Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File:                     JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier:          QEcOT17eNXoF13p6UnJNswBfdjtwqkHFKBUWINX/xUM=
Subject key identifier:   56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer:       /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial:       0496
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number:          0494
Signing time:             Mon 28 Apr 2025 09:49:09 +0000
Manifest this update:     Mon 28 Apr 2025 09:49:09 +0000
Manifest next update:     Wed 30 Apr 2025 09:49:09 +0000
Files and hashes:         1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: n9aSn0U3rDe4DptHH3ZWUJohTjbg7veoIEVKc1r2zVs=)
                          2: v8bXGk6pI3vcRxqP3WCGAtq-yB8.roa (hash: roY9TvtTmsFuUR10RzOSWhVlmDzV96rhGFGoHTluRIo=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
        Validity
            Not Before: Apr 28 09:49:09 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
                    3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
                    81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
                    cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
                    68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
                    c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
                    87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
                    2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
                    78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
                    80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
                    c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
                    a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
                    67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
                    4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
                    2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
                    b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
                    2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
            X509v3 Authority Key Identifier:
                keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:3a:fa:18:e3:61:d6:c2:10:47:78:5a:2a:65:42:c3:f2:
         0f:bf:d8:3c:c6:ba:f7:d6:fd:e0:6c:74:74:44:eb:0a:ff:88:
         72:91:88:39:9b:e0:a3:c2:36:53:7f:ab:e5:01:ec:c4:08:57:
         8f:6b:6e:54:18:fd:e8:8d:0b:84:74:ae:d1:68:e0:39:4b:80:
         48:db:b6:85:21:fe:82:d7:09:02:ec:cf:07:6c:81:73:a9:87:
         cf:27:cc:3a:f6:4d:f7:15:fa:71:a5:d4:cb:4d:12:64:71:82:
         33:93:71:ba:76:1c:92:4b:0e:fe:7c:66:a7:f2:77:aa:de:31:
         c0:44:97:13:31:5d:bb:01:80:b8:35:13:e3:4a:46:2b:0f:10:
         4c:27:54:77:5b:cb:38:29:cd:7b:ed:72:ab:a4:9e:f5:97:b2:
         67:5e:19:80:fc:f7:7b:34:41:69:44:c9:b2:12:b0:80:2f:a4:
         14:2e:79:f3:1f:ef:85:d7:7a:13:ef:45:ba:26:e1:66:5d:90:
         47:0f:d6:77:95:20:2b:c2:73:0e:2c:de:a2:d7:86:5f:73:93:
         50:96:82:df:37:3d:67:5a:f6:ca:a2:d4:b5:b1:24:bc:29:55:
         5c:3b:f5:54:43:56:c3:16:14:99:8f:e5:8a:97:be:5d:87:9c:
         31:ed:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net