Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
File:                     D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft (raw, json)
Hash identifier:          tIBJLG+IdgscWz5DNUv1AT5pPR0UCxzX5364Lg4xNmM=
Subject key identifier:   6A:BE:08:13:CF:6E:C4:A9:40:74:B0:57:EA:E6:52:0A:9B:5D:C0:15
Authority key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B
Certificate issuer:       /CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
Certificate serial:       54F342B88D3D1B10CD350FE03D3E35F29C993F41
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
Manifest number:          C3
Signing time:             Fri 02 Oct 2026 10:51:31 +0000
Manifest this update:     Fri 02 Oct 2026 10:46:31 +0000
Manifest next update:     Sat 03 Oct 2026 13:02:31 +0000
Files and hashes:         1: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl (hash: y0adITcGcw2N9g8Iwy741aoqB2SfmAh55O+xLDsc+U8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl
                          rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:42:b8:8d:3d:1b:10:cd:35:0f:e0:3d:3e:35:f2:9c:99:3f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
        Validity
            Not Before: Oct  2 10:46:31 2026 GMT
            Not After : Oct  3 13:02:31 2026 GMT
        Subject: CN=6ABE0813CF6EC4A94074B057EAE6520A9B5DC015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:e6:22:2b:b8:a3:e5:67:1f:54:ae:1d:08:
                    a7:e8:20:3b:de:75:13:d3:ca:aa:2e:02:be:de:66:
                    a4:38:9a:4c:ba:18:f3:f9:8e:e0:b7:d1:cb:99:65:
                    0d:7b:5e:41:d6:d6:19:8b:9d:5b:f7:84:9e:68:c9:
                    f3:e0:bf:83:c6:49:62:47:df:f7:f7:8d:73:4d:b2:
                    c5:f4:1c:a5:04:31:2a:bc:2f:1a:c2:20:48:7e:36:
                    66:9f:a1:0a:2d:86:bb:e7:75:00:74:b5:ba:6f:17:
                    f6:e7:ba:aa:45:d9:c7:02:ae:21:e9:04:4d:6d:47:
                    88:d4:b9:62:46:58:e5:fe:70:2d:6e:9d:a9:4c:3e:
                    16:6a:b7:69:c1:37:5e:ee:38:f7:1d:6c:9f:d4:3a:
                    87:75:ab:fb:c9:97:eb:00:df:de:da:39:d7:5a:25:
                    13:53:8d:0d:eb:27:33:e4:76:72:b7:1c:5f:88:eb:
                    12:6f:db:63:b3:38:30:6c:c3:dd:38:fd:c0:da:31:
                    95:33:09:8e:e2:d1:63:91:fe:e2:7a:24:13:b8:b2:
                    e7:a0:bf:ec:ae:f4:b3:0b:57:35:42:ea:a2:0e:8a:
                    8f:e9:51:0e:aa:ad:1a:5b:41:78:34:36:e4:01:e4:
                    d4:23:bb:4d:03:fd:d6:00:79:49:98:68:3b:e4:f7:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:08:13:CF:6E:C4:A9:40:74:B0:57:EA:E6:52:0A:9B:5D:C0:15
            X509v3 Authority Key Identifier:
                keyid:D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:37:86:d7:ec:49:f1:9a:17:81:b0:9a:ce:67:54:c0:d4:35:
         a0:21:66:ae:71:5d:a6:32:6f:e5:5d:34:4d:a0:b3:3c:1e:be:
         41:12:35:c0:7a:09:fe:50:6c:eb:d5:4f:95:49:aa:8f:a4:5d:
         88:52:64:11:dc:6b:93:39:d3:b2:77:70:ad:40:3c:f6:ef:65:
         1a:af:a4:e1:14:f8:ff:a9:c5:94:85:1d:1f:a3:10:09:fa:54:
         31:6c:79:7d:03:de:83:12:a8:18:91:d9:7a:45:6c:75:47:4f:
         a5:3d:26:8c:04:2d:40:fe:46:7f:da:ea:b1:c1:64:31:ce:57:
         ef:f8:54:72:53:27:03:5c:bb:2d:e8:16:b9:42:93:0a:11:cd:
         0f:6a:d4:ae:d8:92:51:6b:ce:c9:0a:e0:d6:0c:ad:74:32:a2:
         8c:c6:52:06:61:36:ba:43:6f:6c:ff:58:34:f2:fd:0a:9d:9a:
         63:4f:54:20:aa:41:2b:79:76:ef:3b:53:72:58:3e:d9:0f:04:
         3d:af:c4:f4:43:df:16:5f:63:f7:26:64:b7:a6:ed:a8:37:84:
         ca:b3:60:ba:21:e4:04:e3:14:96:e5:fb:20:77:84:d6:21:82:
         e0:34:10:09:2a:13:33:67:a0:8f:75:e4:2d:02:dd:df:86:f1:
         fd:29:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:19:38 2026 by rpki-client