Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File:                     U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier:          LuLKYOUiBneEy+qKGfWXjSABW/F0XcL+sQeyl1/TokY=
Subject key identifier:   C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0D15
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number:          0D09
Signing time:             Sat 09 Aug 2025 22:40:24 +0000
Manifest this update:     Sat 09 Aug 2025 22:40:24 +0000
Manifest next update:     Mon 11 Aug 2025 22:40:24 +0000
Files and hashes:         1: 4PWaK3-naPPpKMlC7XnZSi5d5rk.roa (hash: 4O3+RBdGcbnoHIwkp4BuGY7rZCtpRlna7VhhTYPc6yc=)
                          2: 5qbfWFQMEV8Jnpte8t4LSv4m8F0.roa (hash: MB8DovGhVLMt92Wvxg5JLs3SXyfm5ZuQfWynMc/DUmQ=)
                          3: 92ya2HAEtksonPTMXYpkFAqpfjU.roa (hash: YD+KmS2ykCOOl0iyh2sL17zDhgQH959X/HFE3cNdy10=)
                          4: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: kMwEjTKAT19UuKmgF3Z12ly5jqBITSfsHecps/0BMZc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Aug  9 22:40:24 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
                    17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
                    6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
                    9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
                    91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
                    b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
                    13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
                    27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
                    d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
                    20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
                    68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
                    75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
                    8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
                    f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
                    6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
                    46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
                    98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:c8:f2:1c:22:f7:cd:72:61:69:f7:ee:86:fd:1a:9a:f9:
         73:99:d1:d8:8e:b1:53:65:c9:ba:ac:c9:80:03:17:f9:47:36:
         c4:c2:ea:a0:0d:48:cb:ab:75:8e:1c:55:31:60:fe:8e:4b:d2:
         d0:ec:46:48:12:c2:21:ac:a3:ab:98:72:a6:ce:2d:57:da:92:
         a2:bf:50:4d:ee:9b:5d:19:92:01:9b:81:f8:ba:81:a5:01:38:
         2c:5d:99:c1:75:02:22:b1:56:a0:54:3b:83:5a:4a:d3:d0:ee:
         f9:cc:ae:53:ab:41:8e:28:3f:05:b5:47:28:17:31:91:3c:d0:
         7d:53:f4:02:4d:25:e8:cd:f3:d2:24:5f:88:f1:86:a9:86:d5:
         f0:70:f9:7c:91:f9:eb:0d:ad:42:f0:e1:7d:72:1e:42:56:95:
         75:fc:b6:af:ca:22:cd:73:8f:3e:39:57:71:4e:70:89:e1:57:
         00:6a:c3:12:7a:66:3c:4f:9c:36:4f:a2:e7:40:6b:b9:77:dc:
         94:90:5c:9d:7d:71:75:d2:39:f8:91:bc:ae:7d:c8:ba:f7:68:
         d2:6f:9a:35:dc:8e:06:ee:60:78:d5:55:ce:56:d3:96:3c:b3:
         cf:85:39:1b:e0:96:38:b7:61:ab:2d:59:af:7e:56:f4:ba:b3:
         0f:d7:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:38:39 2025 by rpki-client