Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft
File:                     EBF0E219709816EEEB7BC07FB24315A91B57F285.mft (raw, json)
Hash identifier:          aVL+UdajWHKj6coXBdOmKeRzN/GE4bfmOASVPftjYP0=
Subject key identifier:   E3:22:A0:7B:5E:58:8F:50:35:7C:BB:B8:8B:47:60:6B:ED:A2:31:5F
Authority key identifier: EB:F0:E2:19:70:98:16:EE:EB:7B:C0:7F:B2:43:15:A9:1B:57:F2:85
Certificate issuer:       /CN=EBF0E219709816EEEB7BC07FB24315A91B57F285
Certificate serial:       46132B00C2A246B17F050F6909EE18D2948AA6FF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EBF0E219709816EEEB7BC07FB24315A91B57F285.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 03:31:34 +0000
Manifest this update:     Wed 13 May 2026 03:26:34 +0000
Manifest next update:     Thu 14 May 2026 04:07:34 +0000
Files and hashes:         1: EBF0E219709816EEEB7BC07FB24315A91B57F285.crl (hash: xRbb09M07xwQSk3TXEjDCYZYQZQNB/y93J22BWF48+s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.crl
                          rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EBF0E219709816EEEB7BC07FB24315A91B57F285.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:2b:00:c2:a2:46:b1:7f:05:0f:69:09:ee:18:d2:94:8a:a6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF0E219709816EEEB7BC07FB24315A91B57F285
        Validity
            Not Before: May 13 03:26:34 2026 GMT
            Not After : May 14 04:07:34 2026 GMT
        Subject: CN=E322A07B5E588F50357CBBB88B47606BEDA2315F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:ca:1d:25:bc:c3:c2:7d:10:fc:f6:01:5e:
                    42:55:fc:68:19:db:3a:8d:73:10:01:48:d2:88:95:
                    f8:cc:70:f3:7a:93:6f:61:a4:40:3d:93:5c:ce:2f:
                    17:79:49:7c:2b:c6:58:63:8f:7d:06:7c:f1:f4:cc:
                    25:a5:25:e5:81:32:89:14:66:41:3a:e9:fc:30:c2:
                    12:05:0b:f1:94:55:e6:55:68:0e:06:db:44:ba:41:
                    22:57:26:79:b9:29:a4:e0:5e:8d:db:20:b1:52:5e:
                    0e:aa:ed:a9:86:17:00:f3:59:d2:8d:58:3b:25:64:
                    e3:4b:13:2e:5d:de:59:c8:11:a6:2c:49:5d:43:43:
                    18:72:ec:7c:6f:3f:2e:33:47:65:97:03:0d:46:ed:
                    e1:ae:8b:e5:2d:6c:c2:f8:fc:de:80:2e:86:01:0a:
                    79:c1:b6:58:c1:07:bc:45:1d:61:bf:e1:2d:93:d6:
                    e4:73:21:d3:1d:12:e0:13:d0:b4:b6:27:8d:19:87:
                    57:69:0d:ba:fa:fd:5a:45:74:b9:a5:94:c6:f9:c4:
                    93:bd:9b:26:45:7e:fc:81:48:d1:f9:c3:39:6d:7a:
                    06:b2:ac:53:41:12:2d:bd:12:47:68:b8:d1:84:74:
                    17:46:c3:7f:f6:7f:08:29:3c:df:f5:f4:b5:55:e1:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:A0:7B:5E:58:8F:50:35:7C:BB:B8:8B:47:60:6B:ED:A2:31:5F
            X509v3 Authority Key Identifier:
                keyid:EB:F0:E2:19:70:98:16:EE:EB:7B:C0:7F:B2:43:15:A9:1B:57:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EBF0E219709816EEEB7BC07FB24315A91B57F285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:25:8e:de:28:55:3d:a2:08:33:52:b8:46:4e:99:06:2a:
         ee:b1:c4:a5:33:3d:92:74:5e:74:e4:eb:db:04:4c:fd:70:a3:
         9f:06:fd:c7:91:12:a3:37:e4:d5:20:2e:e3:10:c9:7a:67:ac:
         50:99:fa:9a:c5:dc:58:bf:75:f9:a5:77:a3:f5:4e:e8:bb:5b:
         a3:05:d9:d3:3b:0c:03:e0:ba:fb:72:ec:7d:c1:53:fa:5f:35:
         69:52:9b:bd:56:f1:22:52:1b:55:3b:c2:3a:45:6c:38:da:84:
         25:0d:33:94:14:55:be:40:f7:4c:cb:a4:c4:79:ef:2f:29:12:
         6f:27:56:5a:93:b3:f4:fa:95:b8:58:c1:50:d4:ea:ad:83:2d:
         ee:63:49:a7:bc:88:8e:fc:98:61:ef:1d:1c:e1:c7:0a:fe:82:
         c5:2d:f5:ed:c0:d8:41:0e:65:0b:86:fa:ad:aa:29:94:00:47:
         ea:d9:ba:b4:5c:58:82:f8:a4:70:62:fa:1a:50:0c:f1:11:06:
         58:f5:fe:15:d0:62:d9:a0:53:d4:be:38:15:4c:eb:1a:06:9e:
         2f:38:c7:85:68:af:99:e9:06:13:16:18:37:67:eb:ae:f3:e0:
         62:cf:80:ca:0a:55:54:6c:31:0a:8c:57:03:1a:ec:b9:a6:a9:
         d9:0a:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:38 2026 by rpki-client