Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          8JJ4LgWWosJpbX2PYe/xyUHEN/+vbm410RGrI4Epdno=
Subject key identifier:   9B:04:C9:97:97:75:B0:EB:7A:06:F2:92:C0:B4:99:9B:EC:BF:0B:B0
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       5E785BEE0F226A529C084799F865FAE1947DA31B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          54
Signing time:             Sat 11 Jul 2026 20:55:30 +0000
Manifest this update:     Sat 11 Jul 2026 20:50:30 +0000
Manifest next update:     Sun 12 Jul 2026 21:48:30 +0000
Files and hashes:         1: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
                          2: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: XfaOGEQ1wkBgEexa8DVeWnXJN25xbmKNIbysnlxaMOA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 21:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:78:5b:ee:0f:22:6a:52:9c:08:47:99:f8:65:fa:e1:94:7d:a3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: Jul 11 20:50:30 2026 GMT
            Not After : Jul 12 21:48:30 2026 GMT
        Subject: CN=9B04C9979775B0EB7A06F292C0B4999BECBF0BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:f1:31:f7:80:05:05:71:ab:0a:e6:9a:ae:
                    fb:1f:79:cb:3e:4d:77:d4:a6:1c:29:03:8b:4d:5f:
                    41:94:54:cf:47:78:a9:8f:94:52:86:86:b5:21:be:
                    f3:56:72:17:30:41:fa:5f:82:6f:95:02:5f:9b:6f:
                    3a:dd:fb:a4:f6:27:31:83:b2:c5:c4:f9:89:e1:92:
                    46:68:a3:9e:c1:71:d9:a5:d5:f2:4f:5b:36:46:f1:
                    cd:21:51:6c:bb:13:ae:e4:0b:45:11:3c:91:d8:c3:
                    ca:ce:43:a2:ba:b4:10:79:de:e3:c5:70:1c:46:37:
                    2d:ec:ba:c4:b1:fe:15:94:cd:e8:68:20:b5:c0:96:
                    d3:8d:42:f8:e0:b2:82:f3:e5:06:5f:36:51:f9:f0:
                    14:65:9c:21:0a:c0:d6:3d:9c:7b:eb:37:c2:00:45:
                    ca:38:8c:8c:17:5f:30:27:de:68:93:97:c0:57:92:
                    68:4e:76:37:8f:6c:cc:dc:04:43:97:4c:a9:64:10:
                    ce:93:5f:dc:cf:10:5b:3f:36:35:4c:4f:f9:d6:ce:
                    33:12:9f:65:a6:a8:c3:0d:8b:5a:a9:80:92:9b:73:
                    e7:d4:f1:6b:72:90:a2:92:d2:d8:9e:c5:39:77:c8:
                    33:09:29:de:ff:99:11:c1:ba:ec:df:3f:e2:af:11:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:C9:97:97:75:B0:EB:7A:06:F2:92:C0:B4:99:9B:EC:BF:0B:B0
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:0d:26:7e:bb:14:83:c7:a6:4d:0d:53:3a:17:5f:23:42:
         6e:aa:cf:e5:68:39:a5:5d:0b:67:31:ad:84:46:a8:eb:b3:3b:
         6a:67:54:9a:59:fa:25:40:03:bb:68:2f:fe:4d:1b:56:e4:d5:
         f4:1e:e3:dd:03:98:2f:bf:33:52:02:77:7e:fd:ea:4d:ab:8f:
         e3:31:9a:64:6e:f9:60:e7:91:8d:26:49:f4:95:6e:b1:94:ef:
         5a:de:fb:cc:e4:d3:c7:49:fd:bd:8a:88:f1:d3:1d:d7:c2:f1:
         b7:31:94:e0:31:96:d5:a8:18:59:38:12:64:93:70:26:f1:41:
         dc:fe:d4:ba:a2:1a:ac:6b:46:71:97:06:f8:cf:7a:a6:ad:49:
         bc:35:f0:da:3d:83:41:84:ee:94:b9:c2:60:4b:d9:84:ba:2d:
         c5:25:41:9f:ed:53:df:d4:48:f2:9f:8d:c4:ea:e3:bd:6c:6b:
         20:67:62:2f:38:e3:0e:28:1d:dc:df:3c:4e:f4:ae:19:c8:4a:
         1b:d5:8f:ea:1d:be:15:03:a2:0b:00:1b:59:f0:80:ed:fd:0a:
         e1:5d:4d:58:06:56:63:55:b9:87:bc:84:dc:9b:6e:f2:34:10:
         87:ef:73:2e:b8:63:44:b4:5f:34:8b:ef:d1:de:49:90:ce:cf:
         4a:6c:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 14:18:08 2026 by rpki-client