Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File:                     8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier:          Dp1FwjNOMER15iU8ri+CSti5+0f11V+Saf3ohdFR9us=
Subject key identifier:   25:22:6D:FD:94:94:D0:A2:4F:9F:3F:4E:44:6E:33:38:34:9D:93:8D
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer:       /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial:       457B3C567B9BBA04C2814893CB9A53DA511D5C31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 09:22:51 +0000
Manifest this update:     Wed 13 May 2026 09:17:51 +0000
Manifest next update:     Thu 14 May 2026 11:36:51 +0000
Files and hashes:         1: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: lY9kXCwaCLJIpfT0uuER3DOgGEGzhJlzyGcRbXikgWc=)
                          2: 3136332e3132382e3137322e302f32332d3234203d3e2037343833.roa (hash: uLO/miZp9vF1gX6kjb/vo6kgYlQos8JcnqN+vE1tiZo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
                          rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7b:3c:56:7b:9b:ba:04:c2:81:48:93:cb:9a:53:da:51:1d:5c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Validity
            Not Before: May 13 09:17:51 2026 GMT
            Not After : May 14 11:36:51 2026 GMT
        Subject: CN=25226DFD9494D0A24F9F3F4E446E3338349D938D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:54:4b:1f:6c:52:e0:0b:38:52:71:52:66:
                    59:cc:9e:48:c9:ca:b5:6b:44:08:35:74:cb:91:90:
                    4f:a8:5d:b0:9b:c8:75:f9:9c:de:a2:85:d3:95:2e:
                    8e:de:a9:af:a0:70:f7:91:69:a1:a2:97:de:2e:71:
                    56:eb:c4:21:9c:5c:99:0c:b5:24:99:5b:89:c3:fb:
                    8d:02:a2:d3:e0:1b:5c:76:cf:fc:38:1c:2b:69:20:
                    b8:82:5f:c4:54:f0:63:d1:be:f1:db:9e:91:25:95:
                    d6:72:2d:a7:ff:74:0e:0c:86:50:59:cb:c2:95:c3:
                    d2:ed:b2:54:e7:14:b1:3d:2c:ed:4a:26:1f:be:c3:
                    15:88:09:6a:15:b0:b1:24:93:c2:b3:44:52:14:6b:
                    44:44:25:7b:11:05:4c:86:50:c0:23:7d:e0:24:eb:
                    4e:9d:fd:1d:6b:74:0c:d0:91:c2:aa:c7:75:8a:33:
                    4e:d5:7b:44:61:4d:69:06:fc:c9:5a:95:0f:1c:84:
                    2b:6a:7b:bb:ad:a4:84:7f:e6:02:bd:d7:f9:5a:5a:
                    06:6c:17:db:17:7d:ff:b9:94:0f:88:9f:80:06:80:
                    33:3b:b1:69:40:0a:5f:c7:66:c8:eb:36:12:1d:5d:
                    cd:30:c5:fb:4b:03:9c:60:50:16:90:8f:c9:a5:81:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:6D:FD:94:94:D0:A2:4F:9F:3F:4E:44:6E:33:38:34:9D:93:8D
            X509v3 Authority Key Identifier:
                keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b6:a6:8c:57:6e:ef:2a:d4:60:fd:d7:1a:04:0f:c3:7f:52:
         da:12:bd:29:3c:08:1c:41:f0:55:6d:54:7f:d5:b2:f0:88:b1:
         2e:cf:03:71:d9:84:3d:d1:83:9c:e2:d5:86:99:a8:3c:a6:7e:
         72:38:d6:4b:4a:cd:d1:7c:07:a2:55:2c:a0:a9:b1:22:4d:1d:
         4f:84:1d:d5:3d:e5:8f:82:d1:6a:57:02:58:e4:c0:94:90:59:
         16:54:61:e9:cb:2d:50:0e:75:1c:ae:6b:1b:ae:f8:10:a2:7f:
         6d:fa:69:4d:30:87:1f:c6:17:a4:ef:2a:58:68:0c:e0:83:26:
         1a:94:b3:7d:09:a1:34:38:a8:e9:ad:55:8c:57:cc:ef:83:ec:
         c6:0a:4d:6b:e0:52:be:44:24:30:1e:1a:39:ef:e0:c7:cc:53:
         9d:4c:fb:41:24:e4:bc:2a:b7:40:b5:b5:b6:af:0d:50:9d:3e:
         57:4e:d0:9c:89:0d:78:c4:d5:07:5d:b3:33:61:9c:fe:9a:8f:
         96:f8:f8:1d:73:93:d3:29:20:e3:44:4d:e9:ce:71:b7:1c:da:
         c7:31:a5:cd:59:ee:a2:76:d3:04:14:25:d2:fe:51:51:17:d3:
         83:ce:61:ec:fe:8c:26:56:52:d2:5f:e4:0f:0d:58:e4:35:93:
         6c:81:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:35:58 2026 by rpki-client