Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
File:                     D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft (raw, json)
Hash identifier:          QGXoYrU5PFHdiakV2b8Fj8lflTjJA+nz1tsweL/ge+0=
Subject key identifier:   2F:FA:69:BC:A2:9F:87:A9:86:B1:00:8C:F9:BA:C9:F3:D8:0D:74:AD
Authority key identifier: D0:8D:E0:CF:42:74:6B:1C:30:6B:D2:5A:DE:9B:2B:D0:FC:98:87:A3
Certificate issuer:       /CN=D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3
Certificate serial:       1A0FD88B7C0D9E20B43B7FEDBADC9ADC0C333AB5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 08:03:53 +0000
Manifest this update:     Sat 03 Oct 2026 07:58:53 +0000
Manifest next update:     Sun 04 Oct 2026 09:38:53 +0000
Files and hashes:         1: D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl (hash: Fgjy/mxhOBA/ryvLnAeC055f5ov0PYfCYO1vFNSbUqw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl
                          rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:d8:8b:7c:0d:9e:20:b4:3b:7f:ed:ba:dc:9a:dc:0c:33:3a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3
        Validity
            Not Before: Oct  3 07:58:53 2026 GMT
            Not After : Oct  4 09:38:53 2026 GMT
        Subject: CN=2FFA69BCA29F87A986B1008CF9BAC9F3D80D74AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:9a:82:85:6d:3e:18:0e:91:8e:75:87:4d:
                    c6:16:88:f2:da:dd:60:1b:c9:ce:0d:35:5c:1a:9c:
                    16:ff:2f:76:9c:d0:8c:eb:f7:d9:46:f3:80:41:c1:
                    99:de:e8:27:50:2a:9e:d9:a3:b3:07:69:2a:43:b2:
                    5d:a9:e1:86:47:36:46:03:13:2d:54:b8:9b:53:3e:
                    1c:4e:4f:c5:e2:c6:2f:4d:b5:72:e8:4b:99:a3:b0:
                    4a:c5:e5:3e:26:4c:9c:0a:c7:d7:e2:3c:9e:f4:c4:
                    1b:2d:6e:4c:9c:77:17:75:80:c6:f3:59:48:a4:39:
                    90:97:60:3d:f4:b0:d3:d9:67:fa:d6:20:80:2a:b0:
                    bf:d7:54:72:a6:95:32:0f:5a:5a:d4:ee:10:4f:03:
                    46:57:0d:b7:67:08:1e:34:33:41:9c:14:79:66:85:
                    9d:78:02:ef:1d:78:de:b4:cc:81:52:36:f9:c3:65:
                    1f:ae:6c:21:c2:44:65:e7:65:03:31:a1:4b:43:f0:
                    45:88:f2:80:9f:63:21:f4:86:27:86:8d:b6:43:ba:
                    a2:5a:9a:27:73:26:61:9a:87:04:e8:2c:d9:b5:8d:
                    d3:12:c7:eb:ea:d4:d1:66:58:e3:ff:84:49:bf:05:
                    74:ba:21:86:67:ab:56:e3:75:9d:69:0a:ac:b6:00:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FA:69:BC:A2:9F:87:A9:86:B1:00:8C:F9:BA:C9:F3:D8:0D:74:AD
            X509v3 Authority Key Identifier:
