Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
File:                     20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft (raw, json)
Hash identifier:          pQQ1Eqk/rnCymU7wO+uz8hwWgXc0KKylnyOt0MrvCkM=
Subject key identifier:   E8:5F:76:A2:EE:CD:C4:C2:5B:4F:2A:18:C4:37:C0:51:49:7B:16:7F
Authority key identifier: 20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC
Certificate issuer:       /CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
Certificate serial:       6358A468039BDEF6FED0BD12E247F6ADC2E75E36
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
Manifest number:          4B
Signing time:             Tue 30 Jun 2026 09:03:29 +0000
Manifest this update:     Tue 30 Jun 2026 08:58:29 +0000
Manifest next update:     Wed 01 Jul 2026 09:56:29 +0000
Files and hashes:         1: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl (hash: RYyzMAwlcyTh1Upg0PiDETwQeOQCKhgzCI1t0QUg0Rg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl
                          rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:a4:68:03:9b:de:f6:fe:d0:bd:12:e2:47:f6:ad:c2:e7:5e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
        Validity
            Not Before: Jun 30 08:58:29 2026 GMT
            Not After : Jul  1 09:56:29 2026 GMT
        Subject: CN=E85F76A2EECDC4C25B4F2A18C437C051497B167F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:4f:5f:18:84:a4:48:e3:c0:eb:41:93:5b:
                    71:ab:b5:90:6c:d9:48:af:ba:95:8e:05:00:64:5c:
                    aa:ec:99:8b:2d:c2:b6:55:74:2b:13:63:f4:88:8e:
                    15:52:a5:7f:2b:48:89:5e:57:cd:b6:e7:6c:87:94:
                    28:6c:83:fe:f7:ef:1f:b8:83:1a:f9:f6:24:4d:b2:
                    91:72:22:de:d0:0c:7d:b0:f7:6a:76:7f:11:ed:90:
                    f1:60:ef:78:d1:5e:2c:93:c5:16:ce:d7:1a:f7:53:
                    83:0a:dd:d9:6f:17:6d:f5:7f:76:2b:db:90:1a:c8:
                    8d:10:25:75:f6:cd:9e:34:fa:86:11:68:4a:f9:54:
                    0b:c0:4f:fe:21:30:9c:0c:bb:4a:d7:4a:07:f5:23:
                    a8:f9:e3:eb:d3:70:75:5e:47:48:b9:e8:98:b6:71:
                    5a:76:ad:7d:94:2e:cd:99:ea:c2:c4:09:23:98:41:
                    dd:e4:20:02:ff:a1:c3:3f:73:a1:5e:2d:39:36:3a:
                    c7:e7:f7:15:47:eb:a9:dd:a2:ad:76:51:c6:ee:43:
                    b2:29:d0:16:46:2f:eb:87:17:59:eb:a1:c5:1f:ec:
                    f4:e3:fa:0f:ad:49:69:68:2e:71:c9:b1:fc:f7:ef:
                    13:7e:fd:d1:6e:51:07:0a:07:b1:b7:9d:2a:e0:7c:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5F:76:A2:EE:CD:C4:C2:5B:4F:2A:18:C4:37:C0:51:49:7B:16:7F
            X509v3 Authority Key Identifier:
                keyid:20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:10:79:c1:79:f1:cc:40:29:2c:6f:2b:25:a9:1b:48:4c:7d:
         71:79:ce:08:87:a0:e7:8b:e5:63:83:87:83:b2:ff:55:f6:c3:
         30:22:93:0a:95:7c:d0:0a:c2:f8:0b:91:73:ec:8a:5e:e6:f4:
         17:aa:97:1c:00:02:60:21:ed:07:0c:01:d4:d1:76:d6:56:16:
         cb:05:f4:fc:36:b6:09:b9:d8:aa:e3:49:71:32:24:0c:17:3f:
         e0:72:43:41:d0:02:97:4c:f5:d7:d8:b6:30:bc:61:96:40:35:
         a3:b7:07:d4:21:82:65:e8:a4:43:06:83:06:68:f2:f0:0c:72:
         88:3b:ca:93:c3:47:7e:0b:37:c3:4e:b0:d9:78:89:6e:7c:14:
         bd:7d:e2:d9:22:70:bf:da:da:ec:ad:8d:6a:3b:24:f3:35:7b:
         af:54:1f:4c:64:02:4d:fc:99:a2:98:75:b8:54:59:ff:b4:2a:
         c3:bb:1f:2b:7b:ed:7b:c5:a8:e5:7e:a7:80:bc:c7:41:16:85:
         21:32:05:de:df:fd:08:dd:60:d5:74:da:d3:00:5c:e9:6a:13:
         22:a0:e4:d8:50:62:a5:15:8d:cd:f4:ce:36:c4:c1:23:11:9b:
         3a:59:a0:2c:5b:12:ac:d3:42:f4:cc:39:99:db:94:53:eb:d9:
         be:49:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:04:27 2026 by rpki-client