Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
File:                     q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft (raw, json)
Hash identifier:          /m2qE4LmZCdGCrInkCC2sEZfrF2x7tlskcYwOjLlDvI=
Subject key identifier:   F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Certificate issuer:       /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial:       083B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
Manifest number:          07C9
Signing time:             Tue 04 Nov 2025 14:59:00 +0000
Manifest this update:     Tue 04 Nov 2025 14:58:59 +0000
Manifest next update:     Thu 06 Nov 2025 14:58:59 +0000
Files and hashes:         1: 0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa (hash: NB7AtyJ/gv5jdRxwaS5k9Y+cLlR3AyiNu4aspWF9yiA=)
                          2: 3f63BadjGAUYs1x3v4BGWhdZApY.roa (hash: tkPlWwXkwcu1oG6vW9aQalv5LL5xGga44ht1lPbEm40=)
                          3: 3o0MyGsph19QMioV8dAY38XyrUc.roa (hash: umOyiAyCMz6ZOB8ugCBEa2klieiuAsNSjRS3bcRXhko=)
                          4: 4T7hYy9R_gAPqja_uuLgoJCAcrE.roa (hash: QtGMxl+HFh5aMEuZ0sYHbmxReOl1vspkRkUoCc8Uq1g=)
                          5: 5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa (hash: vvplqjRtyDKlQoipChhhpH5hF9AumMJ25Z2F6CIx3Ww=)
                          6: 88dWmlI19qyWt2XW84Qm9g3a7lM.roa (hash: 55hAf7LVBaSU6FF/o58mzxfoknoy6+GPfHvjsN+IbDI=)
                          7: GIG8ZdyB5-c-1FoFLP4Ft_6LUJc.roa (hash: 4oBckO6paU72uWlQ+WBdkPSJ5BEE5JF4HeLlE/nNLLU=)
                          8: HkDv6JRmv3EUd0VuTcitV8iuAoc.roa (hash: ZLa5vFMilTLvMaHqpus8c0iR++yiqKOTufQvKaJhc7I=)
                          9: LrDQUDQhMEFoCs9fICylNFhe7C8.roa (hash: Fqh0M1J163IHLpVJ5y3GP71aMdX4Ro56qfgBCjSs69w=)
                          10: NqPoQSZZ4x4VcAJRTM0_ZIBWIc0.roa (hash: x4fWI7aJqKfK4EReYWkxiMYa3/Zm5/TNfNV3Qs48hSY=)
                          11: QmspA3o7EFmJUCDnLzODvmUWYB4.roa (hash: UrSR6CmDgr//cqTlkRevhIXCWr0eQetrrcLdair8v28=)
                          12: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (hash: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4=)
                          13: dJpQtzndugIaMgKpkejUNi8lrZ0.roa (hash: nZlSzvE0stUK/grdixuxy9Ws4R/l340poF1OTnaXyZg=)
                          14: ffQedrZ__zOr9Kh_lmDecV09cVY.roa (hash: lDAZ686aBzLfXPTD0B8tadH4tII2dljEkHzs84KD01U=)
                          15: lEuDNkwq4gnXhdcbA0Q2VC12ndA.roa (hash: 9RP4YrOGY9ORX0seTrO07h9sco8W8UTLEiI+xKZsSTw=)
                          16: luycyQCVnCSeD4L7Alh2HW7K8WE.roa (hash: NKeSwfVC6MnpCu1V8tuFvgPHdMm3NDSYpXHpT7g9wMc=)
                          17: o626lk6kU65aHOXqgfxmubwtLOk.roa (hash: JoYElnku35E7GuOzrfNMYseTGS1epI/0LyHXeQUW4UU=)
                          18: q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl (hash: 5A1u0HhdWeuAyDcgKkB81T7NrdnuiqL5L/M3oeVVLVw=)
                          19: qph_IFR3oKkcveb27M5eZ1xyRxk.roa (hash: VFGcAzUTJfdPA9guAnWBUwVPumt1YYSt1Q3PGwIWXpg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
        Validity
            Not Before: Nov  4 14:58:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F0E17ABFCC5CFF6401BBC9F49F2C6398CC507D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:31:ee:85:bf:d6:ad:e7:34:1c:85:d0:c0:
                    79:d7:0b:33:9c:bc:10:5d:53:1a:da:6a:4b:93:5c:
                    79:25:02:49:e6:06:ad:25:43:85:00:df:14:85:b4:
                    a4:2c:67:ff:34:04:a6:f6:e3:10:23:1d:03:47:5e:
                    fd:0f:f5:8c:69:67:91:92:16:28:ed:14:a3:8b:23:
                    db:76:2f:53:2f:8a:54:78:81:f6:1e:2d:62:c2:cb:
                    15:9f:80:e9:c2:7e:ae:63:10:7b:25:72:16:85:1d:
                    ee:72:66:0a:d6:63:3c:76:38:3c:70:2f:ea:06:e1:
                    26:cc:73:4c:8b:5a:c8:19:98:68:b3:fb:1e:a3:f1:
                    11:4d:b3:06:7d:30:87:4e:d2:98:fa:f2:54:0b:23:
                    36:e4:c8:31:df:fa:18:f9:be:4c:60:66:d5:59:9d:
                    77:f4:09:4e:ce:c2:81:cb:35:f7:42:54:87:c2:f4:
                    99:93:67:80:7b:37:60:d6:c4:94:a8:77:e8:0e:65:
                    e0:22:3b:71:83:5e:4c:0e:7c:0d:95:83:7a:c5:d1:
                    3c:3e:f0:c1:d9:f1:9e:e4:15:4b:60:e7:a7:c2:2d:
                    38:1d:f5:80:46:cd:ae:e0:48:d7:4a:1b:e4:c4:9a:
                    65:48:93:8c:f6:7f:f2:27:59:4c:cd:a6:34:98:e8:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
            X509v3 Authority Key Identifier:
                keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:8c:48:e5:f1:da:f1:81:95:ec:89:82:ce:98:19:42:8a:
         25:7e:a9:18:74:59:da:75:ab:ff:0b:7e:1c:7a:99:54:ba:e2:
         13:0e:b3:26:d5:af:b7:64:a5:e4:3f:78:31:6a:aa:0e:96:5a:
         1d:37:f0:0e:f9:3f:11:e6:b4:ab:d0:f5:94:d6:c6:b8:55:e2:
         9f:6b:9a:35:58:2d:9c:a0:74:8d:db:91:00:32:aa:28:dd:b8:
         c8:48:12:c0:b5:7d:79:06:e4:02:8a:f7:1d:f7:62:ed:3f:e9:
         76:98:92:c0:3b:0e:bc:fa:d9:f5:8d:60:5f:3d:8a:28:86:44:
         c7:db:77:f2:99:fc:4b:db:c5:9b:a2:d3:5d:ae:ec:e4:d8:45:
         d1:13:98:42:e1:34:a9:b8:1b:90:dc:bb:81:f8:9e:50:eb:61:
         6b:86:2c:6a:8e:a3:e0:a4:88:1f:46:86:0a:0d:d6:9e:93:4b:
         88:ba:13:35:22:49:5c:e5:62:7d:02:f7:0d:28:b1:6f:39:df:
         7c:f0:24:36:9e:ac:40:61:d8:bc:62:90:67:6b:81:98:c1:c5:
         48:d5:4a:b1:9e:82:99:ea:21:8d:b3:21:3e:67:6e:dc:17:ee:
         0d:c5:55:51:2a:3a:8d:ba:63:c1:1b:e6:f2:c8:dc:f2:3b:a8:
         3f:63:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:54 2025 by rpki-client