Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft (raw, json)
Hash identifier:          o1Y65mxH3nZZQPzETJPGfD7ZlCx8O1bx/ohxVFBDxaY=
Subject key identifier:   7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
Authority key identifier: F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Certificate issuer:       /CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
Certificate serial:       0CF6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
Manifest number:          0CF6
Signing time:             Tue 24 Jun 2025 09:01:42 +0000
Manifest this update:     Tue 24 Jun 2025 09:01:42 +0000
Manifest next update:     Thu 26 Jun 2025 09:01:42 +0000
Files and hashes:         1: 8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl (hash: PKFiRGpJaBqVwJUQu8CvCwt5+TY4MUVF5NNiwC5biTQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 02:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3318 (0xcf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Validity
            Not Before: Jun 24 09:01:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7AF7DD841A670383BA74773BAD793872711D1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:83:9f:7f:46:07:9e:97:a3:c4:cc:14:a4:
                    ff:7c:6a:47:ec:c0:40:ba:78:44:a2:df:54:4e:16:
                    c5:36:a7:76:5b:f9:27:f9:d2:34:c8:09:e4:8a:12:
                    f3:c9:79:a0:b6:40:85:13:a6:c8:cb:37:cf:7a:4b:
                    3c:de:49:fe:f7:7c:85:df:4f:9e:8b:0c:c5:6b:45:
                    da:be:ed:f4:27:33:3a:5a:aa:e1:f8:ea:25:f0:38:
                    34:a7:cf:42:96:80:17:0f:e7:ef:bb:fd:07:ae:97:
                    59:db:7d:f5:41:6a:7e:b5:3f:66:83:e0:2a:dd:0b:
                    58:88:08:2c:d6:9e:ec:a9:13:bc:21:b8:cf:7f:81:
                    c0:c6:21:94:bd:f6:81:56:75:b9:93:87:7e:65:ec:
                    9a:e3:bf:66:e2:26:52:a7:ce:58:5f:d7:5a:c1:0d:
                    cc:e5:f3:07:c9:b0:05:1e:13:a0:82:a4:7d:a6:61:
                    50:d2:04:75:6f:55:b1:96:0f:3c:a5:a8:ff:3a:45:
                    b2:53:87:98:45:0e:16:72:e4:fb:cd:b3:ef:8a:4d:
                    d0:42:1e:d5:33:8b:d6:91:78:8e:6f:75:a4:37:6f:
                    33:6e:73:52:79:7b:3a:7d:71:2e:23:94:04:28:69:
                    43:a8:33:75:dd:4d:f9:cb:e5:cc:3d:43:47:dd:f4:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
            X509v3 Authority Key Identifier:
                keyid:F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:02:01:12:ac:55:9c:3b:2a:87:87:20:10:90:ce:f1:df:a2:
         26:58:9f:55:83:8d:eb:d6:90:b2:e1:4d:35:aa:ae:ac:21:14:
         b1:90:a8:3b:4c:99:77:ce:b9:33:e6:d5:be:03:3a:69:71:10:
         17:9e:48:8a:3e:c7:89:47:a9:10:11:5e:0f:aa:39:63:19:0a:
         25:08:1b:05:d1:2f:ec:11:02:ee:a7:3e:7a:40:bd:5d:4f:25:
         a9:ee:ce:d3:4d:0d:89:6c:01:70:2a:d9:cf:a0:aa:ea:e8:45:
         3b:74:2e:50:cf:c0:f1:2e:47:3b:73:40:bf:d6:13:41:cb:22:
         5a:b4:0f:e3:e8:21:00:e5:df:1e:01:fa:fc:71:c0:f4:a5:2d:
         dc:13:4f:67:c3:ee:7f:de:b1:1b:64:93:52:12:f2:7f:57:73:
         4f:b0:97:de:c6:6e:fc:c1:70:c3:77:8c:cb:6a:19:35:1e:82:
         db:e6:86:20:b1:a4:89:bc:9e:c0:1e:bd:cc:ea:4e:c7:c7:c6:
         4e:e6:c6:79:8e:00:d4:40:c2:57:a2:2e:ed:20:b9:5c:44:6e:
         ed:88:ca:d4:2c:44:30:59:80:8f:07:34:70:a6:9f:5d:7f:92:
         5b:ce:3f:21:47:ee:66:1d:84:31:9d:1a:6c:0a:54:e5:d4:53:
         a7:a6:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 01:13:16 2025 by rpki-client