Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          PLQ9fVBOawqtzKMbGbJVFXms2XT6vR5/bylaEjTefe8=
Subject key identifier:   40:25:85:DA:D9:C9:47:62:AE:33:33:3A:EE:A7:95:69:92:7C:3D:2A
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       152B667F83686EA5FACBCA273BC30FABFE327E78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          91
Signing time:             Wed 26 Aug 2026 08:52:57 +0000
Manifest this update:     Wed 26 Aug 2026 08:47:57 +0000
Manifest next update:     Thu 27 Aug 2026 11:20:57 +0000
Files and hashes:         1: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
                          2: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: lzodBgSK2r0pnLXh3llCJSdFE8es0lDBy4pmGggmeVo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 11:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2b:66:7f:83:68:6e:a5:fa:cb:ca:27:3b:c3:0f:ab:fe:32:7e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: Aug 26 08:47:57 2026 GMT
            Not After : Aug 27 11:20:57 2026 GMT
        Subject: CN=402585DAD9C94762AE33333AEEA79569927C3D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:88:06:05:b5:1b:35:5c:81:de:95:62:57:
                    78:c0:8b:45:8a:78:88:f2:63:43:b9:5c:f0:e2:4b:
                    fe:1c:e8:6a:7b:d4:09:cf:fc:30:48:41:c0:b9:f0:
                    ad:1e:2d:ce:23:8b:24:0c:ee:7d:41:f6:71:a0:b9:
                    52:7d:58:54:40:11:c2:67:fa:b4:3e:22:3a:dc:5a:
                    f7:45:8c:fc:6d:78:4c:61:07:07:be:68:cc:37:63:
                    0e:ed:b5:2c:2f:f3:9b:e2:4e:cb:b5:8b:88:1b:68:
                    c2:76:8d:d6:93:46:32:63:ff:a0:92:09:6e:8c:97:
                    51:76:34:67:ed:48:dc:5f:8c:9e:25:8a:f4:f6:16:
                    c8:21:ff:0c:07:51:39:a7:bf:a1:a9:f7:aa:7b:df:
                    71:5f:a7:e4:5b:4a:73:85:2a:58:ea:a9:6e:ca:44:
                    c5:1a:ac:d1:1c:e7:68:05:38:7a:cd:d5:8a:75:56:
                    d2:95:49:e9:14:ff:6e:15:ee:b1:87:12:99:d6:b7:
                    0c:90:dd:25:d9:c1:86:42:16:36:5b:7a:d2:36:45:
                    2f:6b:28:34:19:ee:26:0d:34:e7:f9:57:b9:63:18:
                    39:d6:4e:8d:6f:5c:6f:b1:e4:b8:22:0e:fb:48:d3:
                    34:4d:5f:11:e1:fe:43:a2:79:6e:ec:75:08:1b:a2:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:85:DA:D9:C9:47:62:AE:33:33:3A:EE:A7:95:69:92:7C:3D:2A
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:88:ff:96:b2:44:0d:1c:b2:a3:74:c5:4b:89:64:5e:99:b0:
         b3:7b:7b:e8:8b:a8:31:46:7e:db:95:c5:dc:dd:cf:84:b8:7b:
         52:ca:91:1f:28:1b:7b:f7:94:2b:26:7a:33:b5:a4:af:f9:0d:
         d2:ae:ad:d5:a4:2c:89:5a:53:aa:3d:fc:1d:bf:41:cf:34:aa:
         3d:34:00:c1:86:30:d5:7e:13:c6:b7:10:b8:23:a0:5d:08:55:
         7c:03:73:1b:86:5c:7a:b5:49:71:26:c0:2e:0e:ad:43:9f:1b:
         d6:99:a9:7f:04:0c:72:27:83:ea:8b:5a:62:95:e5:26:06:04:
         04:85:91:b9:86:d2:3e:9d:57:49:5f:12:c7:dc:26:cd:fe:7a:
         f6:73:d3:04:cd:da:a8:49:d3:4e:be:86:b8:36:4a:1b:cd:7d:
         71:25:f3:82:ef:3f:df:6d:ec:d5:98:29:df:bb:4a:dd:48:de:
         7a:64:e1:63:a2:7f:85:2a:87:d1:dc:d0:a7:d9:29:a3:76:a5:
         4c:30:5e:57:e8:f7:9c:d6:f6:3e:7f:cd:ab:4f:c6:18:f6:a4:
         55:97:34:c5:fa:af:c2:cd:00:9a:46:07:f8:78:41:50:2d:3a:
         ba:76:d8:d7:ac:85:39:44:90:dd:d9:b8:bd:c8:59:18:df:83:
         c9:2c:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:18 2026 by rpki-client