Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft (raw, json)
Hash identifier:          s0aVyZBEnAsE8gk8IIVJgQXvNuY2BNWd9kNmtUnyTlI=
Subject key identifier:   7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
Authority key identifier: F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Certificate issuer:       /CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
Certificate serial:       0CD0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
Manifest number:          0CD0
Signing time:             Mon 28 Apr 2025 08:50:05 +0000
Manifest this update:     Mon 28 Apr 2025 08:50:05 +0000
Manifest next update:     Wed 30 Apr 2025 08:50:05 +0000
Files and hashes:         1: 8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl (hash: 6/udXgYe6axk0fGWuOySABdT0p3C0/JAllCDAhw0Q8w=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3280 (0xcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Validity
            Not Before: Apr 28 08:50:05 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7AF7DD841A670383BA74773BAD793872711D1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:83:9f:7f:46:07:9e:97:a3:c4:cc:14:a4:
                    ff:7c:6a:47:ec:c0:40:ba:78:44:a2:df:54:4e:16:
                    c5:36:a7:76:5b:f9:27:f9:d2:34:c8:09:e4:8a:12:
                    f3:c9:79:a0:b6:40:85:13:a6:c8:cb:37:cf:7a:4b:
                    3c:de:49:fe:f7:7c:85:df:4f:9e:8b:0c:c5:6b:45:
                    da:be:ed:f4:27:33:3a:5a:aa:e1:f8:ea:25:f0:38:
                    34:a7:cf:42:96:80:17:0f:e7:ef:bb:fd:07:ae:97:
                    59:db:7d:f5:41:6a:7e:b5:3f:66:83:e0:2a:dd:0b:
                    58:88:08:2c:d6:9e:ec:a9:13:bc:21:b8:cf:7f:81:
                    c0:c6:21:94:bd:f6:81:56:75:b9:93:87:7e:65:ec:
                    9a:e3:bf:66:e2:26:52:a7:ce:58:5f:d7:5a:c1:0d:
                    cc:e5:f3:07:c9:b0:05:1e:13:a0:82:a4:7d:a6:61:
                    50:d2:04:75:6f:55:b1:96:0f:3c:a5:a8:ff:3a:45:
                    b2:53:87:98:45:0e:16:72:e4:fb:cd:b3:ef:8a:4d:
                    d0:42:1e:d5:33:8b:d6:91:78:8e:6f:75:a4:37:6f:
                    33:6e:73:52:79:7b:3a:7d:71:2e:23:94:04:28:69:
                    43:a8:33:75:dd:4d:f9:cb:e5:cc:3d:43:47:dd:f4:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
            X509v3 Authority Key Identifier:
                keyid:F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:93:0a:e8:7c:29:72:64:18:91:80:58:76:7f:da:59:7f:
         cf:9b:ee:45:17:36:11:42:a2:84:63:11:ef:aa:f3:82:b9:df:
         0e:31:b0:15:a3:0d:ff:8a:36:54:11:85:7f:47:5a:61:94:f7:
         91:c4:39:c6:31:57:a6:d4:1b:7f:53:a4:d6:a0:6c:30:85:bc:
         a8:88:b0:93:e8:c7:b1:21:7d:6f:57:a0:5b:f9:ae:83:b2:ff:
         74:8b:e2:ee:98:20:b1:3e:79:2f:ac:4c:3e:f3:1a:d4:2d:94:
         5e:e8:f7:00:d7:c1:b4:e5:ce:78:03:1e:81:a1:5c:65:63:d0:
         26:4f:c5:23:7e:a1:0f:bc:a6:5e:82:3f:83:94:ab:05:08:86:
         d8:15:5b:cc:03:4f:34:8d:f8:a8:e3:60:84:87:6d:19:70:c7:
         6c:23:77:35:9f:ef:06:cc:87:c7:fc:6f:48:94:a6:6f:f7:27:
         3d:e2:7d:bd:df:3b:f9:b5:2f:6f:71:a6:78:9f:66:a6:d7:0f:
         e4:56:9c:ad:34:8a:e6:27:28:5d:83:59:2a:ed:c9:07:a3:b8:
         4f:76:94:02:38:d0:57:03:4a:9c:d8:18:45:03:d1:bf:87:98:
         5e:f3:e8:01:83:fc:e5:ed:2b:73:19:95:cf:aa:8e:19:83:e4:
         a7:d9:70:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net