Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
File:                     7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json)
Hash identifier:          11KiJrUzRl3kB3MLJ3MHisRgME+17bagD1Rr7uy/1HQ=
Subject key identifier:   07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61
Certificate issuer:       /CN=EE38A36922AC11840DB4BB27D1B0349760598761
Certificate serial:       0340
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
Manifest number:          0340
Signing time:             Wed 05 Nov 2025 09:59:45 +0000
Manifest this update:     Wed 05 Nov 2025 09:59:45 +0000
Manifest next update:     Fri 07 Nov 2025 09:59:45 +0000
Files and hashes:         1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: DBxRa/C9creUmKY58e5WPQfCVDt1O5XXHTOJGNuAGBk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 05:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761
        Validity
            Not Before: Nov  5 09:59:45 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77:
                    59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2:
                    c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38:
                    ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81:
                    4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14:
                    fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64:
                    1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43:
                    ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2:
                    87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38:
                    87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca:
                    07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5:
                    15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c:
                    df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0:
                    78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43:
                    5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b:
                    95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da:
                    2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
            X509v3 Authority Key Identifier:
                keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:df:c3:2c:70:88:bb:a6:92:f0:b8:66:50:9b:4e:e2:fe:
         ba:54:57:85:1d:5e:27:da:d3:5b:96:da:23:3e:24:3b:a9:2b:
         4a:d7:ea:97:ec:18:ac:77:e9:27:db:e1:5e:19:98:c9:02:68:
         e7:eb:1f:7b:96:bf:3a:ef:ce:0c:d7:6c:9f:fe:a7:7b:8b:75:
         56:3a:99:3c:6d:84:e6:aa:44:f1:74:1a:c2:d6:b8:89:86:8f:
         48:dd:9d:57:f7:e7:ea:4e:b3:d6:21:24:3d:c6:df:d9:db:70:
         31:6d:6a:39:ea:10:38:b8:bb:40:11:1d:cf:65:14:b7:8f:eb:
         6d:ef:cf:64:f5:32:5d:ce:3b:21:6d:77:b9:3b:30:17:46:ec:
         b2:45:28:fe:e8:b3:ee:05:66:c7:d2:08:35:4f:e5:6b:9c:ed:
         e7:52:44:47:e4:48:39:9a:55:99:ad:f5:51:90:fd:1e:b5:6c:
         87:fd:76:cf:4a:dc:45:d1:01:74:82:60:4a:4d:45:6d:fc:70:
         3b:6c:44:06:55:13:1f:99:65:75:b2:5c:d0:ff:14:dc:36:93:
         de:b0:7d:1a:76:13:eb:07:9f:bd:28:1a:42:91:0f:1c:1c:cc:
         8b:5e:a3:27:da:47:8f:9d:05:9c:2a:27:53:56:c5:ce:95:bf:
         fb:42:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:53:25 2025 by rpki-client