Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
File:                     7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json)
Hash identifier:          oNwiIzgpzY4HVfKHQWXrWxuFQC7UaUU+tcSozBh2oxU=
Subject key identifier:   07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61
Certificate issuer:       /CN=EE38A36922AC11840DB4BB27D1B0349760598761
Certificate serial:       02E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
Manifest number:          02E6
Signing time:             Tue 24 Jun 2025 10:01:30 +0000
Manifest this update:     Tue 24 Jun 2025 10:01:30 +0000
Manifest next update:     Thu 26 Jun 2025 10:01:30 +0000
Files and hashes:         1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: Lus4U1ly36CXHr4yzHtnRD8Xjo1PWvkErdA5sjp17l0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761
        Validity
            Not Before: Jun 24 10:01:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77:
                    59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2:
                    c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38:
                    ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81:
                    4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14:
                    fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64:
                    1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43:
                    ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2:
                    87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38:
                    87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca:
                    07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5:
                    15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c:
                    df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0:
                    78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43:
                    5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b:
                    95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da:
                    2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
            X509v3 Authority Key Identifier:
                keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:1d:f5:6e:e5:e1:ef:44:c6:c1:9e:b8:51:98:2e:72:bf:
         c2:e7:cc:33:6d:61:b3:59:bb:b0:91:c8:8f:d0:27:61:5d:54:
         de:49:be:94:01:69:12:41:cf:ec:fd:7d:b5:23:07:9e:f4:53:
         a6:db:6f:70:c8:8b:16:8a:d6:7d:d9:c8:6c:49:89:94:b6:f9:
         f7:48:09:5c:76:93:2d:f1:80:26:f7:32:f4:3e:0c:d9:dc:fd:
         30:a6:b5:1c:ce:45:9c:c6:7f:39:c0:c6:4f:29:ac:37:4f:08:
         42:1e:0e:ba:cf:3b:cd:36:97:b4:1e:a6:ad:58:b7:d2:3e:1a:
         2e:8b:79:62:ae:a4:ac:5f:78:9c:67:4f:ac:e0:7a:af:9e:4d:
         5e:10:c3:e5:d9:b3:8f:b3:02:3b:5f:02:ed:c4:65:50:97:8b:
         ab:1e:1f:1f:b1:43:3e:85:02:24:d3:70:82:5f:90:ec:29:04:
         4f:47:12:b6:b5:e7:18:eb:e8:7c:ea:50:7e:23:f0:30:66:4c:
         fc:16:74:a6:e2:1b:05:b4:23:64:98:fe:f4:92:30:5b:66:9a:
         e0:e1:ba:3f:f5:ad:6f:fe:67:5a:fa:82:99:7d:a3:f2:32:b9:
         ca:07:07:09:43:2c:d9:cd:09:ca:3c:b3:95:1d:34:e4:f5:56:
         8c:3a:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 24 20:44:16 2025 by rpki-client