Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
File:                     PCrYZxs3UyZShtMuRr8G_fUtD-8.mft (raw, json)
Hash identifier:          gZW8howQ3tyDeTKLJgpBpJhuERoB5BWiXIqZA7QYDRk=
Subject key identifier:   76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       0350
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
Manifest number:          0346
Signing time:             Sun 19 Oct 2025 21:24:52 +0000
Manifest this update:     Sun 19 Oct 2025 21:24:52 +0000
Manifest next update:     Tue 21 Oct 2025 21:24:52 +0000
Files and hashes:         1: PCrYZxs3UyZShtMuRr8G_fUtD-8.crl (hash: yNBuOt8EluaEiKyZ/rpvhglo24NNvq2sYJqIfk7CiwM=)
                          2: YwYTXN1JE1Q-aCWHUwI4OjXekak.roa (hash: XbK7D3prbGHeSVtuAlgOgwwTCJaScWdnzWUQXbvm/Z4=)
                          3: yO6s-cqgEyut_V1N3aQCUs5opAc.roa (hash: 1+NCc1MzIPr6lEulml17q42F6ajTD5Sr+9ZcfPYuaw0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Oct 19 21:24:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=76BB26BD00993C78EA62C532BDD1104EF089A99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:9b:29:82:5c:1a:05:af:23:b8:27:e6:c1:
                    84:f3:b9:cd:23:f4:86:c3:4d:32:41:0a:3c:2f:e5:
                    9d:62:39:23:6b:a0:e1:15:7e:e5:48:d2:62:f6:ca:
                    78:19:aa:b9:80:be:d4:ce:33:ab:fe:76:2c:03:53:
                    ce:d7:f4:e8:91:77:68:52:54:af:1e:3b:05:57:11:
                    f6:6d:0a:91:f6:9a:8c:a5:9e:e1:1d:5f:9f:e7:f8:
                    7f:3b:99:58:c4:c1:76:09:b9:ca:68:ef:55:5a:c6:
                    22:cb:b4:11:e5:fa:e9:76:06:78:6a:ee:38:d7:73:
                    a2:16:b1:d4:d1:2b:75:db:df:26:77:4f:40:06:86:
                    c0:f8:17:92:1d:4a:e6:b8:aa:92:01:c1:f6:fa:8a:
                    5d:93:20:eb:c7:0b:3a:7a:dc:b7:a7:6e:7d:fc:b4:
                    3f:87:39:f6:48:94:0e:fd:44:ba:84:a3:ba:c2:f3:
                    1d:7d:ad:f6:d9:e0:be:c8:bc:c3:52:75:94:cf:ce:
                    d4:0a:c2:f8:bf:20:18:14:bc:3e:6b:f4:d9:42:ea:
                    db:23:cd:68:fe:b1:ce:dd:b1:39:92:67:e0:4f:bf:
                    15:40:34:71:89:1e:83:64:d7:f4:06:80:c3:fa:84:
                    cc:58:b0:eb:43:d3:d5:9f:6a:f9:40:01:c4:54:00:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:8e:fe:36:45:6c:e4:5e:30:93:62:8d:0f:74:58:0c:24:
         1f:da:ac:b2:dc:64:49:01:3b:43:5d:06:17:06:f1:b8:96:ab:
         5b:93:2b:c3:e1:be:99:6c:b4:32:c7:01:0e:f8:f5:d4:4c:ac:
         0e:22:42:4e:70:da:da:61:37:a7:49:8a:48:33:78:cb:2a:b4:
         5f:b8:b2:01:46:1e:f7:2a:0f:b2:a7:3c:94:d9:7b:75:7d:e7:
         b7:65:ee:06:5d:9a:4d:21:43:52:ba:87:9e:be:3b:bd:98:2d:
         fb:a8:b4:06:39:7e:b7:6c:78:6c:e4:65:4c:75:d7:07:d0:6b:
         15:ed:56:77:0d:fc:89:5a:01:92:3d:fd:e8:61:d4:32:6e:19:
         86:76:74:ac:58:85:18:64:ff:5c:d9:d0:c3:1e:2f:4b:07:64:
         74:ab:f1:ed:75:0b:9e:7f:eb:95:57:43:30:12:56:bd:4a:3a:
         06:89:f8:58:78:d2:32:87:e1:2a:9a:8b:ec:f3:e6:16:8d:64:
         00:d3:0d:31:58:f5:3e:46:f7:ee:d1:ae:4a:c5:e4:b2:40:df:
         12:19:13:2e:52:57:aa:9f:f9:e0:b4:c0:e7:25:bd:ba:96:8a:
         c3:d9:17:25:8e:08:d9:47:8f:de:72:98:55:f0:28:d1:ab:57:
         b1:1c:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:39:33 2025 by rpki-client