Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft
File:                     5Gdn630R4mIpsWgPaMEPdsUltpU.mft (raw, json)
Hash identifier:          vQJWxHCNRjWKX5h9QycAczpHLfwfgUkoTtyZKcy4/Vs=
Subject key identifier:   0D:4C:F2:B6:90:A1:15:44:B2:79:D3:63:41:E4:06:DF:87:2F:4B:E3
Authority key identifier: E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95
Certificate issuer:       /CN=E46767EB7D11E26229B1680F68C10F76C525B695
Certificate serial:       0CB7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5Gdn630R4mIpsWgPaMEPdsUltpU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft
Manifest number:          0CB7
Signing time:             Mon 28 Apr 2025 09:49:33 +0000
Manifest this update:     Mon 28 Apr 2025 09:49:33 +0000
Manifest next update:     Wed 30 Apr 2025 09:49:33 +0000
Files and hashes:         1: 5Gdn630R4mIpsWgPaMEPdsUltpU.crl (hash: AIb8No1wrEyg9/PxI7gND7gKWzSkNrBQNDzV+n3Bld4=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/5Gdn630R4mIpsWgPaMEPdsUltpU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E46767EB7D11E26229B1680F68C10F76C525B695
        Validity
            Not Before: Apr 28 09:49:33 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0D4CF2B690A11544B279D36341E406DF872F4BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:ae:83:ae:89:c0:00:29:67:c8:68:ea:82:
                    3d:43:5d:5d:f0:e3:fb:13:e4:b2:98:7b:d4:56:58:
                    82:d7:01:05:36:dc:f2:65:f9:ae:58:78:21:ab:95:
                    ad:60:d0:2f:5b:3f:40:0c:e7:39:17:a0:3f:24:a3:
                    cb:c3:f5:70:25:41:fa:62:4b:08:89:12:07:83:77:
                    48:8d:f2:14:c1:1b:37:09:9d:3c:ce:95:2b:54:2e:
                    56:e3:e6:d0:2e:04:60:ce:51:8a:bc:fb:43:79:bb:
                    72:6a:be:b2:b8:ec:91:2f:e4:3c:e5:9c:45:21:7c:
                    44:41:ff:b5:59:68:7e:b9:19:4b:dc:4e:1d:31:90:
                    06:e3:d7:8c:15:0f:ea:55:b9:d1:dc:62:98:e0:76:
                    bd:5b:43:6b:d6:cf:f3:ad:2f:b8:b9:dd:fb:df:91:
                    d8:c0:e6:15:a8:13:65:7b:ff:a6:33:db:e5:af:06:
                    27:71:df:d9:58:69:79:35:17:be:53:be:05:48:b3:
                    07:7b:89:fe:dc:49:1d:ee:ae:d7:68:24:df:fb:a3:
                    60:c7:9b:ae:45:11:61:74:ce:e0:a1:63:13:ec:0d:
                    ae:1f:3d:2b:3f:6a:59:04:b4:47:c5:10:2e:0c:8e:
                    8b:e8:8e:6e:88:64:74:84:e1:f6:4c:ae:73:91:38:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:F2:B6:90:A1:15:44:B2:79:D3:63:41:E4:06:DF:87:2F:4B:E3
            X509v3 Authority Key Identifier:
                keyid:E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5Gdn630R4mIpsWgPaMEPdsUltpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:2d:71:d9:0b:21:a1:23:15:8d:2d:19:67:4a:59:44:a9:
         2f:76:98:47:06:e5:c8:44:3f:cd:67:de:3c:89:f4:88:a3:c4:
         de:47:2c:a8:df:97:3b:7e:d6:f6:6c:f7:97:f4:79:87:2d:24:
         1b:7d:f7:0c:e7:f0:e3:c2:5b:95:45:14:c3:66:8e:f0:8a:f3:
         d0:6b:c2:c6:ae:ed:4f:19:85:85:42:80:61:84:32:c3:a5:21:
         73:cb:8a:b1:ef:d1:c4:68:dc:16:a8:e3:57:19:2a:8e:74:32:
         cd:39:6d:14:82:46:ce:f6:76:34:06:16:85:f2:e7:29:97:51:
         75:57:1c:01:42:cb:8f:df:b4:b8:73:8b:62:8d:7b:5c:77:75:
         0b:f9:e2:f2:a8:40:bc:62:1e:91:67:36:cd:dc:a4:31:44:51:
         a9:4b:2b:ad:93:49:26:c2:0e:27:1a:67:e0:29:b7:bf:9c:a3:
         e5:8a:4d:ea:94:de:c9:aa:60:7b:ee:f6:10:81:e1:18:14:bf:
         87:68:a3:5d:33:6b:c0:61:9d:a7:0c:e2:44:e0:c2:8e:e8:46:
         4f:28:68:4b:30:4e:0d:6b:6f:70:af:e4:fd:4b:dc:6d:a2:0d:
         4a:14:67:b4:18:38:c2:b1:de:af:90:f5:79:c7:7c:b8:df:33:
         d4:de:35:13
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTQ2
NzY3RUI3RDExRTI2MjI5QjE2ODBGNjhDMTBGNzZDNTI1QjY5NTAeFw0yNTA0Mjgw
OTQ5MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBENENGMkI2OTBBMTE1
NDRCMjc5RDM2MzQxRTQwNkRGODcyRjRCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEwK6DronAAClnyGjqgj1DXV3w4/sT5LKYe9RWWILXAQU23PJl
+a5YeCGrla1g0C9bP0AM5zkXoD8ko8vD9XAlQfpiSwiJEgeDd0iN8hTBGzcJnTzO
lStULlbj5tAuBGDOUYq8+0N5u3JqvrK47JEv5DzlnEUhfERB/7VZaH65GUvcTh0x
kAbj14wVD+pVudHcYpjgdr1bQ2vWz/OtL7i53fvfkdjA5hWoE2V7/6Yz2+WvBidx
39lYaXk1F75TvgVIswd7if7cSR3urtdoJN/7o2DHm65FEWF0zuChYxPsDa4fPSs/
alkEtEfFEC4Mjovojm6IZHSE4fZMrnOROBrLAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUDUzytpChFUSyedNjQeQG34cvS+MwHwYDVR0jBBgwFoAU5Gdn630R4mIpsWgP
aMEPdsUltpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09ER0FN
RS81R2RuNjMwUjRtSXBzV2dQYU1FUGRzVWx0cFUuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzVHZG42MzBSNG1JcHNXZ1BhTUVQZHNVbHRwVS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dPREdBTUUvNUdkbjYzMFI0bUlwc1dn
UGFNRVBkc1VsdHBVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AHxkLXHZCyGhIxWNLRlnSllEqS92mEcG5chEP81n3jyJ9IijxN5HLKjflzt+1vZs
95f0eYctJBt99wzn8OPCW5VFFMNmjvCK89Brwsau7U8ZhYVCgGGEMsOlIXPLirHv
0cRo3Bao41cZKo50Ms05bRSCRs72djQGFoXy5ymXUXVXHAFCy4/ftLhzi2KNe1x3
dQv54vKoQLxiHpFnNs3cpDFEUalLK62TSSbCDicaZ+Apt7+co+WKTeqU3smqYHvu
9hCB4RgUv4doo10za8BhnacM4kTgwo7oRk8oaEswTg1rb3Cv5P1L3G2iDUoUZ7QY
OMKx3q+Q9XnHfLjfM9TeNRM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net