Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File:                     295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier:          UqYKP5HxQ+5MlHFNBLPz1j+94GpLmKoxQtJCX8pw6iw=
Subject key identifier:   AB:DA:2A:C3:90:F2:DA:3E:53:75:7F:FD:A2:2C:3F:88:D7:EE:EC:59
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer:       /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial:       1BE72B8878C58EC855F6AECE68AB8CCBD0099891
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 01:26:23 +0000
Manifest this update:     Wed 13 May 2026 01:21:23 +0000
Manifest next update:     Thu 14 May 2026 01:52:23 +0000
Files and hashes:         1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: T0bXK/R8WDtrLufjNq7+3QTZogBGwg/JcMytvF7i2Ro=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
                          rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e7:2b:88:78:c5:8e:c8:55:f6:ae:ce:68:ab:8c:cb:d0:09:98:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
        Validity
            Not Before: May 13 01:21:23 2026 GMT
            Not After : May 14 01:52:23 2026 GMT
        Subject: CN=ABDA2AC390F2DA3E53757FFDA22C3F88D7EEEC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:19:95:3f:87:13:cb:3c:9e:29:5d:ab:f8:
                    ca:fb:7e:ab:05:ad:ea:6d:9b:b1:2b:f4:c1:96:24:
                    4f:da:57:ed:c2:90:34:10:f2:89:b1:7d:97:5b:1f:
                    35:90:95:83:b8:be:ce:88:f4:d6:0b:f0:75:94:55:
                    6d:08:b8:ca:50:08:11:3e:95:59:35:23:b8:8e:64:
                    33:87:17:dc:f7:3e:0a:9e:56:07:ba:a1:5a:12:e8:
                    ff:0d:13:8a:81:50:48:8b:4a:cd:d9:92:30:a7:74:
                    52:a8:23:43:28:17:c7:93:39:fa:59:11:ec:78:2a:
                    65:b0:16:21:77:52:2d:a8:d1:2a:7b:fc:e7:7e:fe:
                    a5:67:96:5b:79:60:31:92:4e:e0:09:b8:e6:15:c7:
                    9e:45:65:5b:72:ac:cd:24:44:49:44:b6:ee:68:b9:
                    6a:0b:36:e1:20:a5:34:af:12:44:d9:84:f5:58:d4:
                    90:0a:d4:53:f3:7e:84:e5:65:4e:82:e1:d0:f8:b3:
                    27:0f:08:c5:8f:0c:96:91:48:41:5d:f6:05:27:ce:
                    6d:a0:5f:2c:d5:73:7d:58:63:f2:16:eb:8a:3c:d3:
                    6b:9d:f5:4b:be:f9:b1:a7:0f:d7:2f:9e:af:24:1e:
                    66:d1:11:c2:e6:d7:99:6e:04:a9:b6:7f:30:c7:5e:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DA:2A:C3:90:F2:DA:3E:53:75:7F:FD:A2:2C:3F:88:D7:EE:EC:59
            X509v3 Authority Key Identifier:
                keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:56:d3:4a:ff:53:39:9e:6e:ba:9e:f0:0f:94:b7:cb:0c:
         e3:d7:97:d9:1f:29:74:55:26:59:5e:e1:3c:b3:70:46:1d:91:
         3c:4c:f3:29:c8:aa:ff:fa:56:c7:8d:fc:e3:2b:03:3e:ec:a7:
         26:62:26:9e:a5:6d:53:d2:22:91:7d:c5:cc:e8:22:3d:2c:f2:
         c0:6a:29:82:91:43:f7:5c:db:d1:a9:18:29:c4:d8:23:b1:b3:
         50:09:55:a6:5f:6a:58:69:6a:fe:6a:34:e7:72:20:d3:c2:cc:
         01:51:53:97:c9:06:9b:be:2c:02:d2:59:b6:bd:46:30:be:f4:
         6f:e3:42:3e:e1:93:90:89:82:27:a7:1b:c5:74:d2:22:cc:9a:
         58:ae:33:b9:2a:39:aa:a5:09:0e:ae:aa:67:92:d4:e0:d7:87:
         b8:ad:5d:3a:79:4c:a8:0b:d4:3e:45:03:d2:da:25:73:28:e8:
         0a:c5:b4:d2:8a:3e:fa:fa:53:e1:fe:46:fa:cd:76:0b:57:a6:
         b7:5b:b6:cc:12:84:ed:37:e4:14:47:28:c1:2d:1d:4d:a8:c9:
         dd:20:c8:3d:cc:43:88:ac:52:df:ef:94:b4:02:36:34:99:b6:
         24:9b:1e:86:2e:03:6d:da:05:e4:5f:d5:65:28:a6:24:d4:3a:
         55:46:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:28 2026 by rpki-client