Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
File:                     7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json)
Hash identifier:          FBNmKCvC1Qatr+SZnvlNXXtImTyZ9dz+3cTWQA11Nio=
Subject key identifier:   99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1
Certificate issuer:       /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
Certificate serial:       0CFA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
Manifest number:          0CFA
Signing time:             Mon 28 Apr 2025 09:49:52 +0000
Manifest this update:     Mon 28 Apr 2025 09:49:52 +0000
Manifest next update:     Wed 30 Apr 2025 09:49:52 +0000
Files and hashes:         1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: Z4RSd72pboqE020vsJD6WH7V5qXQe9FfylIRI76wcD0=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
        Validity
            Not Before: Apr 28 09:49:52 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84:
                    34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a:
                    f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f:
                    6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38:
                    22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34:
                    ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc:
                    b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03:
                    d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3:
                    42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98:
                    be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8:
                    63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77:
                    86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37:
                    d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95:
                    67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0:
                    71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb:
                    7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16:
                    5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
            X509v3 Authority Key Identifier:
                keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:14:e1:41:db:54:cc:b8:03:e9:93:f6:4d:dc:80:60:be:c4:
         3e:60:04:8e:0c:e2:1f:32:8b:c7:a6:b4:db:1c:72:5d:e2:03:
         79:f8:b0:ac:bb:2a:cf:12:32:96:51:27:a3:74:56:bb:67:e8:
         5d:b0:61:8a:31:d6:28:6c:74:01:f9:8f:9d:83:49:ee:8c:a9:
         15:8b:7b:86:ba:aa:c4:ef:53:4e:da:6c:64:20:03:e6:a1:d6:
         61:2f:2c:f5:9a:e0:a3:cb:cb:3b:f8:f0:17:a8:72:d0:0a:f9:
         95:eb:9e:90:6e:93:df:0b:73:4b:a8:f4:da:db:85:70:88:bc:
         1a:e3:14:18:83:39:f0:9c:aa:df:98:38:f4:c4:b7:4e:f2:9c:
         c5:f9:b3:c6:66:10:89:b1:81:53:b8:c3:49:97:55:fd:dd:47:
         40:cc:8b:a2:84:e1:f2:84:fd:e8:3a:d0:bf:56:15:7c:55:19:
         13:99:23:27:20:aa:73:13:e3:85:d6:53:7a:79:02:20:0e:e1:
         53:2d:e6:03:d4:21:55:e9:45:78:60:9e:66:3c:1e:86:de:07:
         27:e9:81:16:30:49:6c:a4:11:3e:f7:fc:a7:4d:f0:5a:61:fb:
         0f:5a:c9:dd:58:0d:ad:b2:69:2b:b0:30:50:c7:40:18:79:d0:
         aa:73:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net