Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          3HXN+3yguK/8TiJ8fBNLewP6otvYx6TiagZtAJC9Euk=
Subject key identifier:   C2:5F:83:86:17:04:28:4E:9C:2D:EC:EF:5A:89:3D:F9:7E:6F:98:7C
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       5E8763B9D0E955BAC2D39761169A87EEFD97ADDF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          C8
Signing time:             Tue 06 Oct 2026 17:30:42 +0000
Manifest this update:     Tue 06 Oct 2026 17:25:42 +0000
Manifest next update:     Wed 07 Oct 2026 18:14:42 +0000
Files and hashes:         1: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: U/h1kKUgCr78A3OjMXfNOhOf4dzZEd3uPiDiqWgwKck=)
                          2: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 18:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:87:63:b9:d0:e9:55:ba:c2:d3:97:61:16:9a:87:ee:fd:97:ad:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Oct  6 17:25:42 2026 GMT
            Not After : Oct  7 18:14:42 2026 GMT
        Subject: CN=C25F83861704284E9C2DECEF5A893DF97E6F987C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:43:a5:0f:d9:ad:ff:b9:ba:ca:07:9b:f0:
                    22:22:d1:52:88:6c:31:0b:bb:e5:b3:cf:cc:79:0b:
                    c1:ce:57:60:b7:97:fa:e5:f2:63:b8:18:13:66:7a:
                    23:92:d7:c1:08:83:9d:cf:73:c3:8c:71:d7:da:cf:
                    63:ac:3f:4a:93:64:da:60:75:bb:f8:25:b2:66:a7:
                    c9:aa:48:0d:60:d7:13:9a:11:e2:b3:ef:5d:a2:8d:
                    8f:2e:27:59:da:22:6b:8b:52:78:1e:51:b2:64:cf:
                    b7:e1:aa:77:40:47:d9:d0:2f:0f:ff:9c:24:a6:d6:
                    0c:6b:f4:05:ca:77:7a:77:fc:5d:4f:a2:9c:4d:6c:
                    7e:37:bd:c3:3e:c9:45:45:41:25:fa:77:99:57:65:
                    d2:b5:da:53:88:55:a9:8e:31:b5:05:ac:db:2c:1e:
                    d8:33:73:2a:09:ae:8b:32:13:9f:77:7a:b3:59:37:
                    2d:24:97:a2:49:8e:ef:77:38:04:35:1b:68:b0:78:
                    80:75:37:e2:f6:a3:03:9d:2d:3a:a6:80:1d:b0:88:
                    3c:b3:10:40:ba:21:59:c1:f5:fd:14:5e:a5:ea:8d:
                    e2:b5:99:ee:24:bc:a1:f2:07:ea:00:2c:6c:f1:8e:
                    c4:b2:18:23:b4:47:68:84:ad:82:1f:6d:1d:c1:b9:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:83:86:17:04:28:4E:9C:2D:EC:EF:5A:89:3D:F9:7E:6F:98:7C
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:d4:91:27:60:65:1f:0c:8a:47:5a:66:5b:25:68:73:c7:
         cc:41:65:e9:31:52:d2:12:56:7b:ef:68:5f:df:98:b7:b5:06:
         48:25:ad:1c:4d:46:c5:d9:f8:bc:33:2b:10:92:04:b9:6b:70:
         cd:28:f4:f7:04:c9:19:f3:8a:95:7a:ec:c8:d0:a6:e8:68:41:
         8e:ff:9b:b2:3d:c6:b1:44:21:c1:0d:8f:40:60:96:04:47:13:
         76:5c:5b:c4:f5:bb:cb:89:82:c1:68:7e:f2:e8:56:50:a8:46:
         99:6b:4f:d3:76:a3:dc:ec:f4:14:d7:36:3c:0c:40:08:64:ac:
         96:d2:e6:82:2c:b6:6c:da:40:6a:8f:db:e1:eb:b3:6b:d7:03:
         51:67:e7:4b:ed:26:65:78:d1:0d:c8:dc:d2:a4:aa:52:c2:89:
         74:9d:ae:1b:34:89:de:08:2d:8a:55:a7:30:8e:37:8e:f2:bf:
         b5:7c:7a:9e:ad:07:44:05:53:f9:09:22:09:f7:99:cc:32:96:
         20:01:53:cf:43:45:f5:ae:c0:62:ca:5b:70:6f:09:f9:6e:54:
         3c:65:4a:b7:f5:bb:e2:d5:e3:8e:fa:d9:83:b7:b0:12:d7:01:
         64:48:a2:64:aa:0a:27:b5:2f:25:29:9e:08:ad:24:1d:2c:9c:
         2a:a5:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:55:58 2026 by rpki-client