Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
File:                     7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft (raw, json)
Hash identifier:          FxNmsrA+6uuuxAGXGBB5DcmTfTsg4kN6hIXgxyARhhc=
Subject key identifier:   52:76:D2:CF:E8:4B:8F:CD:A2:9C:5E:CD:B6:3B:64:6E:99:32:28:9D
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       12EA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
Manifest number:          12AD
Signing time:             Tue 04 Nov 2025 23:51:15 +0000
Manifest this update:     Tue 04 Nov 2025 23:51:15 +0000
Manifest next update:     Thu 06 Nov 2025 23:51:15 +0000
Files and hashes:         1: 1gOlj1jAJtWV7ia-P3Z7dIXDBS0.roa (hash: GIdrcYwMqpWX3+sC+2A22t8Hgd6RNl16qth/WLYHhmU=)
                          2: 7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl (hash: JXnovExBmGjBNmgdYqmVNeR5QJy1NfXw7PX4zbnHYfA=)
                          3: T67lFTaPcjbZiX5fb4OOmSxbT00.roa (hash: 71NvxSis9s6ehK9deOZJBfJW3TdfQTVIAjfwji0kLAI=)
                          4: iJ5Iy1HGMmcWFkl7fInCiNOmGsQ.roa (hash: 7mSqSZdLtwW72cuh8a2HEPdv6nNb2H8oN0sreRoGlvE=)
                          5: nEI1jbGVeUZcN7l2GnewN_dB9Tc.roa (hash: fjuNJfqtfA8IuoUYCE7+xdh2o3O8MmC7uRstz0dTylw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 20:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4842 (0x12ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Nov  4 23:51:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5276D2CFE84B8FCDA29C5ECDB63B646E9932289D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:17:41:b0:4f:9f:01:94:c4:39:45:31:15:
                    2e:68:9a:cb:c2:a5:76:4d:8b:6e:7a:2b:69:f4:f8:
                    c0:e6:11:c5:6f:9d:9c:2b:73:fc:89:90:59:6a:b4:
                    06:c7:8d:b3:49:d9:f0:17:7d:ef:44:0b:cc:02:27:
                    ce:f6:89:82:0c:85:04:0a:c0:e9:78:34:14:12:2b:
                    37:32:25:f1:8f:c3:2b:6d:d9:41:08:cc:fb:e6:df:
                    6b:76:f6:92:28:bf:1c:58:48:8e:0f:ad:fd:21:2f:
                    26:0d:56:65:3b:c8:1a:a7:49:71:7d:66:84:29:f6:
                    68:5b:4e:f8:a0:83:fc:53:a0:13:fb:ac:33:a2:c2:
                    0b:42:c2:70:b9:11:6c:c9:01:1c:0c:e5:8f:c4:6c:
                    51:04:dd:69:a4:a8:7b:19:87:08:28:14:e6:1d:39:
                    3b:90:88:6a:0d:45:91:22:34:0b:f4:6e:3c:48:05:
                    db:73:4c:be:3f:2c:92:3d:a7:f8:34:1c:1a:63:79:
                    96:02:86:ae:15:be:d8:20:62:fb:d4:e8:63:21:01:
                    45:c3:c3:f9:fe:a9:ce:f0:6a:e7:dd:11:8f:e1:41:
                    79:53:34:5f:48:0c:13:19:b4:a5:69:6c:72:be:8f:
                    74:4d:52:2d:91:fd:ab:6e:ba:84:a8:61:09:41:bb:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:D2:CF:E8:4B:8F:CD:A2:9C:5E:CD:B6:3B:64:6E:99:32:28:9D
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:94:bc:df:49:62:77:fc:04:6d:be:00:42:a5:67:05:18:
         17:36:e8:93:18:08:b9:42:c2:15:9f:86:60:ce:17:d5:6a:9a:
         86:da:21:3f:39:e7:58:ce:3c:15:c5:41:20:b2:24:07:2f:6f:
         36:f1:8c:42:ce:04:6c:07:63:87:89:72:06:c3:7d:da:29:c0:
         2d:87:0c:65:f5:4c:a3:8c:00:8a:93:9d:dc:ab:c0:23:62:bb:
         3d:62:30:63:ea:05:34:ca:56:6b:72:75:54:3d:22:f4:e4:9f:
         e6:2b:33:e4:2c:d0:cf:c0:0a:3b:d7:67:30:c8:9e:b5:48:e3:
         25:9c:40:f2:d3:14:20:90:3d:a2:dd:3b:03:27:c1:d3:27:b8:
         75:ed:d0:d6:cb:15:81:51:20:99:4e:80:4f:b3:78:6a:61:84:
         ed:4d:0d:bb:e3:b1:50:7e:b5:a0:4f:1a:cc:b5:5b:39:15:dd:
         70:0f:aa:c3:b8:6b:8c:e9:0a:93:2d:a0:65:92:3d:b6:19:cd:
         66:c2:b5:41:57:5d:c7:94:40:74:44:35:e5:2d:9a:5c:d0:7c:
         a8:4c:68:38:e6:ca:17:1d:0c:96:a2:68:b7:13:cc:2b:1f:15:
         28:34:ac:f9:06:17:ac:80:9a:6a:fe:e7:bf:3b:02:67:ce:8d:
         6b:ec:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:23:54 2025 by rpki-client