Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
File:                     wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json)
Hash identifier:          EJDxGgaktn+1J4CLtlGuNI9WCT8ZYlWFcJnVVfGKOsA=
Subject key identifier:   B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Certificate issuer:       /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial:       1407
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
Manifest number:          13CF
Signing time:             Sun 10 Aug 2025 13:40:55 +0000
Manifest this update:     Sun 10 Aug 2025 13:40:55 +0000
Manifest next update:     Tue 12 Aug 2025 13:40:55 +0000
Files and hashes:         1: Dvtmwt-GZQEKZYB7OBDPQyeh8vs.roa (hash: 4CimOCBRgGTCrnVY3PpzHjAoI72713xLfLCHPuJlfr0=)
                          2: edWiZq19JEHWo5-nlTLmS0ZMUNg.roa (hash: qxPx1nE/OxCa4VacbSWedc08BrE1LNW/jI7RTvZ2vmI=)
                          3: lFcPhldx_HTxFb6kcFVifn6g4N8.roa (hash: a8998Kefl2ylS1lPDOmyfl7MaxYsX4PgWmiQTaYNjUg=)
                          4: mDbR5R0imlnqjO3pZR9c4WDYs6M.roa (hash: jyvPxhfbAhC/56SiEQPPQ6PT89q8GcgjTDlqHFknTao=)
                          5: pNlrL6APdKQYJGtiQc5w_uV5Lig.roa (hash: yN2OL8pJ56/6tRq8fPF1UVhWnjSlvuoecWahU6DNv9U=)
                          6: tWDPjob_Hw5ZsOAXQtcKnAncUq0.roa (hash: l7A3SM3lbOomMJNxe1DkWFWJtgsUX7rnv/pVct39Y9M=)
                          7: vT8Jj02I9Y7oHFCyuEQKSLD_BTI.roa (hash: 6Eu5I+LkUIcvvutEeVotwhPXvj1cufe77CJBUb3ATcE=)
                          8: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: mWHxg8807qW7TiYQFuwwuGoNgArE/kPC4n4JRM3TzcM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
        Validity
            Not Before: Aug 10 13:40:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69:
                    c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9:
                    55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16:
                    d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd:
                    f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06:
                    25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b:
                    63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51:
                    1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95:
                    be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18:
                    a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f:
                    e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad:
                    67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb:
                    53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76:
                    1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc:
                    43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8:
                    4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84:
                    ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
            X509v3 Authority Key Identifier:
                keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:3c:0d:2c:e2:08:0a:be:14:b5:37:7d:11:fd:a5:b7:82:
         a9:8d:99:f1:15:0d:75:ef:6e:ee:05:c2:33:6b:c3:f9:48:18:
         d6:2b:6a:d1:5d:5b:8e:6a:24:39:9d:42:30:b8:61:99:c8:be:
         e1:06:dc:58:6a:1b:c2:05:1b:fb:5b:53:8e:72:62:e5:cf:ce:
         73:99:89:3c:34:a8:7d:d0:d9:5e:3f:42:32:13:9a:2c:6f:2c:
         48:2f:fe:54:7c:e9:98:54:10:07:2a:af:d0:f1:3b:9f:b1:28:
         fe:f5:d2:91:5b:5d:ae:09:b0:2d:20:08:f6:5f:70:b2:a2:91:
         e7:e3:6c:23:70:52:ef:28:bc:92:65:11:67:3d:04:17:3f:b4:
         e5:07:88:4a:f6:af:3f:cc:98:45:d6:89:a2:d1:cb:27:73:0c:
         38:2c:d8:89:9b:57:99:52:cd:bd:b4:a4:f7:80:26:1b:47:e1:
         b6:cc:e5:73:6c:ae:b0:d5:3d:f3:1e:57:bc:2e:f9:5b:90:fd:
         43:9c:4f:28:ab:42:04:ab:e8:fa:7c:85:f5:15:70:16:f3:82:
         60:e0:57:0d:80:d1:61:62:b1:0c:01:a8:f5:b3:53:ae:18:16:
         5f:38:cf:34:23:50:f4:db:9e:78:20:93:44:34:7b:1d:e6:fc:
         8f:61:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:41:27 2025 by rpki-client