Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
File:                     BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft (raw, json)
Hash identifier:          j5jJehi5BGxZPwjV9/0ufYUQui45pz2j5rx0qY6gSLE=
Subject key identifier:   09:ED:E6:89:E0:45:8F:9F:11:65:1F:0C:63:3B:49:D3:23:CE:98:99
Authority key identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1
Certificate issuer:       /CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
Certificate serial:       6A225C23D8467E1C897442BCAD9BED928BD941D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
Manifest number:          C5
Signing time:             Tue 06 Oct 2026 06:36:58 +0000
Manifest this update:     Tue 06 Oct 2026 06:31:58 +0000
Manifest next update:     Wed 07 Oct 2026 09:57:58 +0000
Files and hashes:         1: BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl (hash: 2UkrnavYPMqDteYB08Qki1RTPwqGQE/kwDIBG3vx/Gk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl
                          rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:5c:23:d8:46:7e:1c:89:74:42:bc:ad:9b:ed:92:8b:d9:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
        Validity
            Not Before: Oct  6 06:31:58 2026 GMT
            Not After : Oct  7 09:57:58 2026 GMT
        Subject: CN=09EDE689E0458F9F11651F0C633B49D323CE9899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:a7:94:bf:51:b2:f4:15:d9:6a:7d:5f:cc:
                    e6:d9:a0:c1:a4:65:66:c7:ed:96:4e:01:62:41:8a:
                    19:da:50:06:08:35:01:b3:18:69:c0:fc:43:88:fb:
                    16:63:af:39:cb:36:fa:29:8c:04:1f:8a:8d:4a:96:
                    b6:b4:93:92:32:bd:45:c8:2b:c4:e9:35:43:0d:65:
                    50:d8:a4:db:94:81:5f:2e:ed:4e:ca:b2:d5:dd:4f:
                    c6:9d:7d:5e:a8:47:52:ef:ea:b9:71:60:97:33:73:
                    af:85:6e:38:37:a6:ec:dc:73:1c:44:cc:e8:ff:d1:
                    02:d8:2c:e0:cc:46:04:ae:63:73:ea:7f:62:1e:4c:
                    10:62:9e:a7:19:ac:c3:f7:5b:aa:6c:e0:c1:86:81:
                    91:c6:4d:67:3e:fa:f3:a1:52:9a:5d:57:92:8e:80:
                    33:b8:5e:df:2a:24:ac:80:cd:63:2f:65:19:a3:06:
                    cf:bb:a6:4e:b0:1f:ec:23:c3:7d:f3:a5:25:48:f7:
                    6c:4d:f9:8d:b7:e8:e6:34:4e:00:6f:43:28:17:c1:
                    f0:d0:6e:9a:5f:77:1e:41:61:dd:e2:b6:10:06:3a:
                    3f:e9:1a:c8:61:35:ee:81:61:fd:71:b8:b2:9e:d3:
                    a2:5b:d4:ee:5d:03:04:ec:86:58:46:be:c4:d9:79:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:E6:89:E0:45:8F:9F:11:65:1F:0C:63:3B:49:D3:23:CE:98:99
            X509v3 Authority Key Identifier:
                keyid:BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:e5:81:46:2d:88:c2:a3:05:49:a1:48:a4:b2:9c:2f:d1:
         ff:b3:cb:27:53:c1:37:f8:0b:31:d6:93:2d:aa:a0:e2:8c:87:
         10:5c:62:70:da:38:95:d2:89:34:91:43:9e:65:86:8d:a5:6d:
         4b:c9:7c:4f:6e:38:ae:fc:4e:57:1b:9e:96:b2:8f:11:1c:a9:
         ab:9c:af:2b:b2:0c:5c:2c:d3:ac:e4:07:2b:c6:ef:07:39:83:
         76:35:8a:9a:72:a2:a0:62:b7:12:a8:d3:56:0a:02:a1:59:24:
         24:4f:a3:1e:07:84:0f:5e:f5:3c:7a:6d:a8:5e:95:cc:53:e1:
         95:5a:e1:48:8e:da:2a:0d:db:d3:b9:a0:b0:af:f0:94:ec:00:
         cd:47:b4:2e:3d:b2:bc:ec:f2:2f:a2:2a:aa:ab:20:cc:35:a8:
         75:33:23:9a:17:ae:b5:a0:d4:14:14:d4:4f:10:50:3c:9b:9f:
         80:cd:b6:05:47:01:58:ad:66:98:60:24:f4:c7:e8:77:52:9a:
         05:06:1d:cf:12:2f:5e:87:a8:fa:55:43:1f:7c:de:33:f9:6e:
         13:21:1a:cc:ba:b5:c0:42:c1:2d:42:48:28:bc:5e:aa:78:3a:
         0e:58:63:b3:e5:4d:48:76:14:06:58:4c:0b:e9:dc:f7:ae:4e:
         05:c0:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:09:35 2026 by rpki-client