Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
File:                     fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json)
Hash identifier:          h56/C8W243Y0xVfgc2pipup2CWzaquYdUlFX/862d+A=
Subject key identifier:   9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Certificate issuer:       /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial:       0521
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
Manifest number:          051B
Signing time:             Mon 28 Apr 2025 09:18:34 +0000
Manifest this update:     Mon 28 Apr 2025 09:18:34 +0000
Manifest next update:     Wed 30 Apr 2025 09:18:34 +0000
Files and hashes:         1: VRx72pdtTHFMiqN9RD6G7x7eSYo.roa (hash: nWRuke5cNs4w9hWijKV4rkTrE3Ajcy5FghoTH7TFyis=)
                          2: ccfBSmWYHLx8ju0a14YXyamObYE.roa (hash: nMx4N12WJ5f89/ZKOCn2BWDB/IPiWRbtDQzPE191OPQ=)
                          3: dqEvc27_bBvGC_DLFqiTu7nrWI8.roa (hash: gxOH4BAt3zIg+Cldbx42+J51xa/Hfx3WhRoDsmfBTyo=)
                          4: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: L3o+4t0Ve/hBfZng/KNLvq+DNgzRv8etVGaM4xLcwJ4=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
        Validity
            Not Before: Apr 28 09:18:34 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4:
                    d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1:
                    d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2:
                    cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af:
                    f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa:
                    35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c:
                    cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3:
                    98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60:
                    d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f:
                    4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc:
                    23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1:
                    b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4:
                    d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9:
                    44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46:
                    2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47:
                    a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69:
                    78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
            X509v3 Authority Key Identifier:
                keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:66:bc:b1:f3:9c:fc:5b:68:16:20:61:b4:5d:00:3b:ad:9a:
         5e:9c:ee:51:2c:93:74:9f:99:84:ab:72:d0:3f:c8:2a:ab:b5:
         d0:7a:78:4f:f4:f2:25:c7:d9:95:29:55:b0:6c:4c:26:93:64:
         15:14:cf:03:5b:6d:7f:7f:24:38:a3:1f:ea:78:49:02:a8:6a:
         a8:78:a7:f9:67:10:90:b4:a1:ac:d1:a5:5d:2b:eb:0a:52:d6:
         14:ec:eb:d8:91:e2:6e:97:6a:c3:b3:2a:ab:14:68:23:63:16:
         3a:6e:a3:a9:08:7f:d5:61:2d:29:52:4a:22:4f:e0:e0:a9:ef:
         ee:1f:cb:4d:0a:3b:64:05:f5:c5:40:40:d8:d4:b4:0a:1e:d4:
         09:7b:7f:c6:aa:1e:a3:11:3f:2c:bd:e3:c5:56:57:12:53:f1:
         a5:e8:6f:ad:dc:1d:44:d3:18:34:a2:45:98:e3:b8:21:fc:5e:
         07:81:83:3a:ce:19:8b:c3:1d:ad:d5:ee:00:c7:5e:10:dd:44:
         23:75:bb:cb:bf:a7:d8:65:53:cd:ec:77:51:04:67:9d:75:82:
         5e:53:5d:8b:fb:5c:d6:1b:ed:c0:d5:08:87:2d:ba:19:43:e9:
         4d:e0:80:ea:85:b4:4f:39:3e:5b:f9:02:c2:53:4c:c2:15:67:
         e9:28:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net