Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
File:                     -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json)
Hash identifier:          erDBTC2K88KICTG5ZSz2QfAyA54zh6NkjvWpxV++3jY=
Subject key identifier:   CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       0188
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
Manifest number:          0187
Signing time:             Sun 10 Aug 2025 22:40:03 +0000
Manifest this update:     Sun 10 Aug 2025 22:40:03 +0000
Manifest next update:     Mon 11 Aug 2025 04:40:03 +0000
Files and hashes:         1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: 7znDYpvm6cBMyW/PfryDvA16FZkK2Gjkl/2zmXIs+i4=)
                          2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 04:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Aug 10 22:40:03 2025 GMT
            Not After : May 13 10:11:39 2026 GMT
        Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e:
                    02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac:
                    40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf:
                    af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da:
                    b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f:
                    d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed:
                    bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9:
                    d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73:
                    63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1:
                    bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c:
                    21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8:
                    01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02:
                    89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3:
                    ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca:
                    3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd:
                    f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38:
                    96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:25:6b:49:bd:66:19:89:83:3b:3b:e1:ef:6e:59:93:27:13:
         31:52:87:b1:14:f7:82:91:36:93:51:cf:d7:67:59:39:74:08:
         d0:98:3a:ba:36:bc:e9:0d:7d:1c:af:90:50:20:af:1c:04:c1:
         56:90:4d:ad:8f:10:6d:55:74:2c:7a:74:c6:bd:e9:43:4d:26:
         08:a3:0e:a2:1f:97:25:f7:26:23:4e:72:36:2b:11:9a:ab:cc:
         26:21:de:03:90:c4:13:df:ed:fb:3b:e3:fa:77:ef:5d:3d:7e:
         8e:0a:a8:6d:be:7d:74:a8:74:aa:b4:0d:fc:0f:c3:3e:71:74:
         21:82:d2:24:45:9d:3c:5a:67:3f:9c:fd:4c:4c:ec:05:e2:66:
         19:35:db:5b:68:58:30:df:73:1e:3e:91:42:6f:3f:e8:b4:3d:
         52:09:c0:97:3f:7d:1a:ec:f1:95:be:5c:99:47:03:96:57:77:
         58:00:da:ab:40:6e:ee:a9:bc:e7:6a:28:21:a7:7a:b3:88:a3:
         ae:b9:41:8b:0d:89:b1:ee:fa:1f:47:9f:ec:ee:8f:0b:ce:84:
         6f:b9:b6:74:7f:80:3c:81:df:fa:b0:b3:9b:2e:f7:09:27:37:
         3a:be:35:8e:a4:e3:bc:32:29:a9:50:4a:e2:17:e6:91:ea:f6:
         6a:c8:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:19:53 2025 by rpki-client