Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
File:                     DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft (raw, json)
Hash identifier:          OYmCNEOQnt0AUrF13TAK1+g0nvrLCWqJs9M4ttKcwSg=
Subject key identifier:   F3:35:45:FA:10:4D:1A:A7:B3:42:B8:4F:F2:FF:A8:93:59:77:49:E6
Authority key identifier: DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4
Certificate issuer:       /CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
Certificate serial:       4B985B5A112FC8F20C231BD516318998406B1D61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
Manifest number:          C5
Signing time:             Sun 04 Oct 2026 09:34:49 +0000
Manifest this update:     Sun 04 Oct 2026 09:29:49 +0000
Manifest next update:     Mon 05 Oct 2026 11:40:49 +0000
Files and hashes:         1: DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl (hash: RJLvMvvBA1dhqxRmcL6mYxjJ1T5RzTLDgtFNOJJNl2A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 11:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:98:5b:5a:11:2f:c8:f2:0c:23:1b:d5:16:31:89:98:40:6b:1d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
        Validity
            Not Before: Oct  4 09:29:49 2026 GMT
            Not After : Oct  5 11:40:49 2026 GMT
        Subject: CN=F33545FA104D1AA7B342B84FF2FFA893597749E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:e6:10:83:bb:66:4d:7e:c9:5e:74:30:96:
                    e8:c2:b5:95:af:fe:44:f9:39:99:f8:19:7b:40:58:
                    1c:2e:30:0b:8b:fa:aa:52:f6:e4:81:71:50:4c:34:
                    1a:b1:4e:a9:d4:f8:9f:cc:2b:f0:08:a2:7c:c7:78:
                    1a:7f:c0:b4:33:b4:fe:a5:fe:65:22:62:a2:f4:e5:
                    e5:fa:d6:b9:29:23:37:10:ad:53:a0:73:4b:0c:f9:
                    b5:70:65:6b:c4:ef:a6:2c:63:fb:11:ea:e1:c2:08:
                    68:68:a2:ed:89:b6:cf:99:fc:2a:d8:aa:b8:88:7d:
                    c5:d5:b5:b3:47:90:1b:a2:9e:df:85:93:e4:44:2a:
                    39:4f:64:95:3a:8a:e1:a0:48:bb:7f:e2:d4:6c:60:
                    66:1e:2c:bd:1a:aa:ac:b4:4c:51:df:e8:c1:f8:3e:
                    c7:ec:63:67:5e:60:95:8c:53:bc:b0:98:e5:1e:76:
                    54:23:a2:c4:83:9e:d5:fa:13:5c:2e:28:b1:e6:ee:
                    b7:f7:94:1d:7c:36:54:89:15:34:8d:fe:d2:b1:eb:
                    f8:5b:66:8e:4d:6a:68:7b:15:37:bf:5e:8b:5f:fb:
                    c9:7b:cc:31:92:ac:74:32:bb:22:92:bc:72:ad:cb:
                    24:4a:20:7c:be:20:17:61:9c:ed:57:9c:bd:c9:f9:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:45:FA:10:4D:1A:A7:B3:42:B8:4F:F2:FF:A8:93:59:77:49:E6
            X509v3 Authority Key Identifier:
                keyid:DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:91:10:44:d6:c3:3d:e5:a4:de:55:a3:79:6b:4b:50:f8:
         ed:f9:aa:d7:41:ea:78:63:6e:f9:4c:76:a2:cd:88:24:67:55:
         36:df:29:9a:0a:4d:8e:63:ba:d0:d4:f1:7e:42:dc:2b:50:42:
         54:6c:9a:42:7f:6d:dc:25:da:56:64:d5:f9:43:22:dd:58:66:
         1d:c3:ca:42:f1:87:b8:4e:cf:62:3e:83:dd:f8:2b:77:70:59:
         6d:4c:53:37:53:b0:16:bc:d4:18:10:c8:4f:3b:9d:f0:86:5b:
         cd:58:35:02:8c:0f:17:96:33:dc:6a:cd:93:cc:00:af:8c:09:
         ea:59:cc:5e:ef:d9:fd:ad:5c:22:55:d1:5f:a3:91:6b:4c:8e:
         63:48:0e:3b:83:7d:ae:98:25:f7:09:c9:31:df:58:1a:b8:6b:
         b9:51:8f:b4:67:2c:17:72:b4:0f:6c:50:b2:e0:85:a9:e9:7a:
         0f:c0:60:d6:9f:3d:55:ec:d6:5a:f0:3c:6c:9b:b3:c6:d0:56:
         01:d4:d2:44:30:22:31:11:fc:94:2f:e2:b7:ad:1d:a6:15:cc:
         37:32:e9:86:81:7b:f8:d6:2d:1d:20:e9:b7:bf:7d:b1:7c:8d:
         74:8d:a4:26:07:4f:36:44:94:a4:29:76:50:f6:a8:57:22:13:
         cd:ac:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:44 2026 by rpki-client