Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File:                     8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier:          hZi/z9MhkpoXV0AQ1Gqtl0OOAxAryQZA1ZxMFrVacWk=
Subject key identifier:   11:A0:77:11:57:CE:20:28:D2:42:26:46:06:C0:F3:2E:A2:18:23:B6
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer:       /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial:       6AC82B3AC8195E7B334D6123852A5E1877B14738
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number:          C1
Signing time:             Sun 04 Oct 2026 09:34:50 +0000
Manifest this update:     Sun 04 Oct 2026 09:29:50 +0000
Manifest next update:     Mon 05 Oct 2026 10:07:50 +0000
Files and hashes:         1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: G+z5ytYDrVQryk4Kfjkkgf2koolFCU9fqYABRvxCDzE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
                          rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c8:2b:3a:c8:19:5e:7b:33:4d:61:23:85:2a:5e:18:77:b1:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
        Validity
            Not Before: Oct  4 09:29:50 2026 GMT
            Not After : Oct  5 10:07:50 2026 GMT
        Subject: CN=11A0771157CE2028D242264606C0F32EA21823B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:1e:38:fa:bf:50:b6:26:4c:ca:31:5e:cc:
                    2d:53:e4:a3:d8:bc:aa:0d:94:96:a8:78:42:30:a3:
                    9b:c1:35:11:ef:1d:7d:a3:34:75:41:64:ac:f5:ba:
                    6c:14:be:7e:3a:07:be:1b:ad:32:d2:79:94:22:1f:
                    6d:92:b3:43:7c:d1:0f:62:02:6a:61:56:94:f5:86:
                    fd:e3:7d:e4:97:8d:71:39:c9:9c:4e:c2:e2:50:84:
                    7e:51:1d:c0:25:2e:ee:ab:b0:86:15:4f:be:53:6f:
                    1a:5c:4d:3b:a5:92:e3:6c:67:6d:1f:a3:67:0b:58:
                    b0:15:f9:52:80:cc:20:53:f0:0d:82:54:37:ed:36:
                    cd:2d:86:8d:94:30:a2:bd:ee:7c:b3:da:33:46:cb:
                    6e:23:c3:12:de:3e:b5:ed:32:46:e9:95:b0:b2:ab:
                    1e:de:c1:7a:67:b0:ce:e2:94:00:c7:73:f5:bd:96:
                    af:3e:b1:8b:3c:29:c9:e9:04:ba:db:47:5b:2d:67:
                    8d:3b:d0:4d:cc:88:da:55:b4:a4:0c:32:5a:33:2a:
                    f0:e9:1f:5d:e6:ca:09:74:b3:62:3b:f4:58:9b:2b:
                    19:64:18:e3:59:a4:b8:97:bc:5c:4b:d2:ca:3d:21:
                    51:1e:5a:ec:0d:82:96:ef:d8:40:88:c3:27:e9:f2:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A0:77:11:57:CE:20:28:D2:42:26:46:06:C0:F3:2E:A2:18:23:B6
            X509v3 Authority Key Identifier:
                keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:0d:4b:9d:b8:e6:f4:a3:b0:da:d6:fd:35:9a:a2:8d:27:33:
         12:7f:28:b1:58:6c:ea:a0:69:88:bd:26:e2:d9:7f:be:91:73:
         70:fa:6d:ac:f7:50:eb:99:a0:87:4e:13:6d:1c:f2:bf:f0:a0:
         20:4e:4e:51:59:fd:cf:28:f8:83:6a:a5:30:77:06:23:1b:c8:
         c2:b8:9e:0c:38:a2:f9:28:12:00:fe:37:9e:8d:fb:ef:8e:32:
         49:cf:48:b3:ab:63:85:3b:6e:d9:7a:2c:75:c4:c8:94:99:60:
         4a:63:b8:e6:eb:bb:a5:5e:aa:d0:89:d4:d0:85:a9:c3:8f:ef:
         82:a3:27:e6:3b:d3:63:ae:5f:11:50:6d:c5:d0:a8:fa:82:c3:
         f1:db:0c:80:02:d8:1a:99:3a:1c:69:45:e8:88:10:9a:76:b3:
         ac:a9:33:27:eb:3a:a3:a2:e8:95:e7:a0:3f:29:27:c3:f8:d3:
         3e:91:75:65:34:de:62:25:dc:92:d8:a5:9a:83:a9:9a:96:c0:
         c9:ce:52:55:fe:69:e6:49:68:89:51:06:c6:29:d6:35:d1:76:
         ff:3e:c2:db:f2:84:06:50:68:89:f0:d5:4e:de:a3:39:9f:2e:
         76:a6:59:0e:b6:ae:78:a0:7a:dd:60:a7:e9:42:71:97:d9:0f:
         2f:0b:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:20 2026 by rpki-client