Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
File:                     -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json)
Hash identifier:          f09fl9/VJ/fWG7fa5WO4qro43NumnWUQiK0+/NQiS8s=
Subject key identifier:   CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       84
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
Manifest number:          83
Signing time:             Sun 22 Jun 2025 20:00:20 +0000
Manifest this update:     Sun 22 Jun 2025 20:00:20 +0000
Manifest next update:     Mon 23 Jun 2025 02:00:20 +0000
Files and hashes:         1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: IE+YTy4IuP56n/wlzcDCREsR1CZbBMc546iZ72yUAew=)
                          2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Jun 22 20:00:20 2025 GMT
            Not After : May 13 10:11:39 2026 GMT
        Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e:
                    02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac:
                    40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf:
                    af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da:
                    b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f:
                    d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed:
                    bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9:
                    d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73:
                    63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1:
                    bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c:
                    21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8:
                    01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02:
                    89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3:
                    ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca:
                    3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd:
                    f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38:
                    96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:22:d6:b0:d2:b7:47:3e:27:34:98:f6:82:4e:c4:ba:4c:4b:
         70:26:23:b7:79:97:12:2a:97:84:2e:6a:21:3c:47:01:27:be:
         db:50:eb:9b:d9:13:67:a5:e6:e6:0a:f7:a5:af:de:03:2f:17:
         fe:60:9e:7e:27:37:82:00:9f:4d:52:2e:c3:07:6c:be:eb:79:
         d4:c0:ef:86:44:44:9c:ea:2b:16:c0:db:ac:a3:33:04:ba:21:
         ac:dc:30:2f:b3:51:75:bc:4d:d4:1f:ce:b7:1b:ac:bd:a7:20:
         86:6d:36:1b:e4:98:d2:2d:2a:e9:e4:b9:d3:3d:4f:db:92:98:
         7b:ba:48:af:b7:2a:bf:5a:f8:89:4c:7e:76:61:23:6f:53:d8:
         a6:bf:f3:b8:de:19:c4:5d:67:25:cb:af:69:cd:eb:62:a8:b4:
         88:fa:c5:16:47:76:d2:84:ce:5a:78:cd:5f:ca:41:8f:52:e4:
         b2:8f:77:bd:50:b7:33:ca:5d:aa:46:ca:81:f7:3d:38:98:fb:
         82:ad:96:29:b6:db:5c:42:67:e0:47:13:bc:62:75:5c:b9:35:
         b9:1c:dc:10:f0:68:05:db:0e:12:d9:90:76:2d:18:6e:1a:c0:
         43:52:f3:20:d6:db:fb:60:31:20:bc:86:1f:3a:f0:93:65:e2:
         8f:dc:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:38:32 2025 by rpki-client