Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File:                     8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier:          rNb8NYiCSVf+9+Lhvz6zRZ+4+yE29IoNCeQTD9/cyA8=
Subject key identifier:   38:C0:F2:34:22:A2:51:5B:24:1B:2D:33:08:66:F6:31:6F:9D:CE:C2
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer:       /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial:       57DA6449E2C4E8A12C1ECBC06980DCEB30FBBF02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 16:19:16 +0000
Manifest this update:     Tue 30 Jun 2026 16:14:16 +0000
Manifest next update:     Wed 01 Jul 2026 19:03:16 +0000
Files and hashes:         1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: 2ubKk3huWj6ZbHJkCJ2VF283iGK1lJtG1pYDv5qa0a8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
                          rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:64:49:e2:c4:e8:a1:2c:1e:cb:c0:69:80:dc:eb:30:fb:bf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
        Validity
            Not Before: Jun 30 16:14:16 2026 GMT
            Not After : Jul  1 19:03:16 2026 GMT
        Subject: CN=38C0F23422A2515B241B2D330866F6316F9DCEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:ce:76:79:89:be:e8:7f:03:ff:2f:75:e3:
                    ba:88:a8:95:af:52:39:e6:17:24:f1:ee:48:63:4f:
                    28:c0:fc:83:84:29:9f:36:40:8a:6e:61:c0:b5:f9:
                    d5:e0:ac:e3:05:ed:a9:c9:e0:5e:81:f3:71:c9:eb:
                    7e:47:b6:1a:aa:59:b7:3d:2e:28:db:d6:68:68:45:
                    a5:db:62:d5:bd:d8:07:64:a8:d4:78:99:8c:2a:41:
                    25:5a:61:8c:77:fa:79:85:ab:5b:59:8e:df:7d:36:
                    94:fd:f4:9d:d1:9e:3b:53:a0:c7:89:6d:f4:5c:d3:
                    26:66:2e:99:4c:98:d4:d6:30:5a:bf:cb:62:08:ae:
                    02:bb:4b:24:70:25:3a:0f:12:81:df:80:c1:5b:57:
                    b6:f9:4d:1e:06:1f:2d:31:81:eb:64:0e:1b:ed:bc:
                    66:d6:d1:0c:e6:f8:6e:62:6e:7c:e5:a6:ff:fb:46:
                    77:db:0e:c2:2f:00:0c:cf:89:22:39:f5:8e:27:d0:
                    6f:f0:83:70:6b:6b:da:2d:72:1d:01:b2:3c:f9:59:
                    f5:5d:21:d2:9b:f3:99:4d:59:29:00:6e:b9:30:07:
                    f3:06:cf:44:8b:fd:40:4b:5d:e3:3b:7b:3c:48:dd:
                    40:85:10:9a:14:ad:0f:2b:24:0b:50:75:00:ba:58:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:F2:34:22:A2:51:5B:24:1B:2D:33:08:66:F6:31:6F:9D:CE:C2
            X509v3 Authority Key Identifier:
                keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:cb:4b:e8:1b:d2:16:8a:5c:96:ab:d0:d0:1f:ee:45:1b:
         0a:d4:da:22:02:cb:ac:62:f5:9f:de:b2:ad:4d:fb:a1:2a:ba:
         27:66:3e:4c:81:3f:41:84:b6:ca:bc:bc:28:f5:78:07:3d:df:
         42:11:8c:3f:ef:7a:26:2b:02:0f:87:e5:3b:92:0f:e5:c7:66:
         01:6c:1e:6f:15:29:2b:2d:79:2a:8d:e8:35:0b:ba:99:35:63:
         f0:e5:ba:80:f2:cf:a4:04:8e:23:a8:c5:d3:d5:e4:ad:12:43:
         89:6d:c1:8b:d4:9f:03:9f:06:95:b7:09:e7:ad:7f:03:d5:c2:
         e1:13:b9:1e:a5:f0:79:2f:b3:a4:6f:7e:5e:55:de:70:87:c2:
         06:26:ef:5a:05:98:3e:d4:1a:32:7e:06:c5:04:a5:2d:6d:3e:
         3d:2a:7c:7c:ba:ff:c6:75:eb:8b:ac:22:17:b0:27:79:2f:d2:
         e0:f5:bf:de:51:2c:6b:f7:e7:76:07:20:14:d3:33:aa:93:45:
         cb:3e:dd:ac:96:22:8c:1e:30:7c:6b:58:19:12:62:90:77:7b:
         8d:71:a0:9f:90:88:9a:d5:5d:70:71:cf:82:ca:f4:18:e4:23:
         ed:1f:9d:93:2b:52:e6:33:8c:19:3e:40:5c:15:84:53:17:97:
         f3:0d:5c:8c
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUV9pkSeLE6KEsHsvAaYDc6zD7vwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0Qjk0
NzZCNjg1QzAeFw0yNjA2MzAxNjE0MTZaFw0yNjA3MDExOTAzMTZaMDMxMTAvBgNV
BAMTKDM4QzBGMjM0MjJBMjUxNUIyNDFCMkQzMzA4NjZGNjMxNkY5RENFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8852eYm+6H8D/y9147qIqJWv
UjnmFyTx7khjTyjA/IOEKZ82QIpuYcC1+dXgrOMF7anJ4F6B83HJ635HthqqWbc9
Lijb1mhoRaXbYtW92AdkqNR4mYwqQSVaYYx3+nmFq1tZjt99NpT99J3RnjtToMeJ
bfRc0yZmLplMmNTWMFq/y2IIrgK7SyRwJToPEoHfgMFbV7b5TR4GHy0xgetkDhvt
vGbW0Qzm+G5ibnzlpv/7RnfbDsIvAAzPiSI59Y4n0G/wg3Bra9otch0Bsjz5WfVd
IdKb85lNWSkAbrkwB/MGz0SL/UBLXeM7ezxI3UCFEJoUrQ8rJAtQdQC6WCOxAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUOMDyNCKiUVskGy0zCGb2MW+dzsIwHwYDVR0j
BBgwFoAUglfe0aOuIFMsWp+BNa80uUdraFwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRExFUi8w
LzgyNTdERUQxQTNBRTIwNTMyQzVBOUY4MTM1QUYzNEI5NDc2QjY4NUMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0
Qjk0NzZCNjg1Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RMRVIvMC84MjU3REVEMUEzQUUyMDUz
MkM1QTlGODEzNUFGMzRCOTQ3NkI2ODVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXunLS+gb0haKXJar
0NAf7kUbCtTaIgLLrGL1n96yrU37oSq6J2Y+TIE/QYS2yry8KPV4Bz3fQhGMP+96
JisCD4flO5IP5cdmAWwebxUpKy15Ko3oNQu6mTVj8OW6gPLPpASOI6jF09XkrRJD
iW3Bi9SfA58GlbcJ561/A9XC4RO5HqXweS+zpG9+XlXecIfCBibvWgWYPtQaMn4G
xQSlLW0+PSp8fLr/xnXri6wiF7AneS/S4PW/3lEsa/fndgcgFNMzqpNFyz7drJYi
jB4wfGtYGRJikHd7jXGgn5CImtVdcHHPgsr0GOQj7R+dkytS5jOMGT5AXBWEUxeX
8w1cjA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:51 2026 by rpki-client