Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          phe55G99l9+myJAmqqQpYFdD5Uoxc+9N+nqyqGwA4v0=
Subject key identifier:   82:6C:12:AF:C7:37:2A:25:56:7B:16:13:F9:88:AA:60:A8:9B:CB:B4
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       69B079464FE3ECE91D9A705B655390059334C02D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          18
Signing time:             Thu 28 May 2026 01:43:47 +0000
Manifest this update:     Thu 28 May 2026 01:38:47 +0000
Manifest next update:     Fri 29 May 2026 04:39:47 +0000
Files and hashes:         1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: enBg4u3uHoMevJdb1QlddEC30Yo766TpRSV4I4frexY=)
                          2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 04:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:79:46:4f:e3:ec:e9:1d:9a:70:5b:65:53:90:05:93:34:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: May 28 01:38:47 2026 GMT
            Not After : May 29 04:39:47 2026 GMT
        Subject: CN=826C12AFC7372A25567B1613F988AA60A89BCBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:a3:bd:27:f3:cf:bd:0b:da:1f:78:bc:5a:
                    a7:5f:a0:83:67:0d:4e:c9:37:88:e4:e2:af:2f:72:
                    d6:50:02:f7:cb:ab:91:a9:a9:c9:4b:f2:0c:4a:a4:
                    46:be:79:b9:d3:88:a5:8e:54:e4:79:9d:c4:19:df:
                    62:56:bd:1b:2f:64:3e:5d:38:13:10:c7:99:b7:b4:
                    f1:d4:44:01:95:1a:3b:3b:27:cf:9d:3a:8d:34:99:
                    a4:c5:69:fc:d8:b7:0f:2e:7e:4e:38:66:a5:c3:59:
                    ca:8b:57:19:c1:6f:a1:d9:26:d5:1d:b7:0d:3e:be:
                    b3:21:9e:d7:80:28:a5:16:a0:1a:ed:fb:9e:ac:1b:
                    38:cb:76:4d:52:42:ad:5b:dc:05:23:9d:24:66:12:
                    a7:ad:ce:90:62:6d:c8:c9:4f:26:3a:f4:63:2d:f0:
                    a7:42:5f:ff:93:aa:04:90:ea:4b:8d:af:3d:2d:37:
                    3b:c7:cb:8c:f5:e0:c7:87:3b:4c:c4:c9:a0:e8:cf:
                    5b:5f:16:0f:8d:bd:1e:69:8c:ac:2f:2d:6e:a5:0b:
                    e4:95:50:c5:85:bd:2a:da:04:a4:6f:96:cc:7a:e6:
                    c3:9a:d3:b0:10:c1:54:01:52:76:b0:c4:06:98:66:
                    3c:73:f3:42:34:30:14:f6:e2:ac:9b:9e:6b:ef:3e:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:12:AF:C7:37:2A:25:56:7B:16:13:F9:88:AA:60:A8:9B:CB:B4
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b4:c1:f5:16:c2:8a:bf:a9:f1:6f:b6:b6:d5:47:62:76:b1:
         29:9b:e7:dd:bd:cc:f9:88:6a:c2:47:6b:8d:d4:a8:5f:ae:cf:
         38:f1:50:b6:03:c1:e1:b0:d3:39:a0:e0:2f:c3:45:e6:09:36:
         45:61:21:dd:d7:1a:b9:df:aa:b5:c7:75:54:7c:eb:eb:61:86:
         04:a7:e2:b3:bf:a7:ef:a5:55:47:bd:f7:09:ea:6c:7d:6b:68:
         67:d7:f3:9d:b9:55:af:dd:27:97:79:fa:e4:07:2d:97:dd:76:
         c9:0b:3d:88:56:e4:3d:d7:1d:8e:42:e4:45:96:f5:da:7b:93:
         7c:2a:f4:12:18:95:e3:2c:75:71:3c:f5:5b:48:c9:18:0e:2c:
         03:76:57:0d:a0:ba:d1:b5:b4:ad:b1:89:d3:41:97:5d:b6:ad:
         b9:11:ea:a5:1d:2e:6c:45:7f:0c:0a:46:a7:51:4d:85:59:f1:
         77:61:c8:84:c0:c6:7b:a7:96:c9:7a:59:67:12:74:f4:ae:e5:
         3f:66:48:9c:48:ca:e8:62:46:f9:46:8c:70:04:8d:da:45:40:
         84:8f:bb:cd:67:25:bd:cb:86:60:8a:d5:0c:45:01:83:07:e9:
         3c:e9:e5:7e:3e:39:39:b5:ac:73:82:45:6b:10:73:a8:13:ee:
         33:38:91:d2
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUabB5Rk/j7OkdmnBbZVOQBZM0wC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0EzQzVBOEU1QTM1
OEI5MDg5QjAeFw0yNjA1MjgwMTM4NDdaFw0yNjA1MjkwNDM5NDdaMDMxMTAvBgNV
BAMTKDgyNkMxMkFGQzczNzJBMjU1NjdCMTYxM0Y5ODhBQTYwQTg5QkNCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGqO9J/PPvQvaH3i8WqdfoINn
DU7JN4jk4q8vctZQAvfLq5GpqclL8gxKpEa+ebnTiKWOVOR5ncQZ32JWvRsvZD5d
OBMQx5m3tPHURAGVGjs7J8+dOo00maTFafzYtw8ufk44ZqXDWcqLVxnBb6HZJtUd
tw0+vrMhnteAKKUWoBrt+56sGzjLdk1SQq1b3AUjnSRmEqetzpBibcjJTyY69GMt
8KdCX/+TqgSQ6kuNrz0tNzvHy4z14MeHO0zEyaDoz1tfFg+NvR5pjKwvLW6lC+SV
UMWFvSraBKRvlsx65sOa07AQwVQBUnawxAaYZjxz80I0MBT24qybnmvvPhh/AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUgmwSr8c3KiVWexYT+YiqYKiby7QwHwYDVR0j
BBgwFoAUFimqZPySF4A/ovyjxajlo1i5CJswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP
VURfUC8xLzE2MjlBQTY0RkM5MjE3ODAzRkEyRkNBM0M1QThFNUEzNThCOTA4OUIu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzMvMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0Ez
QzVBOEU1QTM1OEI5MDg5Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dNSUNMT1VEX1AvMS8xNjI5
QUE2NEZDOTIxNzgwM0ZBMkZDQTNDNUE4RTVBMzU4QjkwODlCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
HbTB9RbCir+p8W+2ttVHYnaxKZvn3b3M+YhqwkdrjdSoX67POPFQtgPB4bDTOaDg
L8NF5gk2RWEh3dcaud+qtcd1VHzr62GGBKfis7+n76VVR733CepsfWtoZ9fznblV
r90nl3n65Actl912yQs9iFbkPdcdjkLkRZb12nuTfCr0EhiV4yx1cTz1W0jJGA4s
A3ZXDaC60bW0rbGJ00GXXbatuRHqpR0ubEV/DApGp1FNhVnxd2HIhMDGe6eWyXpZ
ZxJ09K7lP2ZInEjK6GJG+UaMcASN2kVAhI+7zWclvcuGYIrVDEUBgwfpPOnlfj45
ObWsc4JFaxBzqBPuMziR0g==
-----END CERTIFICATE-----
Generated at Thu May 28 07:17:22 2026 by rpki-client