Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
File:                     -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json)
Hash identifier:          //LWBnyjzS/CaICf88R73wYq6+66qiyC73n6CMXilhM=
Subject key identifier:   CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       02FE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
Manifest number:          02FD
Signing time:             Mon 20 Oct 2025 07:24:59 +0000
Manifest this update:     Mon 20 Oct 2025 07:24:59 +0000
Manifest next update:     Mon 20 Oct 2025 13:24:59 +0000
Files and hashes:         1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: jj0bfJlamtz3TNzYYFHghbz65h4kN08deRTh55NA+no=)
                          2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 13:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Oct 20 07:24:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e:
                    02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac:
                    40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf:
                    af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da:
                    b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f:
                    d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed:
                    bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9:
                    d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73:
                    63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1:
                    bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c:
                    21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8:
                    01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02:
                    89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3:
                    ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca:
                    3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd:
                    f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38:
                    96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:16:9b:7a:db:c4:54:de:2c:49:d5:0d:4b:fd:e8:f4:81:
         04:28:9c:a1:05:76:d2:53:52:20:94:37:77:06:a2:a8:b8:3b:
         10:aa:7c:d4:32:1c:4f:ac:46:75:9d:89:0f:8e:10:fd:89:7d:
         b5:07:83:76:4b:68:aa:ca:c3:90:0d:20:38:da:a5:96:fc:ec:
         98:f3:4e:ad:7f:51:f5:df:f2:fc:43:c6:b4:69:79:5c:02:60:
         6b:07:d4:3b:4f:bc:6d:ab:08:21:48:cd:64:ee:8c:f0:21:a9:
         90:a7:4a:21:bd:50:27:92:9e:45:98:df:b7:ec:54:cd:b5:00:
         87:a8:ac:1e:43:01:f4:ee:c2:14:47:5f:15:fd:e0:88:5c:ae:
         b4:66:61:68:f3:01:72:e9:b8:82:c5:e5:5b:b1:52:f9:b8:5e:
         05:27:50:6d:7d:0c:13:e7:f0:61:87:a1:a5:13:c5:87:85:f7:
         45:9b:7c:79:f4:f7:6b:c5:e7:c1:ac:94:a2:50:7b:59:71:1a:
         26:37:a6:f3:ce:fd:26:0d:e0:bc:61:84:54:46:ce:12:eb:bc:
         68:43:e7:01:a5:b9:41:21:59:c7:75:1a:c9:61:7c:7a:87:54:
         38:48:6c:d8:8d:fc:2a:7b:96:1f:87:0a:79:c0:a7:8f:7f:19:
         f0:8a:f0:1a
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlG
NEE0NzJGRkEwN0JBMTBFNDJGN0NFRTYxRjIwNUFDQTE2NUY2RTAeFw0yNTEwMjAw
NzI0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBQUE2QjNCNTA2OTIx
OEM1N0RDOTI1MUVEQTI4OTlBMDlCOEM2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDafKDfUkjXZBCeGZWZXgIoGrDqYCIQB8GDQxasrEATQ2UVkwL1
/HbSHvmYv6+YzMIiNI+/dHD/laab2rRMQN9+p1gqBpbTW26Lj9jXRQRoaGhzwOsY
EJNp7b1752HcoBHfmma8XrzM+dK8x7+EmRRZpAKGDaTdc2Pq36SaIxqYXhxceZY9
8buX/Q/G0gQZX6TCTGzWDCHhYa6pM5EVKAc2n4oYyAHrTDxWNu8bHGwZNtuBAol5
ugkRoyzIlFfFRYcc4/97a0ZzZKvBooarWy0tyjxWMX+tYuBkZuPo9R4WzfFmmst2
LaCi/3uoOdv9OJaZGCt776gg1PQP3UJuSoNbAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUyqprO1BpIYxX3JJR7aKJmgm4xjYwHwYDVR0jBBgwFoAU+fSkcv+ge6EOQvfO
5h8gWsoWX24wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkVST09O
RUlORi8tZlNrY3YtZ2U2RU9RdmZPNWg4Z1dzb1dYMjQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLy1mU2tjdi1nZTZFT1F2Zk81aDhnV3NvV1gyNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1pFUk9PTkVJTkYvLWZTa2N2LWdl
NkVPUXZmTzVoOGdXc29XWDI0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIp2Fpt628RU3ixJ1Q1L/ej0gQQonKEFdtJTUiCUN3cGoqi4OxCqfNQy
HE+sRnWdiQ+OEP2JfbUHg3ZLaKrKw5ANIDjapZb87JjzTq1/UfXf8vxDxrRpeVwC
YGsH1DtPvG2rCCFIzWTujPAhqZCnSiG9UCeSnkWY37fsVM21AIeorB5DAfTuwhRH
XxX94IhcrrRmYWjzAXLpuILF5VuxUvm4XgUnUG19DBPn8GGHoaUTxYeF90WbfHn0
92vF58GslKJQe1lxGiY3pvPO/SYN4LxhhFRGzhLrvGhD5wGluUEhWcd1GslhfHqH
VDhIbNiN/Cp7lh+HCnnAp49/GfCK8Bo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:56:08 2025 by rpki-client