Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          3akNccKEoXwgNlH3gqWVJ2Ur1Ckj9ajahLpEpPKPvzc=
Subject key identifier:   76:32:A4:53:55:89:AC:73:81:D3:A2:D3:85:39:C4:BA:E8:FE:AF:A8
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       1F1D907D01C6FD15A5BD46C4E1B090BAE2E54C27
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 08:58:28 +0000
Manifest this update:     Tue 30 Jun 2026 08:53:28 +0000
Manifest next update:     Wed 01 Jul 2026 12:07:28 +0000
Files and hashes:         1: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: ELfduwLB7UuvEzb4llFvg2KNgrdUIUUlU0O3i4BOsX8=)
                          2: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 12:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1d:90:7d:01:c6:fd:15:a5:bd:46:c4:e1:b0:90:ba:e2:e5:4c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Jun 30 08:53:28 2026 GMT
            Not After : Jul  1 12:07:28 2026 GMT
        Subject: CN=7632A4535589AC7381D3A2D38539C4BAE8FEAFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:56:53:7a:1f:9d:56:db:51:87:6d:c6:b3:
                    53:01:08:7b:6f:10:b4:67:52:dd:2a:0c:2e:21:88:
                    67:4f:41:22:7c:7f:d4:3b:0a:16:ab:da:38:b6:98:
                    94:09:d5:02:c5:3e:ed:49:bb:04:79:b9:53:89:2b:
                    30:32:24:23:18:0c:a0:79:a3:40:d9:16:69:09:9a:
                    2b:15:f7:74:4a:98:d7:0a:9c:9b:d4:47:e0:62:f5:
                    c5:87:d1:e3:09:b5:6d:91:ee:65:eb:6b:64:32:b1:
                    e9:b0:66:2d:84:8e:34:61:ae:8f:d4:35:d9:24:fa:
                    06:31:2d:65:42:5b:07:08:08:fe:96:d8:90:54:9e:
                    a9:80:83:1f:16:25:0a:07:d7:4a:82:f8:a5:6d:24:
                    12:ad:9a:9f:e2:77:21:22:47:73:16:a8:69:e8:80:
                    a7:2b:98:e2:03:ca:db:78:bb:70:2b:8c:3c:5d:17:
                    67:5d:af:d6:a8:10:59:bc:b8:05:46:e6:c0:a0:fa:
                    9c:c7:e7:70:25:c0:d1:9d:0c:cb:9b:eb:8b:5b:26:
                    06:1a:8f:16:ef:69:9a:40:17:48:f1:5c:33:12:af:
                    67:61:bc:c9:18:5d:de:26:be:f7:5c:8e:dc:7c:ba:
                    a3:5d:ce:cd:cd:34:72:ed:14:ed:99:d0:89:91:16:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:32:A4:53:55:89:AC:73:81:D3:A2:D3:85:39:C4:BA:E8:FE:AF:A8
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:32:7c:25:b1:0e:5e:9e:41:1c:d8:ad:74:84:65:cb:db:
         8a:d9:ab:16:67:2a:a8:aa:b4:75:80:8a:f4:02:a5:86:19:f0:
         c1:d1:a4:79:cc:09:4a:ec:4f:aa:c0:79:c2:5c:4c:4a:a1:e5:
         7e:b2:84:0b:cc:e1:04:1b:2a:c2:4e:b4:b4:80:df:b0:d9:e1:
         62:76:4b:54:72:0a:90:4c:29:df:30:bd:02:6a:fd:bf:73:86:
         d4:7f:61:0e:b0:03:db:e2:cd:7c:00:bc:40:32:58:7c:f6:9e:
         00:ab:b7:0e:ca:0d:31:70:f0:8d:31:7b:92:5d:56:d1:14:da:
         fc:98:c5:95:11:79:85:07:1f:e1:70:03:6e:20:84:e7:d8:32:
         1f:87:9d:71:27:50:aa:a1:70:ab:d9:1f:d8:71:62:b3:f5:14:
         dc:86:e8:0e:6e:93:50:04:51:4e:b7:19:41:cb:5b:ce:06:a4:
         2e:d5:0a:68:97:10:02:16:74:3c:dd:70:6c:40:db:e3:ad:20:
         9c:d0:43:9f:38:fc:b3:d9:e4:b3:f1:c9:a5:c1:82:9c:88:a8:
         b5:3b:40:0b:98:e0:3a:a9:f0:d9:76:6f:79:a1:02:93:64:38:
         f0:d3:1d:24:a2:c8:fa:fe:51:39:7d:46:0d:35:1f:0a:4b:2e:
         12:9f:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:14 2026 by rpki-client