Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
File:                     Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft (raw, json)
Hash identifier:          DcD15PFvrvm2nBowoLmF5/XU0W1buxn2Qvl2OMTiF0g=
Subject key identifier:   76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       0AD9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
Manifest number:          0AAE
Signing time:             Sat 10 May 2025 09:51:43 +0000
Manifest this update:     Sat 10 May 2025 09:51:43 +0000
Manifest next update:     Mon 12 May 2025 09:51:43 +0000
Files and hashes:         1: 7gOoFuQB240UH2hvjkZvMFyj1Io.roa (hash: T40a+PfoJYN7yGppPp7SaEbSOGv9mAM45SXGnumeMEY=)
                          2: 9TgZ27xKTvpEBo4_SFicilqK9FI.roa (hash: 8jpXN8/Kkp0+w2SLVIsmqqh+UgRdevNVOh87QuYMc18=)
                          3: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl (hash: /BfJcaNaa+m2SGK7xLz8+NPiFCJmr9hLUYWar2RsOFI=)
                          4: gP15891EwBibcLrHcWmIePfupRI.roa (hash: 6yDyfYjxUC6Sq+tSUouEEUusD5izK4uWui79HwElUlk=)
                          5: ocK9dvpC-X1Q2jPuRD00Zm-mG9A.roa (hash: JUpZL1vjxUzZiJdR8292WVkkif8Z/Nt0KXMuvG3QNXQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 15:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: May 10 09:51:43 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76E7A08E8E67F4BA25AFA80D692B380CB1C7019A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:bb:0e:03:91:e0:51:5e:54:04:35:13:d6:
                    1c:90:13:e7:54:b0:c3:f3:41:11:e9:65:59:cd:3a:
                    a2:d9:ca:61:07:10:e9:c2:6c:45:b0:08:f8:12:3a:
                    b9:39:3e:aa:80:96:99:58:92:b2:aa:84:f0:9a:8b:
                    23:cb:98:0c:6e:a2:bd:67:e5:7f:d9:51:d8:8a:e7:
                    dd:56:ed:71:47:88:4f:fa:88:ae:ca:3b:e8:88:35:
                    b9:85:8c:c6:26:be:f7:5d:eb:39:1c:d4:a0:1e:2a:
                    d8:e2:8b:df:81:b3:cc:be:16:d3:5d:a5:c7:9a:0e:
                    4c:44:d6:8a:ad:2b:ad:42:6b:ce:8f:44:74:7a:94:
                    e1:b5:53:ee:69:53:73:c6:21:26:a8:da:00:51:51:
                    f6:f4:35:4c:0d:9f:cc:d5:f1:24:5c:19:c2:99:76:
                    e6:1e:06:80:f8:f6:1c:5a:8d:93:0b:eb:52:68:d4:
                    c1:d4:e5:b3:d1:d1:ca:e0:8c:a8:1f:fb:9f:6e:fc:
                    7c:40:1d:e9:60:1f:0e:fd:ee:2f:ea:d9:54:ac:a3:
                    a5:cd:27:c9:c5:84:8b:53:7f:c1:17:7e:2c:e6:1e:
                    92:3b:f7:0b:39:35:7b:c1:41:91:16:10:0d:ed:de:
                    06:81:40:15:32:cf:bc:37:85:16:2c:de:09:5c:7d:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:f0:f9:16:bf:38:75:d0:cd:c0:4b:c3:d5:2b:01:f6:cb:
         0a:97:ba:1b:2a:a6:5a:cb:5a:34:06:b7:20:0e:23:aa:4b:d7:
         92:7a:38:64:21:7c:a5:1e:c8:75:08:3d:1f:9a:ca:20:2e:3e:
         7c:2a:38:44:e5:c7:29:3f:62:a1:b9:0d:30:87:e0:8f:64:92:
         7b:ee:58:88:03:8b:8c:d4:00:15:a0:b4:fd:ce:d7:d0:42:9f:
         bc:4c:91:7f:12:c7:24:92:1d:4a:f6:dc:21:c0:b4:08:83:3c:
         75:f4:b6:79:f5:d6:43:fe:06:5b:8f:7b:6c:2f:d8:ce:71:7f:
         38:e5:ac:74:63:cc:2c:21:08:43:86:98:81:62:bd:07:7a:85:
         ef:2c:80:57:c8:f2:96:a1:8b:1b:53:00:40:93:1c:b5:16:1d:
         03:63:39:90:9a:72:15:5b:b0:40:c5:4a:bf:e3:64:99:e8:91:
         b9:8d:a7:db:01:35:42:3f:42:26:d3:af:d9:8b:2b:b9:3b:b5:
         d8:eb:47:d2:66:e7:a2:b8:f3:76:86:17:94:35:8f:a1:15:02:
         9a:a4:4f:6b:d1:27:b1:c9:ce:9f:34:0f:6c:22:89:9a:92:86:
         6b:81:f6:1a:41:ff:11:4e:11:a8:fc:20:a0:4b:c6:26:cb:e7:
         77:84:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:31:48 2025 by rpki-client