Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
File:                     D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft (raw, json)
Hash identifier:          VGC1/1/BIyxNwrNUJMLA7N6wLbXo4bwnvkpMrLgf2ks=
Subject key identifier:   1E:53:45:F0:F8:31:CE:89:E8:11:8B:EC:75:AC:D7:F1:33:FA:BE:5C
Authority key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B
Certificate issuer:       /CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
Certificate serial:       41D2FE6CF83D4A20AEFB9FB5ED83C637D4C41CF6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 05:42:10 +0000
Manifest this update:     Wed 13 May 2026 05:37:10 +0000
Manifest next update:     Thu 14 May 2026 08:55:10 +0000
Files and hashes:         1: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl (hash: /oZ4gfxvDxyoJjn+tlgQDmU1UdHhasYKlIzVaAisOH8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl
                          rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d2:fe:6c:f8:3d:4a:20:ae:fb:9f:b5:ed:83:c6:37:d4:c4:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
        Validity
            Not Before: May 13 05:37:10 2026 GMT
            Not After : May 14 08:55:10 2026 GMT
        Subject: CN=1E5345F0F831CE89E8118BEC75ACD7F133FABE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:5b:bb:20:47:cb:0d:27:50:9a:bb:4e:e4:
                    07:16:5f:38:cb:56:a6:7e:75:7a:38:7a:8b:fc:99:
                    c9:75:99:eb:5a:d3:7a:cf:ec:5a:0a:d1:1e:9d:13:
                    81:6b:11:21:87:ec:aa:8c:c1:92:d9:4c:ff:9a:71:
                    61:51:24:e8:6b:a7:64:60:d0:0e:7d:fe:07:27:da:
                    8d:8b:20:e7:27:d5:47:85:44:b2:a7:e0:63:27:86:
                    eb:08:a1:07:b8:94:16:23:2c:cc:74:d4:ee:7f:d1:
                    4d:65:80:36:f7:7b:9a:67:ad:ba:c7:b6:b8:51:3a:
                    48:06:d9:5a:52:fd:f5:c2:0b:89:9c:73:a4:54:d3:
                    64:e6:a9:72:59:81:3d:ac:51:e8:8c:77:48:46:63:
                    3e:0c:b1:3d:33:9e:c6:01:e6:59:90:84:d2:12:4e:
                    2a:f8:05:40:9d:a9:c2:d3:28:bc:0e:47:05:75:ca:
                    37:71:28:8e:53:20:64:14:c2:06:3c:da:27:d6:a5:
                    01:5f:31:b3:6b:83:73:0a:c9:9a:bf:c7:12:2f:76:
                    91:55:a1:30:fa:b9:a4:d4:aa:5a:89:9d:44:c1:7f:
                    06:a0:16:67:3b:07:33:0c:bd:17:36:96:2f:67:7a:
                    e0:8c:50:f7:cf:7c:0c:84:9c:2c:79:f9:63:96:8c:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:45:F0:F8:31:CE:89:E8:11:8B:EC:75:AC:D7:F1:33:FA:BE:5C
            X509v3 Authority Key Identifier:
                keyid:D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:38:6d:5c:ac:18:04:36:5d:c3:9c:17:00:4d:65:f2:e3:
         28:c0:28:68:e4:b7:0e:10:fc:d2:ca:e6:bd:0b:4b:8c:37:68:
         ce:74:ed:97:3e:92:b0:a0:d9:a6:a6:e8:6b:d7:fe:11:a4:98:
         fc:99:bf:d9:6f:14:72:49:26:e4:90:53:3c:d7:15:94:bd:87:
         42:df:b6:ed:09:27:78:48:d8:58:0f:86:cb:56:64:ca:da:b6:
         30:8e:e8:ab:29:ca:b0:f0:4d:9a:ac:e9:6d:75:da:cb:5d:dc:
         bf:f4:a6:53:33:0a:55:7b:3a:17:7e:6d:4c:d7:54:33:74:6c:
         e3:d1:e6:a5:92:ab:16:6a:07:b2:df:ca:2b:82:49:d9:fa:e3:
         58:a6:aa:d4:12:19:09:c1:ef:26:37:cd:f2:23:86:e0:fb:7c:
         83:19:51:86:3b:15:9d:a3:ed:4b:5a:bc:45:87:bb:eb:dd:0b:
         a2:50:80:33:ff:b8:cf:5d:31:7b:09:19:1e:1e:de:6e:49:67:
         e5:e8:ec:6c:3c:58:30:0a:8b:a3:04:5c:93:76:51:5e:28:d2:
         be:c9:0c:45:6d:a8:95:e0:0f:7e:e5:9e:aa:fc:e1:cb:9d:6e:
         51:58:32:65:52:39:e7:74:ef:fd:a1:49:0f:f0:67:44:27:cf:
         f1:aa:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:59 2026 by rpki-client