Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
File:                     2465066A4404957965BC1D7E1BFE582611E69618.mft (raw, json)
Hash identifier:          rDizUb51dC3sWL4Us6IgyYAXmpr9E9OpzKW9HAFKUrk=
Subject key identifier:   AC:74:CB:12:DA:21:81:10:25:D2:58:10:42:86:A8:B9:63:39:0F:87
Authority key identifier: 24:65:06:6A:44:04:95:79:65:BC:1D:7E:1B:FE:58:26:11:E6:96:18
Certificate issuer:       /CN=2465066A4404957965BC1D7E1BFE582611E69618
Certificate serial:       70ED3EF6F170F2F2793557FED2B52562B5BC75B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
Manifest number:          C0
Signing time:             Fri 02 Oct 2026 21:24:04 +0000
Manifest this update:     Fri 02 Oct 2026 21:19:04 +0000
Manifest next update:     Sun 04 Oct 2026 00:39:04 +0000
Files and hashes:         1: 2465066A4404957965BC1D7E1BFE582611E69618.crl (hash: hVtNXJYWN97MaHlgXV4UYmJaG+gktR4SIey3Ge4Dc88=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.crl
                          rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:3e:f6:f1:70:f2:f2:79:35:57:fe:d2:b5:25:62:b5:bc:75:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2465066A4404957965BC1D7E1BFE582611E69618
        Validity
            Not Before: Oct  2 21:19:04 2026 GMT
            Not After : Oct  4 00:39:04 2026 GMT
        Subject: CN=AC74CB12DA21811025D258104286A8B963390F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:8a:30:11:54:dd:ce:78:98:06:e6:c8:a4:
                    57:cf:58:70:a2:65:56:b3:09:bd:db:d7:a4:24:73:
                    20:1d:3f:73:cb:d2:24:be:a5:74:ed:99:31:9c:51:
                    9a:78:90:e8:e1:5f:44:8c:fc:77:fa:5d:3e:23:75:
                    23:28:6c:00:ec:a7:3c:62:09:84:0f:13:ba:aa:e7:
                    3c:ba:17:24:04:a9:b2:39:53:a4:52:f0:16:c4:a9:
                    d8:46:c6:6a:96:ad:d8:40:32:37:a7:c7:9b:95:37:
                    76:80:57:66:a0:81:c7:f8:8d:1d:04:94:58:02:41:
                    1f:38:58:b0:3d:38:3d:b4:01:5c:60:b5:6f:9d:cb:
                    ce:4a:42:0a:ab:6f:88:dc:ef:92:76:37:d8:07:6a:
                    be:2d:49:6d:05:df:68:0b:41:23:7c:84:d3:c5:83:
                    50:6b:03:3e:09:cd:3a:2e:88:ce:ed:2a:ed:b3:d8:
                    b7:22:43:62:a4:f3:8d:25:7d:5f:4f:26:f1:67:06:
                    0f:e9:ee:f3:b4:a1:f1:3a:2f:3b:4f:2e:00:16:91:
                    d3:ee:6b:ef:49:d0:1b:8b:b9:ab:80:fa:71:01:f6:
                    51:fa:72:9f:b9:f0:d6:90:e7:3a:a6:6d:62:e3:5d:
                    26:45:4a:b7:91:a6:e2:59:d6:64:9f:44:46:94:e7:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:74:CB:12:DA:21:81:10:25:D2:58:10:42:86:A8:B9:63:39:0F:87
            X509v3 Authority Key Identifier:
