Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
File:                     EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json)
Hash identifier:          8/U4KzZHNF7M//Cas92Tkm5N39UV4ao0Vq889exoIpc=
Subject key identifier:   E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Certificate issuer:       /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial:       041D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
Manifest number:          03FE
Signing time:             Tue 24 Jun 2025 10:02:57 +0000
Manifest this update:     Tue 24 Jun 2025 10:02:57 +0000
Manifest next update:     Thu 26 Jun 2025 10:02:57 +0000
Files and hashes:         1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: oSf/EWDN0WWnUBzrFHf+tz6Egp/4cUdhvUKFM+HIx7I=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 02:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
        Validity
            Not Before: Jun 24 10:02:57 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93:
                    48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d:
                    64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d:
                    2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e:
                    a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57:
                    8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99:
                    07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea:
                    86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72:
                    51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40:
                    f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76:
                    d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c:
                    fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11:
                    f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e:
                    2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b:
                    30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9:
                    c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a:
                    09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
            X509v3 Authority Key Identifier:
                keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:de:55:d6:19:f7:ac:23:e5:5a:a0:ae:c7:55:9b:2f:93:
         9c:ff:3d:e1:e1:91:f7:89:19:78:e1:2d:af:d2:0a:71:f3:6d:
         94:1d:c1:cd:f1:23:aa:4e:e4:48:ea:10:8b:ff:92:08:7a:ee:
         d2:e1:76:dc:fb:70:4c:fc:71:16:2b:10:4e:4f:81:57:91:d3:
         45:7b:01:e5:af:24:f2:85:24:35:8a:66:64:53:33:2f:13:14:
         f9:66:c2:44:7d:c4:8b:dc:af:4d:04:57:cc:d7:0c:b0:0a:68:
         75:e4:db:ec:21:46:5b:0a:d2:b6:30:c8:13:56:48:94:20:c5:
         cc:97:22:5b:0f:a1:30:82:79:4f:cd:8d:69:86:cf:8a:80:52:
         ac:f7:00:7e:2c:6a:74:a2:fe:8b:70:5a:e2:a7:be:86:3f:c3:
         46:a2:8f:c0:9f:7f:4a:b6:ee:1b:f6:00:a4:f3:c0:f6:71:eb:
         d9:52:4e:22:11:86:04:7e:e3:9a:cd:cd:f1:a1:bc:a5:38:f0:
         0a:57:5c:ec:6d:5c:55:bb:53:58:8b:2a:d0:6d:e6:5c:ab:53:
         52:08:fc:9f:57:79:73:d0:44:ff:c4:91:aa:cd:2a:ed:87:ee:
         64:7d:05:f0:c8:6f:99:67:f9:da:ba:46:8f:60:8a:31:43:af:
         2a:c7:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 24 23:03:10 2025 by rpki-client