Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft
File:                     mKXDkBQxSUgd55vBe7YtuiJx9h8.mft (raw, json)
Hash identifier:          PM8UVtfpAZcSKp5njRs4axYpTHw9xuvPO/je+IQcHlY=
Subject key identifier:   EF:E5:0D:06:61:FF:9E:19:A5:5F:F9:5F:84:F7:C5:07:81:35:31:5A
Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F
Certificate issuer:       /CN=98A5C390143149481DE79BC17BB62DBA2271F61F
Certificate serial:       04DC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft
Manifest number:          04D2
Signing time:             Sat 09 Aug 2025 22:10:51 +0000
Manifest this update:     Sat 09 Aug 2025 22:10:50 +0000
Manifest next update:     Mon 11 Aug 2025 22:10:50 +0000
Files and hashes:         1: 3PXbCY4HJVuH098-jkhT1xyV52I.roa (hash: nkU/svmv0y7UDx4Vy86ECgjU8r7zTI/N9WQYZK7rrHk=)
                          2: mKXDkBQxSUgd55vBe7YtuiJx9h8.crl (hash: mIGWqw+6H5SIBKuNoVjJsPJjJx85nGLcRbhi+bFyI7w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F
        Validity
            Not Before: Aug  9 22:10:50 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EFE50D0661FF9E19A55FF95F84F7C5078135315A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:fc:ae:e4:9b:5f:bf:bb:2c:d1:fd:d1:63:
                    79:5d:30:ca:aa:31:46:1b:eb:98:b6:60:11:b9:d1:
                    a7:e9:8c:5c:7e:47:1e:53:7d:1d:da:26:5d:87:e0:
                    e4:40:fe:a8:52:0e:23:25:4b:d2:25:1a:76:aa:bb:
                    ec:f3:a8:ab:63:6a:eb:dd:63:cd:db:ec:b3:be:cf:
                    e2:d6:82:88:56:18:a0:e1:5a:17:a6:1c:88:f0:30:
                    f0:99:62:2c:bf:1d:ea:12:2d:a5:98:86:c2:46:b3:
                    0c:9b:ca:56:01:10:78:4c:a7:65:54:c4:35:6c:73:
                    d7:f9:61:2c:1e:46:f9:17:b6:b6:e1:a8:2d:c5:a9:
                    ea:04:d8:81:80:af:a7:93:35:cc:92:1b:eb:cf:2a:
                    24:dd:fc:0e:e9:eb:e8:18:7d:6d:e9:56:9f:7c:df:
                    75:b4:28:a1:2a:cd:0c:b0:a9:93:29:48:1a:e9:5c:
                    ca:fc:91:30:11:41:a8:41:57:91:6b:84:21:88:2c:
                    65:8f:ab:fe:e1:47:d9:fa:03:0e:43:3f:c1:6c:83:
                    54:ce:80:7d:f7:9a:d6:de:1c:6a:5a:1f:48:0c:cb:
                    c9:b8:0f:ef:ab:11:a0:6f:d3:67:5b:cc:e2:3d:43:
                    33:ac:6b:c2:e0:b1:e7:03:9c:9d:84:13:a6:a4:cc:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:0D:06:61:FF:9E:19:A5:5F:F9:5F:84:F7:C5:07:81:35:31:5A
            X509v3 Authority Key Identifier:
                keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:00:1e:a8:d4:fe:6c:98:24:e2:4d:bd:8c:6c:2e:c1:4d:
         6d:8c:bd:64:fd:31:b0:69:ad:d5:f7:7f:7b:fd:ab:cd:1a:4c:
         b3:41:4e:7b:ae:bf:44:76:41:dd:9e:e1:d9:03:2e:fc:b9:4b:
         e3:8d:5e:c2:e9:d3:f4:00:88:3b:6d:de:a7:4a:7f:bc:16:c6:
         6b:c6:d8:36:7e:9b:d1:70:89:7e:17:4b:27:f5:16:40:0d:ad:
         45:3a:bf:ca:c0:a0:77:98:2f:18:d2:31:62:64:31:50:37:e2:
         76:e3:d3:ce:5c:9f:da:e4:87:67:69:2d:ec:f9:69:9a:4a:7d:
         14:56:da:7d:b2:ba:c3:b3:dd:1e:37:fc:d7:fe:f3:94:9c:de:
         39:d6:66:ae:d3:bf:c4:7b:5b:05:de:00:e7:7a:67:0d:55:1f:
         66:16:03:a5:04:27:39:98:28:db:2c:9e:9d:4c:d6:f7:05:03:
         46:73:da:95:42:6a:85:dd:bc:4c:bb:fa:87:3c:01:3c:83:30:
         00:bc:fd:a9:3c:84:7e:ef:97:f5:92:b9:2f:9f:45:e4:28:c8:
         0b:83:c4:16:b4:2b:01:b2:d9:82:95:06:db:28:a5:2c:16:0a:
         5c:39:77:ea:a4:4a:c8:ef:72:14:0d:5b:ef:a3:2d:a1:b6:f1:
         0c:86:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:58:30 2025 by rpki-client