Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
File:                     PCrYZxs3UyZShtMuRr8G_fUtD-8.mft (raw, json)
Hash identifier:          ihj85swcD/2QJS+5whmzMF6wX0E+vMPNC1emEI5lnTA=
Subject key identifier:   76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       035B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
Manifest number:          0351
Signing time:             Wed 05 Nov 2025 09:28:21 +0000
Manifest this update:     Wed 05 Nov 2025 09:28:21 +0000
Manifest next update:     Fri 07 Nov 2025 09:28:21 +0000
Files and hashes:         1: PCrYZxs3UyZShtMuRr8G_fUtD-8.crl (hash: oL0SgWXATf+/ch2tyFF6/r5WdotSG3W29A6fpXvXyoA=)
                          2: YwYTXN1JE1Q-aCWHUwI4OjXekak.roa (hash: XbK7D3prbGHeSVtuAlgOgwwTCJaScWdnzWUQXbvm/Z4=)
                          3: yO6s-cqgEyut_V1N3aQCUs5opAc.roa (hash: 1+NCc1MzIPr6lEulml17q42F6ajTD5Sr+9ZcfPYuaw0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 20:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Nov  5 09:28:21 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=76BB26BD00993C78EA62C532BDD1104EF089A99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:9b:29:82:5c:1a:05:af:23:b8:27:e6:c1:
                    84:f3:b9:cd:23:f4:86:c3:4d:32:41:0a:3c:2f:e5:
                    9d:62:39:23:6b:a0:e1:15:7e:e5:48:d2:62:f6:ca:
                    78:19:aa:b9:80:be:d4:ce:33:ab:fe:76:2c:03:53:
                    ce:d7:f4:e8:91:77:68:52:54:af:1e:3b:05:57:11:
                    f6:6d:0a:91:f6:9a:8c:a5:9e:e1:1d:5f:9f:e7:f8:
                    7f:3b:99:58:c4:c1:76:09:b9:ca:68:ef:55:5a:c6:
                    22:cb:b4:11:e5:fa:e9:76:06:78:6a:ee:38:d7:73:
                    a2:16:b1:d4:d1:2b:75:db:df:26:77:4f:40:06:86:
                    c0:f8:17:92:1d:4a:e6:b8:aa:92:01:c1:f6:fa:8a:
                    5d:93:20:eb:c7:0b:3a:7a:dc:b7:a7:6e:7d:fc:b4:
                    3f:87:39:f6:48:94:0e:fd:44:ba:84:a3:ba:c2:f3:
                    1d:7d:ad:f6:d9:e0:be:c8:bc:c3:52:75:94:cf:ce:
                    d4:0a:c2:f8:bf:20:18:14:bc:3e:6b:f4:d9:42:ea:
                    db:23:cd:68:fe:b1:ce:dd:b1:39:92:67:e0:4f:bf:
                    15:40:34:71:89:1e:83:64:d7:f4:06:80:c3:fa:84:
                    cc:58:b0:eb:43:d3:d5:9f:6a:f9:40:01:c4:54:00:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:76:61:f1:7d:4f:0b:a6:2c:85:a4:b2:fa:28:3c:a3:98:1a:
         3a:b5:71:4a:b7:d7:5e:ca:e1:a6:1e:70:83:d3:46:92:45:29:
         42:3d:92:02:6c:00:15:e3:90:48:bd:2c:a7:b9:a5:c1:4b:ae:
         4d:b8:52:41:3d:d8:8d:68:d7:ad:de:7e:ae:e9:7f:a8:d4:e1:
         9f:28:4a:71:33:64:5e:e6:82:84:a4:03:2c:5b:9e:48:82:50:
         ad:c1:0f:f1:3d:63:43:d8:94:29:08:6a:41:e4:6f:76:54:99:
         15:d1:d9:8e:7b:34:2b:35:2c:fa:df:ec:b0:01:b8:60:ff:e8:
         f9:5d:db:60:d9:b6:15:1b:cc:a5:db:b5:06:27:d0:df:45:7a:
         87:81:58:f1:ee:04:b8:6a:b0:11:59:5c:03:90:55:34:18:ac:
         59:61:b1:0e:13:99:b4:6e:e7:14:20:01:61:28:3a:b6:bf:9c:
         0c:92:ab:be:56:51:fb:fe:5d:7c:b8:93:98:52:f3:ba:82:48:
         8f:61:6d:9a:19:69:34:3c:d2:87:b1:e7:5f:21:22:32:54:8e:
         bc:2c:13:3d:c1:32:74:30:49:f8:86:76:9f:51:1c:db:4b:84:
         2e:1e:b9:40:a1:67:eb:03:d3:f6:5a:24:8a:bd:7d:8b:a0:e6:
         70:76:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:12:15 2025 by rpki-client