Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File:                     8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier:          QIf45tGYFRA8e1BqlyePTZYtsFSW/KjpxfBu1DCfcY0=
Subject key identifier:   41:81:8D:C1:80:CF:F6:86:62:98:A6:F9:79:B2:D4:7F:BE:B1:4C:0B
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer:       /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial:       4A58034F2DFF825AD1CB6540587DD8613003482B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 05:42:10 +0000
Manifest this update:     Wed 13 May 2026 05:37:10 +0000
Manifest next update:     Thu 14 May 2026 09:10:10 +0000
Files and hashes:         1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: eJsLhX2DP5yn27RJ9W5PlSdr1rMd8/Am/ujHcgXx08Y=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
                          rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:58:03:4f:2d:ff:82:5a:d1:cb:65:40:58:7d:d8:61:30:03:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
        Validity
            Not Before: May 13 05:37:10 2026 GMT
            Not After : May 14 09:10:10 2026 GMT
        Subject: CN=41818DC180CFF6866298A6F979B2D47FBEB14C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:b1:0c:93:a2:40:71:fc:22:15:5f:fb:bb:
                    48:8a:ec:d7:61:29:fe:7d:fc:ae:48:92:d4:21:2f:
                    96:2e:ea:5d:e0:3a:2e:a8:f5:06:a0:5d:c1:64:c8:
                    44:1f:e4:9f:b2:4e:2a:5b:38:82:3d:c7:84:bd:56:
                    f2:b4:0b:4a:99:73:18:80:70:a8:33:c2:3d:68:55:
                    ef:e1:67:29:aa:50:db:31:14:d3:3d:4f:26:3b:e4:
                    8d:77:be:dd:4f:15:5d:67:e2:e8:af:5e:f2:7d:3f:
                    bd:4e:be:b6:f6:87:b4:54:be:51:ad:87:5a:c1:8d:
                    f9:b7:c1:aa:4b:bf:fe:da:16:e2:07:b8:58:86:09:
                    ee:fe:86:80:72:30:10:07:eb:35:85:89:c1:e1:c4:
                    dd:86:ab:0d:2f:df:e8:87:c4:fb:57:37:49:15:8e:
                    34:65:32:87:c6:e7:27:b4:61:9a:a1:98:1d:c7:17:
                    c2:75:1a:88:58:f3:2e:34:8d:e9:1f:c9:a4:73:2d:
                    f7:6a:8c:30:12:d1:5f:a3:cb:ed:39:18:72:b8:ac:
                    48:dd:4e:01:c1:de:8c:cf:ea:32:06:85:d1:88:cb:
                    79:ce:94:9d:60:f5:49:a4:e1:a9:d4:df:c7:ed:0b:
                    95:d4:6c:fd:e8:f9:41:e8:35:34:3a:3b:db:78:17:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:8D:C1:80:CF:F6:86:62:98:A6:F9:79:B2:D4:7F:BE:B1:4C:0B
            X509v3 Authority Key Identifier:
                keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:2e:26:94:70:4d:b3:a6:aa:70:c0:79:06:53:8c:9c:a1:
         68:2a:b5:36:a4:4a:04:a0:4b:7d:4c:9f:47:dc:e8:b2:eb:96:
         38:33:06:88:40:76:51:8b:cc:51:c3:49:bf:f3:fe:33:28:21:
         e5:04:a9:de:b9:a5:eb:16:d5:73:51:82:00:92:6f:52:96:59:
         7c:b4:c4:ad:52:fe:c2:60:86:3d:d0:99:8a:85:64:a3:47:60:
         65:da:7b:f3:39:68:3f:ad:5f:54:92:e5:58:e1:25:9d:ce:a5:
         e7:69:7c:1d:88:fb:0d:2b:c5:8c:29:ce:ee:3e:de:50:23:c9:
         e6:43:f7:00:2d:d9:61:ef:b9:de:5c:d7:c7:3c:24:be:d2:de:
         10:4d:17:db:54:f9:8a:7d:47:c9:e4:8f:a6:f6:f0:a6:80:ef:
         ef:b7:9e:94:74:0d:a1:21:1d:7c:41:43:c4:ab:f2:3d:3e:03:
         7b:8d:f3:71:fa:3d:e4:c7:65:4b:21:c1:2b:9e:93:54:a0:5c:
         d8:d8:6f:89:16:4c:2e:fc:b0:2c:58:92:7c:5d:3b:c4:50:19:
         93:45:2c:eb:ea:c8:86:f6:69:8d:30:6e:70:82:41:b7:5a:b9:
         ec:ed:5b:c7:d1:51:d0:1c:35:36:5e:c6:f1:dc:f8:0e:3f:be:
         5a:2a:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:43 2026 by rpki-client