before: May 17 20:53:54 2025 GMT
            Not After : Feb  6 15:30:19 2026 GMT
        Subject: CN=1F5770EEED015509635BA8139F9657D9565022A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:56:c3:60:83:f1:7c:e0:24:20:9c:26:07:
                    3e:7c:60:1c:a0:81:be:ed:87:2f:b4:b1:65:17:9d:
                    e8:0b:db:f9:8d:f8:35:95:77:1e:40:1f:e5:50:99:
                    01:c4:73:ff:2a:a8:0f:69:a4:18:c2:58:b3:09:ea:
                    9c:2e:8b:ca:4d:80:11:43:f2:75:5b:84:2c:4d:2c:
                    96:0f:48:b0:8e:6b:3e:06:66:d4:35:9b:52:31:aa:
                    ff:e3:0d:aa:ed:7d:8c:32:4f:12:bd:ba:91:e3:a1:
                    82:ce:a2:02:fd:dd:ff:d3:16:48:9b:68:a3:c3:b5:
                    df:f9:40:08:a0:92:60:4a:27:50:33:73:f3:15:ca:
                    38:35:4c:9e:d3:9f:71:eb:37:8f:e1:4c:03:6a:dc:
                    cd:c6:0e:bd:76:ad:36:8a:8a:2e:26:60:57:f3:1e:
                    b4:29:9a:a1:15:87:b3:f5:c1:cd:5f:10:5a:85:36:
                    3a:49:77:73:8c:92:d6:4b:5e:b5:52:bb:98:12:97:
                    1c:02:5d:a6:3b:aa:ed:59:e6:6f:4d:da:0f:c6:20:
                    26:1f:44:fb:ca:02:bb:4a:6b:44:d2:04:94:67:9b:
                    e1:6d:70:e1:55:71:64:8e:e2:2a:30:53:32:87:4b:
                    ed:f1:df:93:52:72:fe:58:e8:68:40:e4:9a:ad:60:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:57:70:EE:ED:01:55:09:63:5B:A8:13:9F:96:57:D9:56:50:22:A2
            X509v3 Authority Key Identifier:
                keyid:CF:12:0C:7C:8C:76:D3:F4:35:3B:0C:6D:75:EE:F3:7E:F3:98:36:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:8f:26:74:a7:46:59:ee:a7:84:8c:95:82:c7:fc:c5:5c:
         34:30:3d:b2:e4:40:70:f0:21:10:db:f4:bf:e9:b9:05:1b:83:
         c4:44:1f:c1:55:cc:e8:48:2b:8b:69:de:34:34:74:fa:6d:98:
         81:71:3c:0d:44:58:53:86:be:2d:93:4e:84:49:08:d0:f6:0e:
         ef:2b:66:c1:fe:18:f8:2a:ed:12:10:c7:10:29:69:26:41:4b:
         0f:0a:e7:26:15:ff:12:25:f2:91:83:5d:13:a1:2e:17:07:8d:
         80:f3:c9:3d:8a:51:9b:94:ee:b7:ba:87:5f:21:e3:98:0e:76:
         e2:cd:f3:aa:6d:b7:af:be:3f:58:0f:88:4e:1f:2e:77:a9:7c:
         49:4e:be:d7:67:9e:ab:46:a2:15:ec:b9:21:ce:5b:30:8d:49:
         9d:de:38:65:b0:81:ec:87:7d:3e:25:5d:e6:a1:e0:84:5c:4e:
         58:00:80:7d:f2:f3:2f:4b:83:ec:0b:0b:39:83:2b:85:53:03:
         c5:4a:11:bd:95:e2:21:a3:d7:66:3e:7c:0a:fd:a9:fe:77:b6:
         0b:fa:ab:8d:89:67:94:ae:80:e3:79:2e:84:ff:bf:af:a0:3a:
         a4:68:ed:16:fd:77:b1:ff:ef:03:fd:9d:e4:87:64:1e:08:f1:
         f8:30:73:0e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRjEy
MEM3QzhDNzZEM0Y0MzUzQjBDNkQ3NUVFRjM3RUYzOTgzNjkzMB4XDTI1MDUxNzIw
NTM1NFoXDTI2MDIwNjE1MzAxOVowMzExMC8GA1UEAxMoMUY1NzcwRUVFRDAxNTUw
OTYzNUJBODEzOUY5NjU3RDk1NjUwMjJBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3qVsNgg/F84CQgnCYHPnxgHKCBvu2HL7SxZRed6Avb+Y34NZV3
HkAf5VCZAcRz/yqoD2mkGMJYswnqnC6Lyk2AEUPydVuELE0slg9IsI5rPgZm1DWb
UjGq/+MNqu19jDJPEr26keOhgs6iAv3d/9MWSJtoo8O13/lACKCSYEonUDNz8xXK
ODVMntOfces3j+FMA2rczcYOvXatNoqKLiZgV/MetCmaoRWHs/XBzV8QWoU2Okl3
c4yS1ktetVK7mBKXHAJdpjuq7Vnmb03aD8YgJh9E+8oCu0prRNIElGeb4W1w4VVx
ZI7iKjBTModL7fHfk1Jy/ljoaEDkmq1gwjECAwEAAaOCAg8wggILMB0GA1UdDgQW
BBQfV3Du7QFVCWNbqBOfllfZVlAiojAfBgNVHSMEGDAWgBTPEgx8jHbT9DU7DG11
7vN+85g2kzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QT1dFUkhP
VVNFL3p4SU1mSXgyMF9RMU93eHRkZTd6ZnZPWU5wTS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvenhJTWZJeDIwX1ExT3d4dGRlN3pmdk9ZTnBNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE9XRVJIT1VTRS96eElNZkl4MjBf
UTFPd3h0ZGU3emZ2T1lOcE0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAkOyPJnSnRlnup4SMlYLH/MVcNDA9suRAcPAhENv0v+m5BRuDxEQfwVXM
6Egri2neNDR0+m2YgXE8DURYU4a+LZNOhEkI0PYO7ytmwf4Y+CrtEhDHEClpJkFL
DwrnJhX/EiXykYNdE6EuFweNgPPJPYpRm5Tut7qHXyHjmA524s3zqm23r74/WA+I
Th8ud6l8SU6+12eeq0aiFey5Ic5bMI1Jnd44ZbCB7Id9PiVd5qHghFxOWACAffLz
L0uD7AsLOYMrhVMDxUoRvZXiIaPXZj58Cv2p/ne2C/qrjYlnlK6A43kuhP+/r6A6
pGjtFv13sf/vA/2d5IdkHgjx+DBzDg==
-----END CERTIFICATE-----
Generated at Mon May 19 04:24:24 2025 by rpki-client