Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
File:                     M6ZZ8X-25qUGkrJheniCJ37k-GU.mft (raw, json)
Hash identifier:          54Uo6KCo1s7rqr5T69L+m15DhrU7CbOhgVudweQvH+k=
Subject key identifier:   D0:1C:20:65:29:69:A6:7B:CC:15:3C:47:0C:13:1C:F1:8A:C5:6B:BB
Authority key identifier: 33:A6:59:F1:7F:B6:E6:A5:06:92:B2:61:7A:78:82:27:7E:E4:F8:65
Certificate issuer:       /CN=33A659F17FB6E6A50692B2617A7882277EE4F865
Certificate serial:       95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
Manifest number:          95
Signing time:             Tue 04 Nov 2025 23:59:17 +0000
Manifest this update:     Tue 04 Nov 2025 23:59:17 +0000
Manifest next update:     Wed 05 Nov 2025 05:59:17 +0000
Files and hashes:         1: M6ZZ8X-25qUGkrJheniCJ37k-GU.crl (hash: RmbQrZ9E+umBsY/Cg5FB8dbg03L08BGaN3bEZPVq1sg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 05:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A659F17FB6E6A50692B2617A7882277EE4F865
        Validity
            Not Before: Nov  4 23:59:17 2025 GMT
            Not After : Oct  7 15:30:20 2026 GMT
        Subject: CN=D01C20652969A67BCC153C470C131CF18AC56BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:ed:64:cd:66:11:da:d3:44:0d:f0:87:f4:
                    03:f5:9d:0a:14:6d:46:01:1a:62:3c:80:c3:ed:5c:
                    f0:6a:52:58:24:a7:f1:56:4f:f6:94:91:bf:76:94:
                    30:5b:e4:f9:d3:8f:d4:6c:8a:94:5e:2c:9f:33:01:
                    51:0b:75:ff:09:d3:a8:31:a9:93:ea:57:cd:70:ab:
                    e1:33:cf:9d:9d:9b:43:99:c0:da:c9:f7:7e:3c:f0:
                    85:9e:e6:f9:f8:dd:9c:46:58:f7:0c:e7:f3:a8:44:
                    8b:ba:ed:0f:47:6c:cf:d8:a0:54:ac:d7:8e:2e:c0:
                    98:6c:3d:fb:43:d4:c4:b5:15:d8:61:cd:9e:dd:b4:
                    6c:3c:76:6a:13:d9:2b:8a:c9:17:40:bb:ca:10:b6:
                    e5:a8:57:e1:47:83:34:3c:21:e4:c9:4b:5d:99:f5:
                    3a:ef:5d:47:8a:39:39:0a:83:b6:1a:1d:d9:8e:42:
                    51:06:36:c2:6c:b3:be:57:2c:f4:62:e5:65:5b:62:
                    dc:c7:31:a4:63:ba:60:a5:53:20:ec:08:a6:0d:59:
                    71:2d:32:4f:77:c8:3a:30:e2:4c:32:11:f8:b9:68:
                    21:be:ee:59:b9:c0:94:5b:b1:ec:e8:49:17:91:aa:
                    d8:72:6a:a7:78:6e:1b:e3:ac:07:01:64:9c:7e:65:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:20:65:29:69:A6:7B:CC:15:3C:47:0C:13:1C:F1:8A:C5:6B:BB
            X509v3 Authority Key Identifier:
                keyid:33:A6:59:F1:7F:B6:E6:A5:06:92:B2:61:7A:78:82:27:7E:E4:F8:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6ZZ8X-25qUGkrJheniCJ37k-GU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/M6ZZ8X-25qUGkrJheniCJ37k-GU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:86:4d:07:1f:0a:af:2f:87:42:fb:7d:15:37:c4:fb:6c:
         c5:39:ff:e1:ea:f8:42:4c:09:4d:a6:d0:9f:5d:09:fb:bb:66:
         8f:d9:36:28:1b:65:cb:e0:9c:9c:d1:f2:ed:78:c0:f6:9e:ad:
         3c:90:b8:28:96:b9:43:e2:dd:3b:07:b8:c7:be:87:25:87:9e:
         fa:be:4c:bf:33:d5:f4:e3:ff:13:04:de:20:c4:76:f1:bf:59:
         47:14:0d:35:5b:6e:16:7e:c9:83:fd:52:a5:03:f7:82:ec:d3:
         1f:df:1c:83:80:fe:1f:71:fd:a6:5f:34:9a:cc:9e:e1:2a:78:
         e7:97:76:1c:25:f6:4c:90:01:53:2c:62:4d:a2:be:24:0f:2f:
         23:2d:39:38:cc:33:24:16:e4:03:e4:e0:51:3d:5c:e4:80:12:
         81:d5:d9:4e:b4:69:bc:56:57:e2:f0:ea:88:2a:90:46:8b:cf:
         34:33:6b:cc:7e:8c:77:f8:be:de:76:c9:4e:b9:49:90:6e:9e:
         3f:0e:61:26:8c:34:a5:02:db:c3:56:a2:96:d9:3d:d2:b3:ab:
         ce:83:8c:66:12:6f:67:fc:16:f2:86:1f:05:10:f3:bc:da:d2:
         cf:5c:5b:32:ce:35:8d:86:c2:7d:16:bc:99:03:ce:04:2f:75:
         20:ce:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:07 2025 by rpki-client