                keyid:D0:8D:E0:CF:42:74:6B:1C:30:6B:D2:5A:DE:9B:2B:D0:FC:98:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:41:71:e9:72:7d:fc:6b:8b:33:14:95:c5:39:df:5e:49:a5:
         4c:02:66:e7:63:7a:3e:22:bd:ba:0f:61:3d:24:6a:f7:58:2f:
         ab:47:06:85:16:fa:57:65:c1:21:2f:8d:16:fa:f2:9b:02:c5:
         2c:21:1c:d6:08:97:1a:aa:17:eb:3a:f4:08:14:f5:57:8b:92:
         d1:e9:1d:44:d0:f0:9e:1d:08:89:d9:f8:01:92:38:52:ab:0a:
         f0:e3:13:81:66:68:01:36:d5:39:60:c6:4e:a6:12:82:ee:8b:
         60:75:f5:00:b6:b6:75:67:29:a0:47:01:d0:04:38:32:be:72:
         fc:d7:38:02:95:4c:54:5f:c2:ec:c1:76:7b:9a:58:9f:ec:cd:
         93:2a:34:55:d5:ec:77:c1:a3:be:bd:6a:49:5e:ed:d0:c7:fe:
         a3:82:12:9e:09:85:bd:f9:ee:d4:e9:6e:34:a3:d3:e9:3c:b0:
         ed:5a:c0:59:4d:86:1c:26:0a:b0:31:f7:95:7d:13:d8:ca:b4:
         d5:c6:93:59:98:e8:a5:65:e6:9b:a7:81:f6:fc:5a:40:a6:98:
         3a:04:e9:a4:4f:60:7e:25:70:b2:78:74:75:be:a9:ee:97:6d:
         a1:4b:2b:90:68:41:c7:55:14:cf:7f:1b:63:24:5a:79:74:b9:
         ba:f1:6f:6f
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUGg/Yi3wNniC0O3/tutya3AwzOrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA4REUwQ0Y0Mjc0NkIxQzMwNkJEMjVBREU5QjJCRDBG
Qzk4ODdBMzAeFw0yNjEwMDMwNzU4NTNaFw0yNjEwMDQwOTM4NTNaMDMxMTAvBgNV
BAMTKDJGRkE2OUJDQTI5Rjg3QTk4NkIxMDA4Q0Y5QkFDOUYzRDgwRDc0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiY5qChW0+GA6RjnWHTcYWiPLa
3WAbyc4NNVwanBb/L3ac0Izr99lG84BBwZne6CdQKp7Zo7MHaSpDsl2p4YZHNkYD
Ey1UuJtTPhxOT8Xixi9NtXLoS5mjsErF5T4mTJwKx9fiPJ70xBstbkycdxd1gMbz
WUikOZCXYD30sNPZZ/rWIIAqsL/XVHKmlTIPWlrU7hBPA0ZXDbdnCB40M0GcFHlm
hZ14Au8deN60zIFSNvnDZR+ubCHCRGXnZQMxoUtD8EWI8oCfYyH0hieGjbZDuqJa
midzJmGahwToLNm1jdMSx+vq1NFmWOP/hEm/BXS6IYZnq1bjdZ1pCqy2AA2/AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUL/ppvKKfh6mGsQCM+brJ89gNdK0wHwYDVR0j
BBgwFoAU0I3gz0J0axwwa9Ja3psr0PyYh6MwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR09ER0FN
RS8wL0QwOERFMENGNDI3NDZCMUMzMDZCRDI1QURFOUIyQkQwRkM5ODg3QTMuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRDA4REUwQ0Y0Mjc0NkIxQzMwNkJEMjVBREU5
QjJCRDBGQzk4ODdBMy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dPREdBTUUvMC9EMDhERTBDRjQy
NzQ2QjFDMzA2QkQyNUFERTlCMkJEMEZDOTg4N0EzLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Fx6XJ9
/GuLMxSVxTnfXkmlTAJm52N6PiK9ug9hPSRq91gvq0cGhRb6V2XBIS+NFvrymwLF
LCEc1giXGqoX6zr0CBT1V4uS0ekdRNDwnh0Iidn4AZI4UqsK8OMTgWZoATbVOWDG
TqYSgu6LYHX1ALa2dWcpoEcB0AQ4Mr5y/Nc4ApVMVF/C7MF2e5pYn+zNkyo0VdXs
d8Gjvr1qSV7t0Mf+o4ISngmFvfnu1OluNKPT6Tyw7VrAWU2GHCYKsDH3lX0T2Mq0
1caTWZjopWXmm6eB9vxaQKaYOgTppE9gfiVwsnh0db6p7pdtoUsrkGhBx1UUz38b
YyRaeXS5uvFvbw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:47:09 2026 by rpki-client