                keyid:24:65:06:6A:44:04:95:79:65:BC:1D:7E:1B:FE:58:26:11:E6:96:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:46:2f:cf:82:5f:33:d8:26:f8:29:08:9c:39:4b:92:22:
         be:d8:19:34:da:84:ee:15:f1:50:80:b8:83:96:c8:6a:5f:cc:
         af:47:91:98:32:c4:ad:e7:61:18:28:c9:2e:e3:52:33:1c:b9:
         9b:cf:18:b7:70:a6:77:45:6b:5f:aa:f2:78:28:06:93:1a:27:
         14:4e:bf:40:7e:c3:84:52:12:38:07:22:5b:21:7a:7a:4a:0a:
         6d:50:2c:2a:1e:14:e7:3a:1a:ba:c7:40:7b:d6:97:a0:3a:9b:
         95:d4:81:b7:6d:79:f3:41:69:6d:db:6f:d1:9f:cd:9b:f1:8e:
         05:cc:c3:01:3f:18:43:19:8e:62:7a:33:d3:61:95:51:2b:a7:
         66:f2:06:22:8e:41:68:8e:57:0d:c0:e6:91:26:8f:1f:fe:c3:
         db:d8:7c:08:b3:5c:5e:9e:d4:b8:be:58:c7:db:7d:5c:93:a0:
         6b:eb:95:f7:b5:06:49:af:56:69:ce:a7:82:bd:64:aa:57:06:
         de:2e:82:e5:99:4d:07:41:30:f8:1a:9e:b3:41:1a:e7:ad:b8:
         ad:2b:94:f0:ec:60:25:67:97:03:b9:91:0e:50:a2:72:df:d8:
         92:3f:eb:ae:f0:66:cc:18:f1:c7:c4:62:c9:11:75:b2:10:67:
         63:bc:c4:a6
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUcO0+9vFw8vJ5NVf+0rUlYrW8dbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ2NTA2NkE0NDA0OTU3OTY1QkMxRDdFMUJGRTU4MjYx
MUU2OTYxODAeFw0yNjEwMDIyMTE5MDRaFw0yNjEwMDQwMDM5MDRaMDMxMTAvBgNV
BAMTKEFDNzRDQjEyREEyMTgxMTAyNUQyNTgxMDQyODZBOEI5NjMzOTBGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa84owEVTdzniYBubIpFfPWHCi
ZVazCb3b16QkcyAdP3PL0iS+pXTtmTGcUZp4kOjhX0SM/Hf6XT4jdSMobADspzxi
CYQPE7qq5zy6FyQEqbI5U6RS8BbEqdhGxmqWrdhAMjenx5uVN3aAV2aggcf4jR0E
lFgCQR84WLA9OD20AVxgtW+dy85KQgqrb4jc75J2N9gHar4tSW0F32gLQSN8hNPF
g1BrAz4JzTouiM7tKu2z2LciQ2Kk840lfV9PJvFnBg/p7vO0ofE6LztPLgAWkdPu
a+9J0BuLuauA+nEB9lH6cp+58NaQ5zqmbWLjXSZFSreRpuJZ1mSfREaU56VpAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUrHTLEtohgRAl0lgQQoaouWM5D4cwHwYDVR0j
BBgwFoAUJGUGakQElXllvB1+G/5YJhHmlhgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFJDTE9V
RC8wLzI0NjUwNjZBNDQwNDk1Nzk2NUJDMUQ3RTFCRkU1ODI2MTFFNjk2MTguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjQ2NTA2NkE0NDA0OTU3OTY1QkMxRDdFMUJG
RTU4MjYxMUU2OTYxOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RSQ0xPVUQvMC8yNDY1MDY2QTQ0
MDQ5NTc5NjVCQzFEN0UxQkZFNTgyNjExRTY5NjE4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2pGL8+C
XzPYJvgpCJw5S5IivtgZNNqE7hXxUIC4g5bIal/Mr0eRmDLEredhGCjJLuNSMxy5
m88Yt3Cmd0VrX6ryeCgGkxonFE6/QH7DhFISOAciWyF6ekoKbVAsKh4U5zoausdA
e9aXoDqbldSBt21580Fpbdtv0Z/Nm/GOBczDAT8YQxmOYnoz02GVUSunZvIGIo5B
aI5XDcDmkSaPH/7D29h8CLNcXp7UuL5Yx9t9XJOga+uV97UGSa9Wac6ngr1kqlcG
3i6C5ZlNB0Ew+Bqes0Ea5624rSuU8OxgJWeXA7mRDlCict/Ykj/rrvBmzBjxx8Ri
yRF1shBnY7zEpg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:09 2026 by rpki-client